CVE Vulnerability Database
Search and browse 420,569 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114743 | LOW | 3.1 | 0.2% | Oct 25, 2026 | The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPre... |
| CVE-2026-114742 | LOW | 2.7 | 0.1% | Oct 25, 2026 | The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allo... |
| CVE-2026-114741 | LOW | 3.8 | 0.1% | Oct 25, 2026 | The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating vir... |
| CVE-2026-114740 | MEDIUM | 4.9 | 0.2% | Oct 25, 2026 | The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setu... |
| CVE-2026-111981 | LOW | 2.7 | 0.1% | Oct 25, 2026 | The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, al... |
| CVE-2026-111980 | MEDIUM | 5.5 | 0.1% | Oct 25, 2026 | The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies t... |
| CVE-2026-111979 | MEDIUM | 6.8 | 0.2% | Oct 25, 2026 | The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template set... |
| CVE-2026-111978 | MEDIUM | 6 | 0.2% | Oct 25, 2026 | The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from ... |
| CVE-2026-111976 | MEDIUM | 5.3 | 0.1% | Oct 25, 2026 | The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation f... |
| CVE-2026-110285 | MEDIUM | 5.3 | 0.1% | Oct 25, 2026 | The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing sec... |
| CVE-2025-15705 | LOW | 3.5 | 0.2% | Oct 25, 2026 | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users wi... |
| CVE-2026-116007 | LOW | 3.7 | 0.4% | Oct 25, 2026 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeS... |
| CVE-2026-116006 | HIGH | 7.3 | 0.8% | Oct 25, 2026 | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun... |
| CVE-2026-116004 | LOW | 3.5 | 0.2% | Oct 25, 2026 | A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file... |
| CVE-2026-116000 | HIGH | 7.3 | 0.3% | Oct 25, 2026 | A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_f... |
| CVE-2026-115999 | HIGH | 7.3 | 0.3% | Oct 25, 2026 | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct... |
| CVE-2026-115997 | MEDIUM | 6.3 | 0.2% | Oct 25, 2026 | A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/... |
| CVE-2026-89284 | — | — | — | Oct 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-115996 | LOW | 3.7 | 0.2% | Oct 24, 2026 | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function W... |
| CVE-2026-115995 | CRITICAL | 9.6 | 1.4% | Oct 24, 2026 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f... |
| CVE-2026-111326 | — | — | — | Oct 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-109111 | — | — | — | Oct 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-115982 | MEDIUM | 4.3 | 0.3% | Oct 24, 2026 | A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file... |
| CVE-2026-115981 | LOW | 2.4 | 0.3% | Oct 24, 2026 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown function... |
| CVE-2026-115973 | HIGH | 7.3 | 0.3% | Oct 24, 2026 | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword... |