CVE Vulnerability Database
Search and browse 420,515 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116256 | HIGH | 7.3 | — | Oct 26, 2026 | A vulnerability was found in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb905. Affected by this vulnerabi... |
| CVE-2026-115961 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Slider ... |
| CVE-2026-115960 | MEDIUM | 4.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrect... |
| CVE-2026-115959 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrect... |
| CVE-2026-115956 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Panorama ... |
| CVE-2026-115955 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Advanced ... |
| CVE-2026-115954 | MEDIUM | 5.4 | — | Oct 26, 2026 | Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access... |
| CVE-2026-115953 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Ma... |
| CVE-2026-115951 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Weber Lazy L... |
| CVE-2026-115950 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets B... |
| CVE-2026-115948 | HIGH | 8.5 | — | Oct 26, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Medi... |
| CVE-2026-115608 | HIGH | 8.5 | — | Oct 26, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi... |
| CVE-2026-115595 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Exploiting I... |
| CVE-2026-115594 | MEDIUM | 6.5 | — | Oct 26, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-a... |
| CVE-2026-114708 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar... |
| CVE-2026-114707 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2026-97295 | MEDIUM | 4.3 | — | Oct 26, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows ... |
| CVE-2026-97255 | MEDIUM | 5.3 | — | Oct 26, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons royal-elementor-addons ... |
| CVE-2026-97254 | MEDIUM | 6.5 | — | Oct 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elem... |
| CVE-2026-4316 | MEDIUM | 5.1 | 0.4% | Oct 26, 2026 | Reflected Cross-Site Scripting (XSS) in Gym Management Software IsMyGym by Zuinq Studio affecting the reservation endpoi... |
| CVE-2026-116255 | MEDIUM | 5.3 | 0.7% | Oct 26, 2026 | A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the functi... |
| CVE-2026-116254 | MEDIUM | 6.5 | 0.3% | Oct 26, 2026 | A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the ... |
| CVE-2026-116253 | HIGH | 7.3 | 0.5% | Oct 26, 2026 | A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuot... |
| CVE-2026-116237 | HIGH | 8.4 | 0.4% | Oct 26, 2026 | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Perfor... |
| CVE-2026-115958 | MEDIUM | 5.3 | — | Oct 26, 2026 | Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Inc... |