Browse All CVEs
50,450 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-116964 |
high | 8.4 | 0.0034 | 2026-10-31 | A flaw was found in konflux-ci. An attacker with repository write access can achieve arbit | |
CVE-2026-116086 |
high | 8.8 | 0.0031 | 2026-10-31 | A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow | |
CVE-2026-114217 |
high | 8.6 | 0.0009 | 2026-10-31 | A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensi | |
CVE-2026-93834 |
high | 8.8 | 0.0040 | 2026-10-31 | 1 PoC | A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition betwee |
CVE-2026-62439 |
high | 7.0 | 0.0025 | 2026-10-31 | A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculat | |
CVE-2025-2241 |
high | 8.2 | 0.0050 | 2026-10-31 | A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Ma | |
CVE-2026-120070 |
high | 8.8 | 0.0030 | 2026-10-31 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content | |
CVE-2026-119096 |
critical | 9.8 | 0.0046 | 2026-10-31 | The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Byp | |
CVE-2026-118057 |
high | 7.2 | 0.0024 | 2026-10-31 | The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plu | |
CVE-2026-116535 |
medium | 6.4 | 0.0024 | 2026-10-31 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cr | |
CVE-2026-116512 |
critical | 9.8 | 0.0058 | 2026-10-31 | 2 PoC | The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time |
CVE-2026-111592 |
medium | 6.4 | 0.0019 | 2026-10-31 | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Auth | |
CVE-2026-111070 |
medium | 5.4 | 0.0022 | 2026-10-31 | The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulne | |
CVE-2026-110023 |
medium | 5.9 | 0.0029 | 2026-10-31 | The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for W | |
CVE-2026-107759 |
high | 7.2 | 0.0027 | 2026-10-31 | The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross | |
CVE-2026-104012 |
high | 8.8 | 0.0028 | 2026-10-31 | The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress | |
CVE-2026-103997 |
medium | 6.5 | 0.0028 | 2026-10-31 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all vers | |
CVE-2026-103962 |
medium | 6.1 | 0.0022 | 2026-10-31 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content | |
CVE-2026-103898 |
high | 8.1 | 0.0044 | 2026-10-31 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Auth | |
CVE-2025-9462 |
medium | 6.5 | 0.0031 | 2026-10-31 | The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order | |
CVE-2025-11455 |
medium | 4.3 | 0.0019 | 2026-10-31 | The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data | |
CVE-2026-34892 |
medium | 6.5 | 0.0029 | 2026-10-31 | Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows | |
CVE-2026-90960 |
medium | 5.3 | 0.0032 | 2026-10-31 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Ex | |
CVE-2026-89270 |
critical | 9.1 | 0.0039 | 2026-10-31 | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for | |
CVE-2026-88942 |
medium | 6.1 | 0.0027 | 2026-10-31 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected | |
CVE-2026-120040 |
high | 7.5 | 0.0028 | 2026-10-31 | The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exp | |
CVE-2026-120019 |
medium | 5.4 | 0.0022 | 2026-10-31 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t | |
CVE-2026-11396 |
medium | 5.3 | 0.0023 | 2026-10-31 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Au | |
CVE-2026-119980 |
medium | 6.5 | 0.0026 | 2026-10-31 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory pl | |
CVE-2026-119166 |
medium | 5.3 | 0.0029 | 2026-10-31 | The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Refere | |
CVE-2026-119163 |
high | 7.5 | 0.0030 | 2026-10-31 | The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | |
CVE-2026-119162 |
high | 7.2 | 0.0024 | 2026-10-31 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for Word | |
CVE-2026-119089 |
high | 7.2 | 0.0024 | 2026-10-31 | The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin p | |
CVE-2026-119065 |
high | 7.2 | 0.0024 | 2026-10-31 | The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored | |
CVE-2026-118070 |
high | 7.2 | 0.0024 | 2026-10-31 | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting v | |
CVE-2026-116557 |
critical | 9.1 | 0.0035 | 2026-10-31 | The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorize | |
CVE-2026-116548 |
high | 7.2 | 0.0052 | 2026-10-31 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored C | |
CVE-2026-116546 |
medium | 6.4 | 0.0021 | 2026-10-31 | The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin | |
CVE-2026-116522 |
high | 7.2 | 0.0025 | 2026-10-31 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site S | |
CVE-2026-115840 |
high | 7.2 | 0.0024 | 2026-10-31 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored C | |
CVE-2026-111254 |
high | 7.2 | 0.0031 | 2026-10-31 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t | |
CVE-2026-111109 |
medium | 6.1 | 0.0028 | 2026-10-31 | The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the O | |
CVE-2026-110251 |
medium | 5.4 | 0.0032 | 2026-10-31 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media | |
CVE-2026-109386 |
medium | 4.3 | 0.0036 | 2026-10-31 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vuln | |
CVE-2026-109220 |
critical | 9.8 | 0.0052 | 2026-10-31 | The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is v | |
CVE-2026-109217 |
medium | 5.3 | 0.0026 | 2026-10-31 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sen | |
CVE-2026-107765 |
medium | 6.4 | 0.0019 | 2026-10-31 | The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored | |
CVE-2026-107750 |
high | 7.2 | 0.0026 | 2026-10-31 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sto | |
CVE-2026-107653 |
high | 7.2 | 0.0028 | 2026-10-31 | The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subsc | |
CVE-2026-94361 |
medium | 5.3 | 0.0022 | 2026-10-31 | The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify |