CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2839 | MEDIUM | 5.3 | 0.3% | Oct 28, 2026 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of... |
| CVE-2026-118169 | MEDIUM | 4.9 | 0.2% | Oct 28, 2026 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2026-118164 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored C... |
| CVE-2026-116761 | MEDIUM | 5.4 | 0.2% | Oct 28, 2026 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1_grp[0][txt] (wysiwyg field ... |
| CVE-2026-116750 | MEDIUM | 6.5 | 0.3% | Oct 28, 2026 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to blind SQL Injection via the 'catid' pa... |
| CVE-2026-116749 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c... |
| CVE-2026-116610 | MEDIUM | 4.3 | 0.2% | Oct 28, 2026 | The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due... |
| CVE-2026-116609 | MEDIUM | 6.5 | 0.3% | Oct 28, 2026 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and si... |
| CVE-2026-111372 | MEDIUM | 4.3 | 0.3% | Oct 28, 2026 | The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up t... |
| CVE-2026-111213 | MEDIUM | 4.3 | 0.2% | Oct 28, 2026 | The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass ... |
| CVE-2026-111120 | HIGH | 8.8 | 0.3% | Oct 28, 2026 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers... |
| CVE-2026-111111 | HIGH | 7.2 | 0.2% | Oct 28, 2026 | The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for WordPress is vulnerable ... |
| CVE-2026-111068 | MEDIUM | 4.4 | 0.2% | Oct 28, 2026 | The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' parameter in all ver... |
| CVE-2026-110662 | HIGH | 7.2 | 0.3% | Oct 28, 2026 | The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-... |
| CVE-2026-110185 | MEDIUM | 5.9 | 0.6% | Oct 28, 2026 | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPres... |
| CVE-2026-110071 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versio... |
| CVE-2026-110020 | MEDIUM | 6.5 | 0.4% | Oct 28, 2026 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization bypass in all versions up to, a... |
| CVE-2026-109988 | MEDIUM | 4.4 | 0.2% | Oct 28, 2026 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cro... |
| CVE-2026-109980 | MEDIUM | 4.3 | 0.2% | Oct 28, 2026 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up ... |
| CVE-2026-109979 | MEDIUM | 4.3 | 0.3% | Oct 28, 2026 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, ... |
| CVE-2026-109978 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPre... |
| CVE-2026-109975 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPre... |
| CVE-2026-109972 | MEDIUM | 6.4 | 0.3% | Oct 28, 2026 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin... |
| CVE-2026-109590 | MEDIUM | 6.4 | 0.2% | Oct 28, 2026 | The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width', 'height' and... |
| CVE-2026-109385 | MEDIUM | 6.4 | 0.3% | Oct 28, 2026 | The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable... |