CVE Vulnerability Database
Search and browse 425,092 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-87777 | MEDIUM | 6.8 | — | Sep 30, 2026 | The Hostinger Reach WordPress plugin before 1.8.3 does not sanitize and escape a widget setting before outputting it in... |
| CVE-2026-86789 | MEDIUM | 5.3 | — | Sep 30, 2026 | The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status ... |
| CVE-2026-85576 | MEDIUM | 4.3 | — | Sep 30, 2026 | The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the a... |
| CVE-2026-85573 | HIGH | 8.8 | — | Sep 30, 2026 | The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sani... |
| CVE-2026-85415 | MEDIUM | 6.8 | — | Sep 30, 2026 | The Audio Player Block WordPress plugin before 1.6.3 does not validate the scheme of a user-supplied URL before using i... |
| CVE-2026-85001 | MEDIUM | 6.8 | — | Sep 30, 2026 | The EmbedPress WordPress plugin before 4.6.7 does not sanitise and escape one of its Elementor widget settings before o... |
| CVE-2026-83560 | MEDIUM | 5.3 | — | Sep 30, 2026 | The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST... |
| CVE-2026-82127 | LOW | 3.5 | — | Sep 30, 2026 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving s... |
| CVE-2026-80333 | MEDIUM | 5.3 | — | Sep 30, 2026 | The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end... |
| CVE-2026-75873 | CRITICAL | 9.8 | — | Sep 30, 2026 | The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload ac... |
| CVE-2026-75824 | MEDIUM | 5.3 | — | Sep 30, 2026 | The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creati... |
| CVE-2026-75823 | HIGH | 7.4 | — | Sep 30, 2026 | The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration ... |
| CVE-2026-100143 | MEDIUM | 6.5 | — | Sep 30, 2026 | The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest che... |
| CVE-2026-103111 | HIGH | 7.6 | 0.2% | Sep 30, 2026 | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-... |
| CVE-2026-102913 | HIGH | 7.3 | 0.3% | Sep 30, 2026 | A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown f... |
| CVE-2026-86134 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthent... |
| CVE-2026-103110 | CRITICAL | 9.8 | 0.6% | Sep 30, 2026 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote atta... |
| CVE-2026-102912 | MEDIUM | 4.7 | — | Sep 30, 2026 | A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown pro... |
| CVE-2026-102911 | CRITICAL | 9.9 | — | Sep 30, 2026 | A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of t... |
| CVE-2026-102910 | HIGH | 7.3 | 0.3% | Sep 30, 2026 | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an ... |
| CVE-2026-96649 | HIGH | 7.2 | — | Sep 30, 2026 | The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stor... |
| CVE-2026-86556 | MEDIUM | 5.3 | — | Sep 30, 2026 | There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can explo... |
| CVE-2026-103109 | CRITICAL | 9.4 | 0.2% | Sep 30, 2026 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementati... |
| CVE-2026-103108 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementat... |
| CVE-2026-103106 | HIGH | 7.8 | 0.1% | Sep 30, 2026 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip... |