CVE Vulnerability Database
Search and browse 390,021 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6440 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | The GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference plugin for WordPress is vulnerable to Cro... |
| CVE-2026-3907 | MEDIUM | 6.4 | 0.2% | Jul 10, 2026 | The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wphostel-book' shortcode in all ve... |
| CVE-2026-1946 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab... |
| CVE-2026-15104 | MEDIUM | 6.5 | 0.3% | Jul 10, 2026 | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to g... |
| CVE-2026-15026 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | The Import and export users and customers plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve... |
| CVE-2026-14475 | MEDIUM | 4.9 | 0.3% | Jul 10, 2026 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via ... |
| CVE-2026-12955 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | The GDPR Cookie Consent plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil... |
| CVE-2026-12924 | MEDIUM | 6.4 | 0.2% | Jul 10, 2026 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to S... |
| CVE-2026-12400 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in al... |
| CVE-2026-12108 | MEDIUM | 4.4 | 0.2% | Jul 10, 2026 | The Highlighting Code Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all ... |
| CVE-2026-11992 | MEDIUM | 4.3 | 0.3% | Jul 10, 2026 | The Easy Appointments plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3... |
| CVE-2025-11977 | MEDIUM | 6.6 | 0.5% | Jul 10, 2026 | The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms plugin fo... |
| CVE-2026-40454 | HIGH | 7.5 | 0.1% | Jul 10, 2026 | Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++... |
| CVE-2026-40452 | HIGH | 7.5 | 0.1% | Jul 10, 2026 | Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLas... |
| CVE-2026-40009 | MEDIUM | 6.5 | 0.1% | Jul 10, 2026 | Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate t... |
| CVE-2026-40008 | CRITICAL | 9.8 | 0.3% | Jul 10, 2026 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB. The pi... |
| CVE-2026-40007 | HIGH | 7.5 | 0.1% | Jul 10, 2026 | Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipe_air_gap_receiver_enab... |
| CVE-2026-40006 | HIGH | 7.5 | 0.2% | Jul 10, 2026 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authenticatio... |
| CVE-2026-40005 | CRITICAL | 9.1 | 0.2% | Jul 10, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. An attacke... |
| CVE-2026-28564 | CRITICAL | 9.8 | 0.2% | Jul 10, 2026 | Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authe... |
| CVE-2026-13347 | HIGH | 7.5 | 0.5% | Jul 10, 2026 | The Hide My WP Lite plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 1.3 via th... |
| CVE-2026-12685 | HIGH | 7.5 | 0.1% | Jul 10, 2026 | The EscortWP escortwp WordPress theme through 3.6.2 was distributed with a vendor-authored, obfuscated backdoor that let... |
| CVE-2026-12276 | MEDIUM | 5.3 | 0.1% | Jul 10, 2026 | The LA-Studio Element Kit for Elementor WordPress plugin before 1.6.1 does not check whether user registration is enable... |
| CVE-2026-12123 | MEDIUM | 6.4 | 0.2% | Jul 10, 2026 | The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an... |
| CVE-2026-21057 | MEDIUM | 6.8 | 0.1% | Jul 10, 2026 | Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bo... |