CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112844 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event... |
| CVE-2026-111402 | CRITICAL | 9.3 | 0.3% | Oct 24, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software... |
| CVE-2026-110892 | MEDIUM | 6.5 | 0.3% | Oct 24, 2026 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-115803 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter... |
| CVE-2026-115802 | MEDIUM | 4.3 | 0.3% | Oct 24, 2026 | A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/Aut... |
| CVE-2026-108013 | MEDIUM | 6.8 | 0.2% | Oct 24, 2026 | BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust cer... |
| CVE-2026-97353 | MEDIUM | 5.4 | 0.2% | Oct 24, 2026 | The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before ... |
| CVE-2026-97352 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX a... |
| CVE-2026-87835 | MEDIUM | 6.5 | 0.2% | Oct 24, 2026 | The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when re... |
| CVE-2026-114429 | MEDIUM | 6.8 | 0.3% | Oct 24, 2026 | The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before st... |
| CVE-2026-113674 | LOW | 3.7 | 0.2% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-ou... |
| CVE-2026-113673 | HIGH | 7.2 | 0.6% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it ... |
| CVE-2026-113493 | MEDIUM | 6.8 | 0.3% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes befo... |
| CVE-2026-113492 | MEDIUM | 5.3 | 0.3% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading lis... |
| CVE-2026-113491 | MEDIUM | 6.4 | 0.2% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local... |
| CVE-2026-113490 | MEDIUM | 5.3 | 0.3% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listin... |
| CVE-2026-113489 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing be... |
| CVE-2026-112207 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site be... |
| CVE-2026-110956 | CRITICAL | 9.8 | 0.4% | Oct 24, 2026 | The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before auth... |
| CVE-2026-107907 | MEDIUM | 6.5 | 0.2% | Oct 24, 2026 | The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front... |
| CVE-2026-107887 | MEDIUM | 5.4 | 0.1% | Oct 24, 2026 | The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the actio... |
| CVE-2026-105199 | MEDIUM | 6.8 | 0.3% | Oct 24, 2026 | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its A... |
| CVE-2026-115807 | HIGH | 7.1 | 0.2% | Oct 24, 2026 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2026-115806 | CRITICAL | 9.8 | 0.5% | Oct 24, 2026 | The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,... |
| CVE-2026-115929 | MEDIUM | 6.8 | 0.2% | Oct 24, 2026 | MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root cer... |