CVE Vulnerability Database
Search and browse 425,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102505 | MEDIUM | 6.3 | 0.2% | Oct 1, 2026 | Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp... |
| CVE-2026-102504 | HIGH | 7.5 | 0.4% | Oct 1, 2026 | Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value i... |
| CVE-2026-62063 | MEDIUM | 5.4 | — | Oct 1, 2026 | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Con... |
| CVE-2026-62061 | MEDIUM | 5.3 | — | Oct 1, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups... |
| CVE-2026-62060 | HIGH | 7.6 | — | Oct 1, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Cap... |
| CVE-2026-62059 | HIGH | 7.6 | — | Oct 1, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ul... |
| CVE-2026-62058 | MEDIUM | 5.3 | — | Oct 1, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Ret... |
| CVE-2026-103345 | MEDIUM | 5.3 | — | Oct 1, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrie... |
| CVE-2026-103343 | MEDIUM | 6.5 | — | Oct 1, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP ManageNinja LLC... |
| CVE-2026-103341 | MEDIUM | 5.3 | — | Oct 1, 2026 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa... |
| CVE-2026-103340 | MEDIUM | 5.3 | — | Oct 1, 2026 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Ac... |
| CVE-2026-103339 | MEDIUM | 6.5 | — | Oct 1, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Metform metf... |
| CVE-2026-103338 | HIGH | 8.5 | — | Oct 1, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements... |
| CVE-2026-103067 | HIGH | 8 | — | Oct 1, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Sit... |
| CVE-2026-103064 | MEDIUM | 6.5 | — | Oct 1, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit ... |
| CVE-2026-103063 | MEDIUM | 6.5 | — | Oct 1, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit ... |
| CVE-2026-102394 | MEDIUM | 6.5 | — | Oct 1, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essent... |
| CVE-2026-102390 | MEDIUM | 5.3 | — | Oct 1, 2026 | Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-fo... |
| CVE-2026-102382 | MEDIUM | 4.3 | — | Oct 1, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploit... |
| CVE-2026-102381 | MEDIUM | 5.3 | — | Oct 1, 2026 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured ... |
| CVE-2026-102379 | HIGH | 8.5 | — | Oct 1, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKi... |
| CVE-2026-94276 | MEDIUM | 5.1 | — | Oct 1, 2026 | Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspectio... |
| CVE-2026-94269 | MEDIUM | 6.3 | — | Oct 1, 2026 | Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations whe... |
| CVE-2026-94250 | HIGH | 8.2 | — | Oct 1, 2026 | Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unau... |
| CVE-2026-94220 | LOW | 2.1 | — | Oct 1, 2026 | Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacke... |