Browse All CVEs
33,580 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57631 |
high | 7.6 | 0.0038 | 2026-10-29 | Administrator SQL Injection in Popup box <= 6.0.1 versions. | |
CVE-2026-57632 |
medium | 5.4 | 0.0029 | 2026-10-29 | Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 | |
CVE-2026-57633 |
medium | 5.3 | 0.0033 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versi | |
CVE-2026-57634 |
medium | 4.3 | 0.0025 | 2026-10-29 | Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions. | |
CVE-2026-57635 |
medium | 6.5 | 0.0017 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe | |
CVE-2026-57636 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in wpForo Forum <= 3.0.9 versions. | |
CVE-2026-57637 |
medium | 4.3 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce < | |
CVE-2026-57638 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions. | |
CVE-2026-57640 |
medium | 4.3 | 0.0025 | 2026-10-29 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions. | |
CVE-2026-57641 |
medium | 6.5 | 0.0017 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. | |
CVE-2026-57642 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in Gallery <= 4.7.8 versions. | |
CVE-2026-57643 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in WP Post Author <= 3.9.1 versions. | |
CVE-2026-57644 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions. | |
CVE-2026-57645 |
high | 8.1 | 0.0035 | 2026-10-29 | newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions. | |
CVE-2026-57646 |
medium | 5.4 | 0.0023 | 2026-10-29 | Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions. | |
CVE-2026-57647 |
high | 7.5 | 0.0043 | 2026-10-29 | Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1 | |
CVE-2026-57648 |
medium | 4.3 | 0.0025 | 2026-10-29 | Contributor Broken Access Control in Nelio Content <= 4.3.4 versions. | |
CVE-2026-57649 |
medium | 4.3 | 0.0027 | 2026-10-29 | Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions. | |
CVE-2026-57650 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions. | |
CVE-2026-57651 |
medium | 6.5 | 0.0022 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions. | |
CVE-2026-57652 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions | |
CVE-2026-57653 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. | |
CVE-2026-57654 |
medium | 6.5 | 0.0030 | 2026-10-29 | Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. | |
CVE-2026-57655 |
high | 8.2 | 0.0017 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions. | |
CVE-2026-57656 |
medium | 5.9 | 0.0024 | 2026-10-29 | Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions. | |
CVE-2026-57657 |
medium | 4.3 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions. | |
CVE-2026-57659 |
high | 8.8 | 0.0020 | 2026-10-29 | Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member Fro | |
CVE-2026-57660 |
medium | 5.3 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. | |
CVE-2026-57661 |
medium | 5.4 | 0.0029 | 2026-10-29 | Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions. | |
CVE-2026-57662 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. | |
CVE-2026-57663 |
high | 8.5 | 0.0036 | 2026-10-29 | Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 ver | |
CVE-2026-57664 |
medium | 4.3 | 0.0029 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1. | |
CVE-2026-57665 |
medium | 5.3 | 0.0031 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions. | |
CVE-2026-57667 |
high | 8.5 | 0.0036 | 2026-10-29 | Sales Representative SQL Injection in Groundhogg <= 4.5 versions. | |
CVE-2026-0685 |
critical | 9.8 | 0.0093 | 2026-10-29 | Server side template inject (SSTI) in the expression evaluation component in Genshi Templa | |
CVE-2026-0828 |
high | 7.5 | 0.0041 | 2026-10-29 | Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.7 | |
CVE-2026-12411 |
critical | 9.6 | 0.0029 | 2026-10-29 | Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows | |
CVE-2026-21734 |
high | 7.7 | 0.0016 | 2026-10-29 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process a | |
CVE-2026-44018 |
high | 7.1 | 0.0016 | 2026-10-29 | Docling simplifies document processing by parsing diverse formats and providing integratio | |
CVE-2026-45195 |
high | 7.8 | 0.0014 | 2026-10-29 | Kernel software installed and running inside a Host VM may post improper commands to the G | |
CVE-2026-47214 |
high | 7.1 | 0.0037 | 2026-10-29 | Docling simplifies document processing by parsing diverse formats and providing integratio | |
CVE-2026-5757 |
high | 7.5 | 0.0073 | 2026-10-29 | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization | |
CVE-2026-9639 |
medium | 6.5 | 0.0055 | 2026-10-29 | Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 | |
CVE-2026-9640 |
high | 7.2 | 0.0063 | 2026-10-29 | A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21 | |
CVE-2026-13434 |
medium | 4.9 | 0.0024 | 2026-10-29 | A flaw was found in KubeVirt's network annotation generator. When a tenant creates a Virtu | |
CVE-2026-28385 |
medium | 5.0 | 0.0028 | 2026-10-29 | In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerabi | |
CVE-2026-48529 |
medium | 6.0 | 0.0017 | 2026-10-29 | GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running i | |
CVE-2026-42851 |
high | 7.8 | 0.0016 | 2026-10-29 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able | |
CVE-2026-42890 |
medium | 4.8 | 0.0013 | 2026-10-29 | Actual is an open-source personal finance application. In the macOS desktop application ve | |
CVE-2026-43872 |
medium | 5.3 | 0.0030 | 2026-10-29 | Actual is an open-source personal finance application. Prior to version 26.5.0, several en |