Browse All CVEs
10,485 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-109979 |
medium | 4.3 | 0.0030 | 2026-10-29 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Informatio | |
CVE-2026-109980 |
medium | 4.3 | 0.0022 | 2026-10-29 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Informatio | |
CVE-2026-109988 |
medium | 4.4 | 0.0021 | 2026-10-29 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPre | |
CVE-2026-110020 |
medium | 6.5 | 0.0038 | 2026-10-29 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization b | |
CVE-2026-110071 |
medium | 6.4 | 0.0020 | 2026-10-29 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' | |
CVE-2026-110185 |
medium | 5.9 | 0.0055 | 2026-10-29 | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets | |
CVE-2026-111068 |
medium | 4.4 | 0.0021 | 2026-10-29 | The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | |
CVE-2026-111213 |
medium | 4.3 | 0.0022 | 2026-10-29 | The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulne | |
CVE-2026-111372 |
medium | 4.3 | 0.0027 | 2026-10-29 | The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorizati | |
CVE-2026-116609 |
medium | 6.5 | 0.0034 | 2026-10-29 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL In | |
CVE-2026-116610 |
medium | 4.3 | 0.0020 | 2026-10-29 | The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up | |
CVE-2026-116749 |
medium | 6.4 | 0.0019 | 2026-10-29 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored C | |
CVE-2026-116750 |
medium | 6.5 | 0.0026 | 2026-10-29 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to blind SQ | |
CVE-2026-116761 |
medium | 5.4 | 0.0022 | 2026-10-29 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43e | |
CVE-2026-118164 |
medium | 6.4 | 0.0021 | 2026-10-29 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordP | |
CVE-2026-118169 |
medium | 4.9 | 0.0019 | 2026-10-29 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vuln | |
CVE-2026-2839 |
medium | 5.3 | 0.0027 | 2026-10-29 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized ac | |
CVE-2026-76005 |
medium | 6.5 | 0.0028 | 2026-10-29 | The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection vi | |
CVE-2026-76058 |
medium | 5.3 | 0.0026 | 2026-10-29 | The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization byp | |
CVE-2026-76780 |
medium | 6.3 | 0.0021 | 2026-10-29 | The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, | |
CVE-2026-77188 |
medium | 6.4 | 0.0019 | 2026-10-29 | The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to | |
CVE-2026-77871 |
medium | 6.4 | 0.0024 | 2026-10-29 | The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vuln | |
CVE-2026-92098 |
medium | 6.1 | 0.0022 | 2026-10-29 | The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to | |
CVE-2026-101935 |
medium | 6.1 | 0.0025 | 2026-10-29 | The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is | |
CVE-2026-118435 |
medium | 5.4 | 0.0021 | 2026-10-29 | Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulati | |
CVE-2026-85655 |
medium | 4.3 | 0.0027 | 2026-10-29 | The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all | |
CVE-2026-16020 |
medium | 5.4 | 0.0013 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-90720 |
medium | 6.7 | 0.0008 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-105457 |
medium | 6.5 | 0.0042 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-86383 |
medium | 6.8 | 0.0046 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 relea | |
CVE-2026-86386 |
medium | 4.3 | 0.0021 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-86388 |
medium | 5.3 | 0.0031 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-86390 |
medium | 6.5 | 0.0033 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-86391 |
medium | 6.4 | 0.0038 | 2026-10-29 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through | |
CVE-2026-86392 |
medium | 4.9 | 0.0034 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-92665 |
medium | 5.3 | 0.0041 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-101273 |
medium | 5.3 | 0.0037 | 2026-10-29 | Some of our API endpoints allowed to create order payments referencing a gift card by usin | |
CVE-2026-101274 |
medium | 6.9 | 0.0039 | 2026-10-29 | When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer | |
CVE-2026-103313 |
medium | 5.3 | 0.0016 | 2026-10-29 | The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the paymen | |
CVE-2026-103330 |
medium | 5.3 | 0.0016 | 2026-10-29 | The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authentic | |
CVE-2026-106648 |
medium | 5.3 | 0.0030 | 2026-10-29 | The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted fo | |
CVE-2026-110508 |
medium | 5.3 | 0.0027 | 2026-10-29 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its admini | |
CVE-2026-115223 |
medium | 4.9 | 0.0042 | 2026-10-29 | The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injec | |
CVE-2026-87097 |
medium | 5.3 | 0.0022 | 2026-10-29 | Sensitive information disclosure due to insufficiently protected credentials. The followin | |
CVE-2026-87099 |
medium | 5.7 | 0.0024 | 2026-10-29 | Cross-site scripting (XSS) vulnerability due to improper input validation. The following p | |
CVE-2026-87101 |
medium | 6.2 | 0.0010 | 2026-10-29 | Sensitive information disclosure due to improper token validation. The following products | |
CVE-2026-87878 |
medium | 6.3 | 0.0014 | 2026-10-29 | Linux binaries have executable stack attribute enabled. The following products are affecte | |
CVE-2026-87879 |
medium | 5.9 | 0.0022 | 2026-10-29 | Sensitive information disclosure due to improper token validation. The following products | |
CVE-2026-87880 |
medium | 6.8 | 0.0012 | 2026-10-29 | Sensitive information disclosure due to missing SSL certificate verification affecting one | |
CVE-2026-102799 |
medium | 5.3 | 0.0029 | 2026-10-29 | Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCa |