Browse All CVEs
36,926 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63916 |
high | 8.8 | 0.0036 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB w | |
CVE-2026-63917 |
high | 8.8 | 0.0017 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl | |
CVE-2026-118527 |
medium | 4.3 | 0.0082 | 2026-10-30 | KEV | Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerab |
CVE-2026-93290 |
medium | 6.8 | 0.0011 | 2026-10-30 | Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to | |
CVE-2026-97638 |
high | 7.5 | 0.0056 | 2026-10-30 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPre | |
CVE-2026-9239 |
medium | 6.4 | 0.0032 | 2026-10-30 | The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Att | |
CVE-2026-76012 |
high | 7.5 | 0.0083 | 2026-10-30 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is | |
CVE-2026-96894 |
high | 7.2 | 0.0037 | 2026-10-30 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is | |
CVE-2026-119619 |
medium | 5.5 | 0.0033 | 2026-10-30 | A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1 | |
CVE-2026-13747 |
medium | 6.5 | 0.0039 | 2026-10-30 | The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all version | |
CVE-2026-119113 |
medium | 6.4 | 0.0037 | 2026-10-30 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin f | |
CVE-2026-119176 |
medium | 6.4 | 0.0032 | 2026-10-30 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site | |
CVE-2026-118205 |
high | 7.4 | 0.0047 | 2026-10-30 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for Word | |
CVE-2026-118635 |
medium | 6.5 | 0.0043 | 2026-10-30 | The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plug | |
CVE-2026-115869 |
medium | 6.4 | 0.0030 | 2026-10-30 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-116552 |
medium | 4.7 | 0.0031 | 2026-10-30 | The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site S | |
CVE-2026-115346 |
high | 8.1 | 0.0066 | 2026-10-30 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable | |
CVE-2026-115820 |
medium | 6.5 | 0.0042 | 2026-10-30 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for Wor | |
CVE-2026-112365 |
high | 7.2 | 0.0053 | 2026-10-30 | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solut | |
CVE-2026-110001 |
medium | 5.4 | 0.0034 | 2026-10-30 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-110305 |
high | 7.5 | 0.0061 | 2026-10-30 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Infor | |
CVE-2026-109592 |
medium | 4.3 | 0.0034 | 2026-10-30 | The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPres | |
CVE-2026-109984 |
medium | 5.4 | 0.0040 | 2026-10-30 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-105894 |
high | 8.8 | 0.0032 | 2026-10-30 | The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordP | |
CVE-2026-107630 |
high | 7.5 | 0.0051 | 2026-10-30 | The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordP | |
CVE-2026-104739 |
medium | 4.9 | 0.0079 | 2026-10-30 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerabl | |
CVE-2026-104744 |
high | 7.2 | 0.0028 | 2026-10-30 | The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scri | |
CVE-2026-102918 |
medium | 6.4 | 0.0031 | 2026-10-30 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in a | |
CVE-2025-8574 |
high | 8.7 | 0.0037 | 2026-10-30 | The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all | |
CVE-2026-93291 |
critical | 9.3 | 0.0024 | 2026-10-30 | Omni C20 lacks proper certificate validation which could allow an attacker to perform a ma | |
CVE-2026-110533 |
medium | 6.4 | 0.0032 | 2026-10-30 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scr | |
CVE-2026-102905 |
medium | 6.5 | 0.0042 | 2026-10-30 | The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbit | |
CVE-2026-69446 |
medium | 4.4 | 0.0025 | 2026-10-30 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker t | |
CVE-2026-119763 |
medium | 6.9 | 0.0049 | 2026-10-30 | changelog.com before commit 7b35e829 contains a missing authorization vulnerability that a | |
CVE-2026-119764 |
high | 7.4 | 0.0032 | 2026-10-30 | Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that a | |
CVE-2026-119761 |
medium | 5.3 | 0.0032 | 2026-10-30 | Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scriptin | |
CVE-2026-119762 |
high | 8.7 | 0.0051 | 2026-10-30 | Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contain | |
CVE-2026-63964 |
medium | 5.5 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg | |
CVE-2026-63965 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280 | |
CVE-2026-63966 |
medium | 5.5 | 0.0015 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: | |
CVE-2026-63967 |
high | 7.8 | 0.0016 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: | |
CVE-2026-63968 |
high | 7.5 | 0.0066 | 2026-10-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible in | |
CVE-2026-15555 |
high | 8.8 | 0.0084 | 2026-10-30 | A flaw was found in JBoss marshalling. The Infinispan session replication path deserialize | |
CVE-2026-93289 |
critical | 9.0 | 0.0077 | 2026-10-30 | The affected products are vulnerable to command injection attack that could allow an unaut | |
CVE-2026-37468 |
medium | 6.1 | 0.0026 | 2026-10-30 | Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote | |
CVE-2026-50000 |
medium | 5.0 | 0.0036 | 2026-10-30 | SecureDrop is an open-source whistleblower submission system that media organizations can | |
CVE-2026-61804 |
high | 8.1 | 0.0028 | 2026-10-30 | myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Pro | |
CVE-2026-61805 |
medium | 5.3 | 0.0022 | 2026-10-30 | Frappe Learning Management System (LMS) is a learning system that helps users structure th | |
CVE-2026-61806 |
medium | 5.3 | 0.0024 | 2026-10-30 | Frappe Learning Management System (LMS) is a learning system that helps users structure th | |
CVE-2026-61826 |
critical | 10.0 | 0.0026 | 2026-10-30 | Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_n |