CVE Vulnerability Database
Search and browse 420,251 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110001 | MEDIUM | 5.4 | — | Oct 30, 2026 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (short... |
| CVE-2026-109984 | MEDIUM | 5.4 | — | Oct 30, 2026 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' param... |
| CVE-2026-109592 | MEDIUM | 4.3 | — | Oct 30, 2026 | The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorizati... |
| CVE-2026-107630 | HIGH | 7.5 | — | Oct 30, 2026 | The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authoriz... |
| CVE-2026-105894 | HIGH | 8.8 | — | Oct 30, 2026 | The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to P... |
| CVE-2026-104744 | HIGH | 7.2 | — | Oct 30, 2026 | The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' p... |
| CVE-2026-104739 | MEDIUM | 4.9 | — | Oct 30, 2026 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion d... |
| CVE-2026-102918 | MEDIUM | 6.4 | — | Oct 30, 2026 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includi... |
| CVE-2026-102905 | MEDIUM | 6.5 | — | Oct 30, 2026 | The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in al... |
| CVE-2025-8574 | HIGH | 8.7 | 0.4% | Oct 30, 2026 | The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including... |
| CVE-2026-65566 | HIGH | 8.8 | — | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This ... |
| CVE-2026-62055 | MEDIUM | 4.3 | — | Oct 30, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly ... |
| CVE-2026-61826 | CRITICAL | 10 | 0.3% | Oct 30, 2026 | Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/a... |
| CVE-2026-61806 | MEDIUM | 5.3 | — | Oct 30, 2026 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version ... |
| CVE-2026-61805 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version ... |
| CVE-2026-61804 | HIGH | 8.1 | 0.3% | Oct 30, 2026 | myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category`... |
| CVE-2026-61803 | MEDIUM | 5.3 | — | Oct 30, 2026 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version ... |
| CVE-2026-61789 | MEDIUM | 6.1 | 0.4% | Oct 30, 2026 | DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL ... |
| CVE-2026-55551 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id... |
| CVE-2026-50000 | MEDIUM | 5 | — | Oct 30, 2026 | SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen... |
| CVE-2026-39375 | MEDIUM | 5.1 | — | Oct 30, 2026 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version ... |
| CVE-2026-37468 | MEDIUM | 6.1 | 0.2% | Oct 30, 2026 | Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary ... |
| CVE-2026-119466 | MEDIUM | 5.4 | — | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Si... |
| CVE-2026-119367 | MEDIUM | 5.4 | — | Oct 30, 2026 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting ... |
| CVE-2026-119365 | MEDIUM | 6.5 | — | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Pla... |