CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109216 | MEDIUM | 4.9 | — | Oct 29, 2026 | The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th... |
| CVE-2026-103665 | HIGH | 8.4 | — | Oct 29, 2026 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari... |
| CVE-2026-71569 | MEDIUM | 4.8 | — | Oct 29, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from... |
| CVE-2026-33924 | HIGH | 7.2 | — | Oct 29, 2026 | Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient va... |
| CVE-2026-33923 | HIGH | 7.2 | — | Oct 29, 2026 | A signature verification vulnerability was discovered in the update installation functionality due to inconsistent valid... |
| CVE-2026-118989 | MEDIUM | 5.5 | — | Oct 29, 2026 | WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability ... |
| CVE-2026-118984 | MEDIUM | 5.5 | — | Oct 29, 2026 | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or adm... |
| CVE-2026-116409 | HIGH | 7.1 | 0.2% | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell O... |
| CVE-2026-115967 | HIGH | 8.8 | — | Oct 29, 2026 | Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication ... |
| CVE-2026-115965 | HIGH | 8.5 | — | Oct 29, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPr... |
| CVE-2026-115964 | CRITICAL | 9.3 | — | Oct 29, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot... |
| CVE-2026-115963 | HIGH | 7.1 | — | Oct 29, 2026 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration all... |
| CVE-2026-115962 | MEDIUM | 4.3 | — | Oct 29, 2026 | Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCr... |
| CVE-2026-115942 | HIGH | 7.5 | 0.1% | Oct 29, 2026 | A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certif... |
| CVE-2026-115611 | HIGH | 7.1 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net Table... |
| CVE-2026-115599 | HIGH | 7.5 | — | Oct 29, 2026 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-115592 | HIGH | 7.1 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oc... |
| CVE-2026-114230 | CRITICAL | 9.8 | 0.3% | Oct 29, 2026 | When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL fr... |
| CVE-2026-114193 | HIGH | 7.5 | — | Oct 29, 2026 | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured... |
| CVE-2026-112827 | HIGH | 7.1 | — | Oct 29, 2026 | Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping... |
| CVE-2026-105042 | CRITICAL | 9.8 | 0.2% | Oct 29, 2026 | A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. Thi... |
| CVE-2026-105031 | CRITICAL | 9.1 | 0.1% | Oct 29, 2026 | When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs(... |
| CVE-2026-91153 | MEDIUM | 5.3 | 0.6% | Oct 29, 2026 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulne... |
| CVE-2026-91152 | MEDIUM | 6.1 | 0.3% | Oct 29, 2026 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulne... |
| CVE-2026-88941 | MEDIUM | 5.2 | 0.1% | Oct 29, 2026 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerabil... |