CVE Vulnerability Database
Search and browse 420,244 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-11455 | MEDIUM | 4.3 | 0.2% | Oct 31, 2026 | The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c... |
| CVE-2026-90960 | MEDIUM | 5.3 | 0.3% | Oct 31, 2026 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, ... |
| CVE-2026-89270 | CRITICAL | 9.1 | 0.4% | Oct 31, 2026 | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to au... |
| CVE-2026-88942 | MEDIUM | 6.1 | 0.3% | Oct 31, 2026 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_... |
| CVE-2026-120040 | HIGH | 7.5 | 0.3% | Oct 31, 2026 | The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a... |
| CVE-2026-120019 | MEDIUM | 5.4 | 0.2% | Oct 31, 2026 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all ... |
| CVE-2026-11396 | MEDIUM | 5.3 | 0.2% | Oct 31, 2026 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disc... |
| CVE-2026-119980 | MEDIUM | 6.5 | 0.3% | Oct 31, 2026 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab... |
| CVE-2026-119166 | MEDIUM | 5.3 | 0.3% | Oct 31, 2026 | The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and... |
| CVE-2026-119163 | HIGH | 7.5 | 0.3% | Oct 31, 2026 | The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulne... |
| CVE-2026-119162 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored ... |
| CVE-2026-119089 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnera... |
| CVE-2026-119065 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... |
| CVE-2026-118070 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' parameter in all ... |
| CVE-2026-116557 | CRITICAL | 9.1 | 0.3% | Oct 31, 2026 | The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to ... |
| CVE-2026-116548 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'o... |
| CVE-2026-116546 | MEDIUM | 6.4 | 0.2% | Oct 31, 2026 | The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2026-116522 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' par... |
| CVE-2026-115840 | HIGH | 7.2 | 0.2% | Oct 31, 2026 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p... |
| CVE-2026-111254 | HIGH | 7.2 | 0.3% | Oct 31, 2026 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all ... |
| CVE-2026-111109 | MEDIUM | 6.1 | 0.3% | Oct 31, 2026 | The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of... |
| CVE-2026-110251 | MEDIUM | 5.4 | 0.3% | Oct 31, 2026 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all ... |
| CVE-2026-109386 | MEDIUM | 4.3 | 0.4% | Oct 31, 2026 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass... |
| CVE-2026-109220 | CRITICAL | 9.8 | 0.5% | Oct 31, 2026 | The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Inject... |
| CVE-2026-109217 | MEDIUM | 5.3 | 0.3% | Oct 31, 2026 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in... |