Browse All CVEs
34,122 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57747 |
medium | 6.5 | 0.0017 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions. | |
CVE-2026-57748 |
high | 7.5 | 0.0043 | 2026-10-29 | Contributor Local File Inclusion in Shopify <= 1.0.0 versions. | |
CVE-2026-57749 |
high | 7.5 | 0.0043 | 2026-10-29 | Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions. | |
CVE-2026-57750 |
medium | 5.3 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions. | |
CVE-2026-57751 |
high | 8.1 | 0.0019 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versio | |
CVE-2026-57752 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in iNET Webkit 1.2.4 versions. | |
CVE-2026-57753 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2. | |
CVE-2026-57754 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9 | |
CVE-2026-57755 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 | |
CVE-2026-57756 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. | |
CVE-2026-57757 |
high | 7.1 | 0.0016 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions. | |
CVE-2026-57758 |
high | 7.1 | 0.0013 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= | |
CVE-2026-57760 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Inco | |
CVE-2026-57761 |
high | 7.1 | 0.0013 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions. | |
CVE-2026-57762 |
medium | 5.9 | 0.0024 | 2026-10-29 | Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. | |
CVE-2026-57763 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. | |
CVE-2026-57764 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 v | |
CVE-2026-57765 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. | |
CVE-2026-57766 |
high | 8.8 | 0.0020 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= | |
CVE-2026-4770 |
medium | 4.6 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-4772 |
medium | 5.4 | 0.0023 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-5524 |
critical | 9.8 | 0.0348 | 2026-10-29 | The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading | |
CVE-2026-4767 |
critical | 9.8 | 0.0061 | 2026-10-29 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF | |
CVE-2026-12166 |
medium | 5.5 | 0.0015 | 2026-10-29 | A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFA | |
CVE-2026-12167 |
high | 7.8 | 0.0015 | 2026-10-29 | The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allow | |
CVE-2026-12168 |
high | 7.8 | 0.0017 | 2026-10-29 | An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC al | |
CVE-2026-50746 |
critical | 10.0 | 0.0169 | 2026-10-29 | A malicious actor with access to the network could exploit an Improper Access Control vuln | |
CVE-2026-50747 |
critical | 9.9 | 0.0049 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit a series of | |
CVE-2026-50748 |
critical | 9.9 | 0.0163 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-54400 |
critical | 9.1 | 0.0052 | 2026-10-29 | A malicious actor with access to the network and high privileges could exploit an Improper | |
CVE-2026-54405 |
high | 7.5 | 0.0052 | 2026-10-29 | A malicious actor with access to the network could exploit an Improper Input Validation vu | |
CVE-2026-54406 |
high | 8.7 | 0.0059 | 2026-10-29 | A malicious actor with access to the network and high privileges could exploit a Path Trav | |
CVE-2026-54407 |
high | 8.6 | 0.0045 | 2026-10-29 | A malicious actor with access to the network could exploit an Improper Access Control vuln | |
CVE-2026-54408 |
critical | 9.8 | 0.0057 | 2026-10-29 | A malicious actor with access to the network could exploit an Improper Access Control vuln | |
CVE-2026-54409 |
high | 8.1 | 0.0044 | 2026-10-29 | A malicious actor with access to the network and under certain conditions could exploit an | |
CVE-2026-55111 |
high | 7.5 | 0.0050 | 2026-10-29 | A malicious actor with access to the network could exploit a Path Traversal vulnerability | |
CVE-2026-55113 |
high | 7.5 | 0.0037 | 2026-10-29 | A malicious actor with access to the network could exploit a Server-Side Request Forgery ( | |
CVE-2026-55114 |
high | 8.8 | 0.0047 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-55115 |
critical | 9.9 | 0.0047 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit a Server-Sid | |
CVE-2026-55117 |
high | 8.6 | 0.0056 | 2026-10-29 | A malicious actor with access to the network could exploit a Path Traversal vulnerability | |
CVE-2026-55118 |
high | 8.3 | 0.0037 | 2026-10-29 | A malicious actor with access to the network,low privileges and under certain conditions c | |
CVE-2026-55119 |
high | 8.1 | 0.0039 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-56004 |
critical | 10.0 | 0.0066 | 2026-10-29 | A shellcode injection in the mercurial handler of the obs tar_scm source service before ve | |
CVE-2026-56841 |
high | 8.8 | 0.0049 | 2026-10-29 | A malicious actor with access to the network and low privileges could exploit an authentic | |
CVE-2026-56842 |
high | 7.5 | 0.0036 | 2026-10-29 | A malicious actor with access to the network and under certain conditions could exploit an | |
CVE-2026-8079 |
high | 8.7 | 0.0032 | 2026-10-29 | In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby a | |
CVE-2026-9272 |
high | 8.7 | 0.0043 | 2026-10-29 | In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereb | |
CVE-2026-44941 |
high | 8.8 | 0.0053 | 2026-10-29 | A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before | |
CVE-2026-58455 |
critical | 9.2 | 0.0804 | 2026-10-29 | Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability t | |
CVE-2026-44935 |
critical | 9.9 | 0.0049 | 2026-10-29 | Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 |