CVE Vulnerability Database
Search and browse 420,256 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118593 | MEDIUM | 5.9 | 0.2% | Oct 30, 2026 | A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9... |
| CVE-2026-116622 | HIGH | 7.2 | 0.2% | Oct 30, 2026 | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2026-110732 | HIGH | 7.5 | 0.3% | Oct 30, 2026 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorizatio... |
| CVE-2026-103039 | CRITICAL | 9.8 | 0.5% | Oct 30, 2026 | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2... |
| CVE-2026-119087 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypa... |
| CVE-2026-119059 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capabi... |
| CVE-2026-118698 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj... |
| CVE-2026-118634 | MEDIUM | 6.4 | 0.2% | Oct 30, 2026 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all ... |
| CVE-2026-118500 | MEDIUM | 6.4 | 0.2% | Oct 30, 2026 | The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross... |
| CVE-2026-118194 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inc... |
| CVE-2026-118165 | MEDIUM | 6.8 | 0.2% | Oct 30, 2026 | The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic lightbox ... |
| CVE-2026-118101 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the author of the... |
| CVE-2026-118100 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before expor... |
| CVE-2026-118072 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to mana... |
| CVE-2026-118071 | MEDIUM | 6.8 | 0.2% | Oct 30, 2026 | The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting it in an H... |
| CVE-2026-117572 | MEDIUM | 4.1 | 0.2% | Oct 30, 2026 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter befor... |
| CVE-2026-117571 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape tracking data der... |
| CVE-2026-115277 | MEDIUM | 4.7 | 0.2% | Oct 30, 2026 | The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecti... |
| CVE-2026-114444 | MEDIUM | 4.4 | 0.2% | Oct 30, 2026 | The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its Fi... |
| CVE-2026-114443 | HIGH | 7.5 | 0.1% | Oct 30, 2026 | The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the acco... |
| CVE-2026-114422 | HIGH | 7.5 | 0.8% | Oct 30, 2026 | The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored m... |
| CVE-2026-5461 | MEDIUM | 6.5 | 0.3% | Oct 30, 2026 | The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1... |
| CVE-2026-104368 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up ... |
| CVE-2026-103963 | HIGH | 7.5 | 0.3% | Oct 30, 2026 | A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the... |
| CVE-2026-96389 | MEDIUM | 6.5 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit version... |