Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-80067 |
medium | 5.3 | 0.0059 | 2026-10-29 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability | |
CVE-2026-52708 |
medium | 4.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exp | |
CVE-2026-48884 |
medium | 5.3 | 0.0028 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exp | |
CVE-2026-118092 |
medium | 4.3 | 0.0026 | 2026-10-29 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-lear | |
CVE-2026-116846 |
medium | 5.3 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager all | |
CVE-2026-116406 |
medium | 4.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allo | |
CVE-2026-115713 |
high | 7.5 | 0.0016 | 2026-10-29 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud E | |
CVE-2026-115712 |
medium | 4.3 | 0.0024 | 2026-10-29 | Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthoriz | |
CVE-2026-115711 |
medium | 6.4 | 0.0022 | 2026-10-29 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) | |
CVE-2026-115709 |
high | 8.2 | 0.0026 | 2026-10-29 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud E | |
CVE-2026-115708 |
high | 7.2 | 0.0017 | 2026-10-29 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud E | |
CVE-2026-115707 |
medium | 6.4 | 0.0013 | 2026-10-29 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) | |
CVE-2026-115706 |
medium | 6.8 | 0.0024 | 2026-10-29 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (EC | |
CVE-2026-115610 |
medium | 6.5 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-39742 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-54871 |
medium | 5.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce | |
CVE-2026-39737 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-25450 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allo | |
CVE-2026-118095 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-118091 |
medium | 5.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploitin | |
CVE-2026-118088 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploitin | |
CVE-2026-116856 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calcu | |
CVE-2026-116850 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116849 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-116387 |
medium | 5.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploit | |
CVE-2026-115605 |
medium | 4.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploitin | |
CVE-2026-114181 |
medium | 5.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerc | |
CVE-2026-110881 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-79589 |
critical | 9.8 | 0.0034 | 2026-10-29 | The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access contro | |
CVE-2026-39736 |
high | 8.5 | 0.0031 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-118425 |
medium | 6.8 | 0.0023 | 2026-10-29 | A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identi | |
CVE-2026-116402 |
medium | 5.3 | 0.0030 | 2026-10-29 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-113180 |
high | 8.8 | 0.0026 | 2026-10-29 | Information leak in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 a | |
CVE-2026-113170 |
high | 8.8 | 0.0031 | 2026-10-29 | UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 all | |
CVE-2026-58016 |
critical | 9.1 | 0.0056 | 2026-10-29 | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() | |
CVE-2026-11837 |
high | 7.3 | 0.0016 | 2026-10-29 | 1 PoC | A local privilege escalation vulnerability was found in the ansible.posix authorized_key m |
CVE-2026-2100 |
high | 7.5 | 0.0134 | 2026-10-29 | A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling | |
CVE-2024-42360 |
critical | 9.8 | 0.0058 | 2026-10-29 | SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface fo | |
CVE-2026-61611 |
high | 7.5 | 0.0045 | 2026-10-29 | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::u | |
CVE-2026-73261 |
high | 7.5 | 0.0042 | 2026-10-29 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP | |
CVE-2026-107445 |
medium | 5.4 | 0.0017 | 2026-10-29 | A flaw was found in Katello where the Flatpak Remote Repositories API does not properly en | |
CVE-2026-104109 |
medium | 6.8 | 0.0038 | 2026-10-29 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batc | |
CVE-2026-102682 |
medium | 5.6 | 0.0023 | 2026-10-29 | Pipecat is an open-source Python framework for building real-time voice and multimodal con | |
CVE-2026-100353 |
high | 7.5 | 0.0034 | 2026-10-29 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three | |
CVE-2026-55786 |
high | 8.4 | 0.0041 | 2026-10-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 unti | |
CVE-2026-55572 |
critical | 10.0 | 0.0052 | 2026-10-29 | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's o | |
CVE-2026-113697 |
medium | 4.8 | 0.0043 | 2026-10-29 | Reflected cross-site scripting in the agent query feature of BMC Helix Operations Manageme | |
CVE-2026-113696 |
medium | 5.3 | 0.0040 | 2026-10-29 | Improper authorization in the SmartIT change approval feature of BMC IT Service Management | |
CVE-2026-92158 |
high | 7.2 | 0.0086 | 2026-10-29 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | |
CVE-2026-92152 |
critical | 9.3 | 0.0067 | 2026-10-29 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth |