CVE Vulnerability Database
Search and browse 420,244 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-119160 | MEDIUM | 6.4 | 0.2% | Oct 31, 2026 | The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerab... |
| CVE-2026-118235 | CRITICAL | 9.8 | 0.7% | Oct 31, 2026 | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable... |
| CVE-2026-117681 | HIGH | 8 | 0.1% | Oct 31, 2026 | A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatical... |
| CVE-2026-116964 | HIGH | 8.4 | 0.3% | Oct 31, 2026 | A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the... |
| CVE-2026-116086 | HIGH | 8.8 | 0.3% | Oct 31, 2026 | A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information ... |
| CVE-2026-114217 | HIGH | 8.6 | 0.1% | Oct 31, 2026 | A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in p... |
| CVE-2026-110530 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 20... |
| CVE-2026-109367 | MEDIUM | 5.3 | 0.3% | Oct 31, 2026 | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo... |
| CVE-2026-103915 | MEDIUM | 5.3 | 0.3% | Oct 31, 2026 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Ex... |
| CVE-2026-103882 | CRITICAL | 9.1 | 0.8% | Oct 31, 2026 | The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitra... |
| CVE-2026-101325 | MEDIUM | 5.3 | 0.3% | Oct 31, 2026 | The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up... |
| CVE-2026-120070 | HIGH | 8.8 | 0.3% | Oct 31, 2026 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post... |
| CVE-2026-119096 | CRITICAL | 9.8 | 0.5% | Oct 31, 2026 | The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and inc... |
| CVE-2026-118057 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerabl... |
| CVE-2026-116535 | MEDIUM | 6.4 | 0.2% | Oct 31, 2026 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'di... |
| CVE-2026-116512 | CRITICAL | 9.8 | 0.6% | Oct 31, 2026 | The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress i... |
| CVE-2026-111592 | MEDIUM | 6.4 | 0.2% | Oct 31, 2026 | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu... |
| CVE-2026-111070 | MEDIUM | 5.4 | 0.2% | Oct 31, 2026 | The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2026-110023 | MEDIUM | 5.9 | 0.3% | Oct 31, 2026 | The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sens... |
| CVE-2026-107759 | HIGH | 7.2 | 0.3% | Oct 31, 2026 | The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subje... |
| CVE-2026-104012 | HIGH | 8.8 | 0.3% | Oct 31, 2026 | The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Es... |
| CVE-2026-103997 | MEDIUM | 6.5 | 0.3% | Oct 31, 2026 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5... |
| CVE-2026-103962 | MEDIUM | 6.1 | 0.2% | Oct 31, 2026 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post... |
| CVE-2026-103898 | HIGH | 8.1 | 0.4% | Oct 31, 2026 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versi... |
| CVE-2025-9462 | MEDIUM | 6.5 | 0.3% | Oct 31, 2026 | The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up... |