Browse All CVEs
41,186 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66602 |
high | 8.8 | 0.0020 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notificati | |
CVE-2026-66603 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-73973 |
medium | 5.5 | 0.0029 | 2026-10-29 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related | |
CVE-2026-27365 |
medium | 5.9 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-66589 |
medium | 5.4 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly | |
CVE-2026-66591 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-75976 |
high | 8.6 | 0.0085 | 2026-10-29 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function | |
CVE-2026-75978 |
low | 2.1 | 0.0037 | 2026-10-29 | A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta | |
CVE-2026-75979 |
low | 2.1 | 0.0041 | 2026-10-29 | A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the | |
CVE-2026-75984 |
low | 2.1 | 0.0182 | 2026-10-29 | A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown func | |
CVE-2026-11751 |
critical | 9.1 | 0.0032 | 2026-10-29 | A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS ups | |
CVE-2026-15421 |
medium | 6.4 | 0.0041 | 2026-10-29 | The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is v | |
CVE-2026-75985 |
low | 2.1 | 0.0182 | 2026-10-29 | A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown fun | |
CVE-2026-75986 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted | |
CVE-2026-75987 |
medium | 6.9 | 0.0056 | 2026-10-29 | A vulnerability was found in SPLWare esProc up to 20260507. This affects the function Obje | |
CVE-2026-76003 |
high | 8.6 | 0.0079 | 2026-10-29 | A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the fun | |
CVE-2026-76004 |
high | 8.6 | 0.0079 | 2026-10-29 | A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. | |
CVE-2026-76008 |
critical | 10.0 | 0.0102 | 2026-10-29 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_ | |
CVE-2026-76048 |
medium | 5.5 | 0.0043 | 2026-10-29 | A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impact | |
CVE-2026-76049 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. T | |
CVE-2026-76050 |
medium | 5.5 | 0.0043 | 2026-10-29 | A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This i | |
CVE-2026-19942 |
high | 8.1 | 0.0108 | 2026-10-29 | The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client F | |
CVE-2026-11565 |
high | 8.5 | 0.0125 | 2026-10-29 | The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability chec | |
CVE-2026-12983 |
high | 8.6 | 0.0044 | 2026-10-29 | The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before u | |
CVE-2026-13169 |
high | 8.1 | 0.0035 | 2026-10-29 | The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events b | |
CVE-2026-13173 |
low | 2.7 | 0.0028 | 2026-10-29 | The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission | |
CVE-2026-13174 |
high | 7.2 | 0.0046 | 2026-10-29 | The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before | |
CVE-2026-13175 |
medium | 6.5 | 0.0042 | 2026-10-29 | The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing sche | |
CVE-2026-14196 |
medium | 4.3 | 0.0025 | 2026-10-29 | The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace ven | |
CVE-2026-14287 |
medium | 4.7 | 0.0022 | 2026-10-29 | The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access to | |
CVE-2026-14334 |
high | 8.8 | 0.0054 | 2026-10-29 | The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not | |
CVE-2026-14825 |
low | 2.7 | 0.0028 | 2026-10-29 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-ob | |
CVE-2026-14826 |
low | 2.7 | 0.0030 | 2026-10-29 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-ob | |
CVE-2026-14861 |
high | 7.5 | 0.0044 | 2026-10-29 | The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that | |
CVE-2026-15253 |
medium | 6.8 | 0.0043 | 2026-10-29 | The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an atta | |
CVE-2026-16058 |
medium | 5.3 | 0.0032 | 2026-10-29 | The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownershi | |
CVE-2026-16570 |
high | 7.1 | 0.0025 | 2026-10-29 | The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape | |
CVE-2026-16616 |
high | 8.6 | 0.0073 | 2026-10-29 | The Simple File List WordPress plugin through 6.3.11 does not validate the source path of | |
CVE-2026-16617 |
high | 8.8 | 0.0050 | 2026-10-29 | The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape | |
CVE-2026-18202 |
medium | 6.8 | 0.0043 | 2026-10-29 | The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upl | |
CVE-2026-19055 |
high | 7.1 | 0.0025 | 2026-10-29 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape seve | |
CVE-2026-19056 |
high | 7.1 | 0.0025 | 2026-10-29 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a pa | |
CVE-2026-19406 |
low | 2.7 | 0.0032 | 2026-10-29 | The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointme | |
CVE-2026-19709 |
medium | 5.3 | 0.0032 | 2026-10-29 | The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API co | |
CVE-2026-49424 |
medium | 5.5 | 0.0015 | 2026-10-29 | The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-decla | |
CVE-2026-49425 |
medium | 5.5 | 0.0015 | 2026-10-29 | The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32- | |
CVE-2026-58081 |
critical | 9.8 | 0.0052 | 2026-10-29 | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the si | |
CVE-2026-58082 |
critical | 9.8 | 0.0052 | 2026-10-29 | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for interme | |
CVE-2026-58083 |
high | 8.4 | 0.0017 | 2026-10-29 | While the kernel was copying knotes during fork, a knote with a timer-based filter could f | |
CVE-2026-58084 |
medium | 5.5 | 0.0014 | 2026-10-29 | To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains |