Browse All CVEs
34,122 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118634 |
medium | 6.4 | 0.0020 | 2026-10-30 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | |
CVE-2026-118194 |
medium | 6.5 | 0.0034 | 2026-10-30 | The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass | |
CVE-2026-92574 |
high | 8.8 | 0.0065 | 2026-10-30 | A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a mali | |
CVE-2026-5461 |
medium | 6.5 | 0.0029 | 2026-10-30 | The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all ve | |
CVE-2026-104368 |
high | 8.8 | 0.0035 | 2026-10-30 | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege | |
CVE-2026-103963 |
high | 7.5 | 0.0034 | 2026-10-30 | A flaw was found in glib-networking. When establishing connections using Transport Layer S | |
CVE-2026-96389 |
medium | 6.5 | 0.0016 | 2026-10-30 | Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This is | |
CVE-2026-43961 |
high | 7.8 | 0.0016 | 2026-10-30 | A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and | |
CVE-2026-118583 |
— | — | 0.0013 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing | |
CVE-2026-118584 |
— | — | 0.0013 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing | |
CVE-2026-118576 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118582 |
— | — | 0.0018 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA a | |
CVE-2026-118574 |
— | — | 0.0013 | 2026-10-30 | Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File Syst | |
CVE-2026-118575 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118572 |
— | — | 0.0018 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Log | |
CVE-2026-118573 |
— | — | 0.0014 | 2026-10-30 | Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsin | |
CVE-2026-118570 |
— | — | 0.0010 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Req | |
CVE-2026-118571 |
— | — | 0.0014 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Al | |
CVE-2026-118568 |
— | — | 0.0014 | 2026-10-30 | Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sy | |
CVE-2026-118569 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This | |
CVE-2026-118565 |
— | — | 0.0015 | 2026-10-30 | Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO | |
CVE-2026-118567 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Bro | |
CVE-2026-118563 |
— | — | 0.0015 | 2026-10-30 | Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*. | |
CVE-2026-118564 |
— | — | 0.0015 | 2026-10-30 | Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Dr | |
CVE-2026-118561 |
— | — | 0.0015 | 2026-10-30 | External Control of File Name or Path vulnerability in Drupal Single Content Sync allows P | |
CVE-2026-118562 |
— | — | 0.0027 | 2026-10-30 | Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Objec | |
CVE-2026-118559 |
— | — | 0.0010 | 2026-10-30 | Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe a | |
CVE-2026-118560 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118557 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing | |
CVE-2026-118558 |
— | — | 0.0010 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Sit | |
CVE-2026-118555 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. | |
CVE-2026-118556 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing | |
CVE-2026-118553 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118554 |
— | — | 0.0019 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Co | |
CVE-2026-118551 |
— | — | 0.0015 | 2026-10-30 | Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intellige | |
CVE-2026-118552 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118549 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118550 |
— | — | 0.0019 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Arti | |
CVE-2026-118546 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118548 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resour | |
CVE-2026-118544 |
— | — | 0.0014 | 2026-10-30 | Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Co | |
CVE-2026-118545 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118542 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118543 |
— | — | 0.0013 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site | |
CVE-2026-118540 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118541 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-114573 |
— | — | 0.0024 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-118539 |
medium | 6.5 | 0.0031 | 2026-10-30 | Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This | |
CVE-2026-114571 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This | |
CVE-2026-114572 |
medium | 5.4 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Lo |