Browse All CVEs
10,554 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55979 |
medium | 5.2 | 0.0013 | 2026-10-29 | An improper access control check in CatchPulse's named pipe communication interface could | |
CVE-2026-55980 |
medium | 5.5 | 0.0014 | 2026-10-29 | A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack | |
CVE-2026-8166 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-28146 |
medium | 6.5 | 0.0044 | 2026-10-29 | Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Add | |
CVE-2026-28169 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versi | |
CVE-2026-28178 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. | |
CVE-2026-28179 |
medium | 5.9 | 0.0024 | 2026-10-29 | Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions. | |
CVE-2026-28180 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooC | |
CVE-2026-32469 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions. | |
CVE-2026-32548 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions. | |
CVE-2026-61959 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. | |
CVE-2026-66425 |
medium | 6.5 | 0.0042 | 2026-10-29 | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedbac | |
CVE-2026-66451 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions. | |
CVE-2026-66452 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1 | |
CVE-2026-66678 |
medium | 4.3 | 0.0027 | 2026-10-29 | Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 v | |
CVE-2026-66681 |
medium | 4.3 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions. | |
CVE-2026-66683 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions. | |
CVE-2026-66684 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions. | |
CVE-2026-66685 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions. | |
CVE-2026-66686 |
medium | 6.5 | 0.0017 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database C | |
CVE-2026-66688 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions | |
CVE-2026-66692 |
medium | 4.3 | 0.0027 | 2026-10-29 | Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livr | |
CVE-2026-66695 |
medium | 6.5 | 0.0041 | 2026-10-29 | Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions. | |
CVE-2026-66696 |
medium | 4.3 | 0.0029 | 2026-10-29 | Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 version | |
CVE-2026-66699 |
medium | 5.3 | 0.0029 | 2026-10-29 | Custom role Broken Access Control in Dokan <= 5.0.10 versions. | |
CVE-2026-66701 |
medium | 5.3 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions. | |
CVE-2026-66703 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. | |
CVE-2026-66706 |
medium | 5.9 | 0.0024 | 2026-10-29 | Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions. | |
CVE-2026-18275 |
medium | 6.5 | 0.0039 | 2026-10-29 | Authorization bypass in the process and annotation taxonomy serializers in Scripta eScript | |
CVE-2026-18276 |
medium | 4.3 | 0.0036 | 2026-10-29 | Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 al | |
CVE-2026-19046 |
medium | 4.8 | 0.0020 | 2026-10-29 | A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The imp | |
CVE-2026-66370 |
medium | 4.8 | 0.0040 | 2026-10-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in | |
CVE-2024-6541 |
medium | 6.8 | 0.0034 | 2026-10-29 | The Class Mediator fails to correctly validate or sanitize `messageContext` properties whe | |
CVE-2026-18487 |
medium | 5.4 | 0.0034 | 2026-10-29 | A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attac | |
CVE-2026-19062 |
medium | 5.5 | 0.0041 | 2026-10-29 | A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc | |
CVE-2026-19064 |
medium | 5.3 | 0.0037 | 2026-10-29 | A vulnerability was found in SourceCodester Online Examination & Learning Management Syste | |
CVE-2026-19065 |
medium | 5.3 | 0.0035 | 2026-10-29 | A vulnerability was determined in SourceCodester Online Examination & Learning Management | |
CVE-2026-19066 |
medium | 5.3 | 0.0037 | 2026-10-29 | A vulnerability was identified in SourceCodester Online Examination & Learning Management | |
CVE-2026-19127 |
medium | 6.5 | 0.0031 | 2026-10-29 | An issue in the billing and license activation subsystem allows remote attackers to bypass | |
CVE-2026-19146 |
medium | 5.3 | 0.0031 | 2026-10-29 | Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a rem | |
CVE-2026-41861 |
medium | 4.2 | 0.0021 | 2026-10-29 | Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent | |
CVE-2026-43630 |
medium | 6.3 | 0.0050 | 2026-10-29 | llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the rec | |
CVE-2026-48071 |
medium | 5.8 | 0.0040 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48075 |
medium | 6.5 | 0.0042 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48076 |
medium | 6.5 | 0.0033 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48077 |
medium | 5.3 | 0.0043 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48078 |
medium | 5.3 | 0.0034 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48083 |
medium | 6.5 | 0.0036 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-50159 |
medium | 5.3 | 0.0060 | 2026-10-29 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagram | |
CVE-2026-54717 |
medium | 5.4 | 0.0034 | 2026-10-29 | Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcr |