CVE Vulnerability Database
Search and browse 420,577 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55981 | CRITICAL | 9.6 | 0.2% | Oct 23, 2026 | A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate fi... |
| CVE-2026-94268 | HIGH | 8.1 | — | Oct 23, 2026 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plu... |
| CVE-2026-94267 | CRITICAL | 9 | — | Oct 23, 2026 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plu... |
| CVE-2026-94264 | MEDIUM | 6.8 | — | Oct 23, 2026 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plu... |
| CVE-2026-94262 | HIGH | 8.1 | — | Oct 23, 2026 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plu... |
| CVE-2026-113501 | LOW | 3.1 | — | Oct 23, 2026 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal hand... |
| CVE-2026-113500 | HIGH | 7.5 | — | Oct 23, 2026 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet con... |
| CVE-2026-113499 | HIGH | 7.5 | — | Oct 23, 2026 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet con... |
| CVE-2026-113472 | MEDIUM | 5.4 | — | Oct 23, 2026 | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its edi... |
| CVE-2026-112230 | LOW | 3.7 | — | Oct 23, 2026 | The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in ... |
| CVE-2026-112219 | MEDIUM | 4.9 | — | Oct 23, 2026 | The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem loca... |
| CVE-2026-111982 | HIGH | 7.2 | — | Oct 23, 2026 | The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific a... |
| CVE-2026-111966 | MEDIUM | 6.8 | — | Oct 23, 2026 | The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes bef... |
| CVE-2026-111738 | MEDIUM | 5.5 | — | Oct 23, 2026 | The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option cha... |
| CVE-2026-111737 | LOW | 3.5 | — | Oct 23, 2026 | The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting th... |
| CVE-2026-110537 | LOW | 3.8 | — | Oct 23, 2026 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the s... |
| CVE-2026-110510 | LOW | 3.5 | — | Oct 23, 2026 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its ... |
| CVE-2026-109936 | HIGH | 7.5 | — | Oct 23, 2026 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its dynamic-conten... |
| CVE-2026-109935 | MEDIUM | 5.3 | 0.1% | Oct 23, 2026 | The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post i... |
| CVE-2026-109934 | MEDIUM | 5.3 | — | Oct 23, 2026 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readable before ... |
| CVE-2026-109933 | MEDIUM | 6.8 | — | Oct 23, 2026 | The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values... |
| CVE-2026-107858 | HIGH | 7.2 | 0.4% | Oct 23, 2026 | Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) i... |
| CVE-2026-86055 | HIGH | 8.7 | 0.4% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds... |
| CVE-2026-86020 | MEDIUM | 4.6 | 0.1% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB contai... |
| CVE-2026-86019 | MEDIUM | 5.3 | 0.2% | Oct 23, 2026 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows... |