CVE Vulnerability Database
Search and browse 377,736 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-17505 | MEDIUM | 6.1 | 0.8% | Aug 5, 2026 | The Translate Multilingual sites – TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting v... |
| CVE-2026-15281 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the w... |
| CVE-2026-12000 | HIGH | 7.5 | 0.7% | Aug 5, 2026 | The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and... |
| CVE-2026-11977 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to ... |
| CVE-2026-11969 | MEDIUM | 4.9 | 0.3% | Aug 5, 2026 | The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs[]' Paramete... |
| CVE-2026-11920 | MEDIUM | 4.9 | 0.3% | Aug 5, 2026 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL ... |
| CVE-2026-11454 | MEDIUM | 6.5 | 0.4% | Aug 5, 2026 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Insecure Direct Object... |
| CVE-2026-71201 | MEDIUM | 5 | 0.2% | Aug 5, 2026 | In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assign... |
| CVE-2026-70375 | HIGH | 8.8 | 1.0% | Aug 5, 2026 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDe... |
| CVE-2026-70374 | HIGH | 8.8 | 2.5% | Aug 5, 2026 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail genera... |
| CVE-2026-68080 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated atta... |
| CVE-2026-68078 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated att... |
| CVE-2026-68077 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to ... |
| CVE-2026-68075 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service... |
| CVE-2026-68073 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of... |
| CVE-2026-67592 | HIGH | 7.5 | 0.3% | Aug 5, 2026 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated att... |
| CVE-2026-67591 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service... |
| CVE-2026-67590 | HIGH | 7.5 | 0.4% | Aug 5, 2026 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of... |
| CVE-2026-67555 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated att... |
| CVE-2026-67554 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to ... |
| CVE-2026-67553 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service... |
| CVE-2026-67552 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of... |
| CVE-2026-66277 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated att... |
| CVE-2026-66276 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to ... |
| CVE-2026-66275 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service... |