Browse All CVEs
9,470 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118094 |
medium | 6.5 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-22386 |
medium | 4.3 | — | 2026-10-29 | Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting | |
CVE-2026-24533 |
medium | 6.5 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-39735 |
medium | 6.5 | — | 2026-10-29 | Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting I | |
CVE-2026-39741 |
medium | 5.3 | — | 2026-10-29 | Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflar | |
CVE-2026-42703 |
medium | 6.5 | — | 2026-10-29 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting I | |
CVE-2026-48196 |
medium | 6.5 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-52709 |
medium | 6.5 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-56056 |
medium | 6.5 | — | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-93008 |
medium | 6.8 | — | 2026-10-29 | A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can ca | |
CVE-2026-93007 |
medium | 5.3 | — | 2026-10-29 | A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processe | |
CVE-2026-93011 |
medium | 5.3 | — | 2026-10-29 | A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the D | |
CVE-2026-93006 |
medium | 6.8 | — | 2026-10-29 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a r | |
CVE-2026-43840 |
medium | 6.9 | 0.0034 | 2026-10-29 | A NULL pointer dereference vulnerability in the license manager service could allow an una | |
CVE-2026-107686 |
medium | 4.3 | 0.0024 | 2026-10-29 | The Gitea web handlers for adding and removing reactions on issues and comments did not re | |
CVE-2026-5702 |
medium | 4.8 | — | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5699 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5700 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5697 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-5698 |
medium | 4.8 | — | 2026-10-29 | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an att | |
CVE-2026-27401 |
medium | 5.3 | — | 2026-10-29 | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce y | |
CVE-2026-92086 |
medium | 5.3 | — | 2026-10-29 | The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all | |
CVE-2026-109216 |
medium | 4.9 | — | 2026-10-29 | The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stor | |
CVE-2026-115962 |
medium | 4.3 | — | 2026-10-29 | Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Sp | |
CVE-2026-118989 |
medium | 5.1 | — | 2026-10-29 | WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side | |
CVE-2026-71569 |
medium | 4.8 | — | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This is | |
CVE-2026-91152 |
medium | 6.1 | 0.0035 | 2026-10-29 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | |
CVE-2026-91153 |
medium | 5.3 | 0.0061 | 2026-10-29 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | |
CVE-2026-116763 |
medium | 5.4 | 0.0034 | 2026-10-29 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-118192 |
medium | 6.5 | 0.0044 | 2026-10-29 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is | |
CVE-2026-110707 |
medium | 4.7 | 0.0030 | 2026-10-29 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggr | |
CVE-2026-111318 |
medium | 5.4 | 0.0034 | 2026-10-29 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPre | |
CVE-2026-109215 |
medium | 6.4 | 0.0033 | 2026-10-29 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-107627 |
medium | 5.4 | 0.0033 | 2026-10-29 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-107629 |
medium | 5.4 | 0.0034 | 2026-10-29 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to S | |
CVE-2026-103875 |
medium | 4.7 | 0.0030 | 2026-10-29 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scr | |
CVE-2026-104727 |
medium | 6.4 | 0.0035 | 2026-10-29 | The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored | |
CVE-2026-103485 |
medium | 5.4 | 0.0034 | 2026-10-29 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cros | |
CVE-2026-88941 |
medium | 6.2 | 0.0014 | 2026-10-29 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky S | |
CVE-2026-7190 |
medium | 5.1 | 0.0034 | 2026-10-29 | A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the | |
CVE-2024-0340 |
medium | 4.4 | 0.0024 | 2026-10-29 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, w | |
CVE-2026-39991 |
medium | 4.8 | 0.0029 | 2026-10-29 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If | |
CVE-2026-97320 |
medium | 5.3 | 0.0026 | 2026-10-29 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected el | |
CVE-2026-97324 |
medium | 6.9 | 0.0028 | 2026-10-29 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affect | |
CVE-2026-118030 |
medium | 4.2 | 0.0016 | 2026-10-29 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, | |
CVE-2026-117859 |
medium | 5.4 | 0.0019 | 2026-10-29 | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-se | |
CVE-2026-117627 |
medium | 5.4 | 0.0025 | 2026-10-29 | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services co | |
CVE-2026-117688 |
medium | 5.3 | 0.0027 | 2026-10-29 | A flaw was found in the client registration component of Keycloak, an open-source identity | |
CVE-2026-117548 |
medium | 6.5 | 0.0033 | 2026-10-29 | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN | |
CVE-2026-108763 |
medium | 4.3 | 0.0014 | 2026-10-29 | The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC |