Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118698 |
medium | 6.5 | 0.0032 | 2026-10-30 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is | |
CVE-2026-118634 |
medium | 6.4 | 0.0020 | 2026-10-30 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-118500 |
medium | 6.4 | 0.0022 | 2026-10-30 | The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulner | |
CVE-2026-118194 |
medium | 6.5 | 0.0034 | 2026-10-30 | The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass | |
CVE-2026-92574 |
high | 8.8 | 0.0065 | 2026-10-30 | A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a mali | |
CVE-2026-5461 |
medium | 6.5 | 0.0029 | 2026-10-30 | The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all ve | |
CVE-2026-104368 |
high | 8.8 | 0.0035 | 2026-10-30 | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege | |
CVE-2026-103963 |
high | 7.5 | 0.0039 | 2026-10-30 | A flaw was found in glib-networking. When establishing connections using Transport Layer S | |
CVE-2026-43961 |
high | 7.8 | 0.0016 | 2026-10-30 | A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and | |
CVE-2026-96389 |
medium | 6.5 | 0.0016 | 2026-10-30 | Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This is | |
CVE-2026-118584 |
medium | 5.3 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing | |
CVE-2026-118583 |
medium | 5.3 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing | |
CVE-2026-118582 |
high | 7.3 | 0.0023 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA a | |
CVE-2026-118576 |
medium | 6.5 | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118575 |
medium | 6.1 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118574 |
medium | 5.6 | 0.0015 | 2026-10-30 | Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File Syst | |
CVE-2026-118573 |
medium | 4.8 | 0.0014 | 2026-10-30 | Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsin | |
CVE-2026-118572 |
medium | 4.8 | 0.0018 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Log | |
CVE-2026-118571 |
medium | 5.9 | 0.0021 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Al | |
CVE-2026-118570 |
medium | 6.5 | 0.0013 | 2026-10-30 | 1 PoC | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Req |
CVE-2026-118569 |
medium | 5.4 | 0.0018 | 2026-10-30 | 1 PoC | Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This |
CVE-2026-118568 |
low | 3.3 | 0.0014 | 2026-10-30 | Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sy | |
CVE-2026-118567 |
medium | 4.7 | 0.0018 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Bro | |
CVE-2026-118565 |
high | 7.2 | 0.0030 | 2026-10-30 | Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO | |
CVE-2026-118564 |
medium | 6.6 | 0.0024 | 2026-10-30 | Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Dr | |
CVE-2026-118563 |
medium | 6.6 | 0.0024 | 2026-10-30 | Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*. | |
CVE-2026-118562 |
high | 7.2 | 0.0032 | 2026-10-30 | Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Objec | |
CVE-2026-118561 |
high | 7.2 | 0.0030 | 2026-10-30 | External Control of File Name or Path vulnerability in Drupal Single Content Sync allows P | |
CVE-2026-118560 |
medium | 5.1 | 0.0013 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118559 |
medium | 5.3 | 0.0012 | 2026-10-30 | Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe a | |
CVE-2026-118558 |
high | 7.3 | 0.0012 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Sit | |
CVE-2026-118557 |
low | 2.7 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing | |
CVE-2026-118556 |
medium | 6.5 | 0.0025 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing | |
CVE-2026-118555 |
medium | 6.3 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. | |
CVE-2026-118554 |
medium | 5.4 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Co | |
CVE-2026-118553 |
medium | 5.5 | 0.0014 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118552 |
medium | 6.5 | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118551 |
low | 3.1 | 0.0019 | 2026-10-30 | Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intellige | |
CVE-2026-118550 |
medium | 5.9 | 0.0033 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Arti | |
CVE-2026-118549 |
high | 7.1 | 0.0019 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118548 |
low | 3.7 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resour | |
CVE-2026-118546 |
medium | 6.5 | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118545 |
medium | 6.5 | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118544 |
low | 3.7 | 0.0020 | 2026-10-30 | Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Co | |
CVE-2026-118543 |
medium | 5.3 | 0.0016 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site | |
CVE-2026-118542 |
low | 2.7 | 0.0021 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118541 |
medium | 4.3 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118540 |
medium | 5.3 | 0.0024 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118539 |
medium | 6.5 | 0.0067 | 2026-10-30 | Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This | |
CVE-2026-114573 |
high | 8.8 | 0.0036 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili |