CVE Vulnerability Database
Search and browse 425,069 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59669 | MEDIUM | 4.8 | 0.3% | Oct 2, 2026 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow... |
| CVE-2026-97663 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Autho... |
| CVE-2026-97641 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content i... |
| CVE-2026-97637 | CRITICAL | 9.8 | 0.6% | Oct 2, 2026 | The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in al... |
| CVE-2026-97634 | MEDIUM | 6.5 | 0.3% | Oct 2, 2026 | The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' paramet... |
| CVE-2026-97342 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via '... |
| CVE-2026-97338 | MEDIUM | 6.4 | 0.2% | Oct 2, 2026 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all versions ... |
| CVE-2026-97336 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up... |
| CVE-2026-96871 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all ve... |
| CVE-2026-96647 | MEDIUM | 6.4 | 0.2% | Oct 2, 2026 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-96578 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... |
| CVE-2026-96567 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_id' parameter in all vers... |
| CVE-2026-96566 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi... |
| CVE-2026-95817 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all v... |
| CVE-2026-95670 | HIGH | 7.2 | 0.2% | Oct 2, 2026 | The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/{base64} R... |
| CVE-2026-94432 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to I... |
| CVE-2026-93880 | MEDIUM | 6.1 | 0.2% | Oct 2, 2026 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting ... |
| CVE-2026-93756 | HIGH | 7.2 | 0.3% | Oct 2, 2026 | The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cros... |
| CVE-2026-63578 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) ... |
| CVE-2026-63577 | HIGH | 7.5 | 0.2% | Oct 2, 2026 | Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree)... |
| CVE-2026-63576 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. ... |
| CVE-2026-63575 | HIGH | 7.5 | 0.2% | Oct 2, 2026 | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy C... |
| CVE-2026-63574 | HIGH | 7.5 | 0.4% | Oct 2, 2026 | Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubp... |
| CVE-2026-63573 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legio... |
| CVE-2026-63572 | HIGH | 7.5 | 0.3% | Oct 2, 2026 | Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc... |