CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25450 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf... |
| CVE-2026-25448 | MEDIUM | 4.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Securit... |
| CVE-2026-118097 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & H... |
| CVE-2026-118095 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi... |
| CVE-2026-118092 | MEDIUM | 4.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows ... |
| CVE-2026-118091 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-118088 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-116856 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible... |
| CVE-2026-116850 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addon... |
| CVE-2026-116849 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCas... |
| CVE-2026-116846 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con... |
| CVE-2026-116406 | MEDIUM | 4.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf... |
| CVE-2026-116387 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Acc... |
| CVE-2026-115713 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un... |
| CVE-2026-115712 | MEDIUM | 4.3 | 0.2% | Oct 29, 2026 | Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-le... |
| CVE-2026-115711 | MEDIUM | 6.4 | 0.2% | Oct 29, 2026 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E... |
| CVE-2026-115709 | HIGH | 8.2 | 0.3% | Oct 29, 2026 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to un... |
| CVE-2026-115708 | HIGH | 7.2 | 0.2% | Oct 29, 2026 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to au... |
| CVE-2026-115707 | MEDIUM | 6.4 | 0.1% | Oct 29, 2026 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E... |
| CVE-2026-115706 | MEDIUM | 6.8 | 0.3% | Oct 29, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escal... |
| CVE-2026-115610 | MEDIUM | 6.5 | 0.1% | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Publi... |
| CVE-2026-115605 | MEDIUM | 4.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-115601 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiti... |
| CVE-2026-114706 | MEDIUM | 6.5 | 0.1% | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te... |
| CVE-2026-114181 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager al... |