CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118192 | MEDIUM | 6.5 | 0.4% | Oct 29, 2026 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj... |
| CVE-2026-117611 | HIGH | 7.1 | 0.3% | Oct 29, 2026 | Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority st... |
| CVE-2026-116763 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all... |
| CVE-2026-111419 | HIGH | 8.6 | 0.4% | Oct 29, 2026 | A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains thi... |
| CVE-2026-111418 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service... |
| CVE-2026-111417 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the u... |
| CVE-2026-111318 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM... |
| CVE-2026-110707 | MEDIUM | 4.7 | 0.3% | Oct 29, 2026 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2026-109215 | MEDIUM | 6.4 | 0.3% | Oct 29, 2026 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bbp_reply_content' parame... |
| CVE-2026-107743 | HIGH | 7.2 | 0.4% | Oct 29, 2026 | The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, ... |
| CVE-2026-107629 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scr... |
| CVE-2026-107627 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scr... |
| CVE-2026-104727 | MEDIUM | 6.4 | 0.3% | Oct 29, 2026 | The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cond... |
| CVE-2026-103875 | MEDIUM | 4.7 | 0.3% | Oct 29, 2026 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search-string'... |
| CVE-2026-103485 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feat... |
| CVE-2026-85498 | LOW | 3.5 | 0.3% | Oct 29, 2026 | A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authenticatio... |
| CVE-2026-7190 | MEDIUM | 5.1 | 0.3% | Oct 29, 2026 | A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnera... |
| CVE-2026-115303 | LOW | 3.7 | 0.2% | Oct 29, 2026 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted fi... |
| CVE-2026-114358 | CRITICAL | 9.3 | 0.5% | Oct 29, 2026 | This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the ... |
| CVE-2026-117174 | — | — | — | Oct 29, 2026 | Rejected reason: VUL-2026-008368 為先回報之相同問題 |
| CVE-2025-62841 | HIGH | 8.7 | 0.2% | Oct 29, 2026 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac... |
| CVE-2025-62839 | HIGH | 8.7 | 0.2% | Oct 29, 2026 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac... |
| CVE-2026-118030 | MEDIUM | 4.2 | 0.2% | Oct 29, 2026 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and ac... |
| CVE-2026-117859 | MEDIUM | 5.4 | 0.2% | Oct 29, 2026 | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue oc... |
| CVE-2026-117688 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | A flaw was found in the client registration component of Keycloak, an open-source identity and access management solutio... |