CVE Vulnerability Database
Search and browse 420,590 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114699 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured... |
| CVE-2026-114698 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Con... |
| CVE-2026-114696 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Explo... |
| CVE-2026-114195 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopm... |
| CVE-2026-112845 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-... |
| CVE-2026-112379 | HIGH | 7.1 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact... |
| CVE-2026-112327 | CRITICAL | 9.3 | 0.2% | Oct 22, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliab... |
| CVE-2026-112312 | HIGH | 7.5 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured A... |
| CVE-2026-112311 | MEDIUM | 6.5 | 0.3% | Oct 22, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extende... |
| CVE-2026-112242 | HIGH | 8.8 | 0.2% | Oct 22, 2026 | Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.T... |
| CVE-2026-112241 | CRITICAL | 9.8 | 0.3% | Oct 22, 2026 | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This i... |
| CVE-2026-112218 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured ... |
| CVE-2026-111851 | HIGH | 7.6 | — | Oct 22, 2026 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elemen... |
| CVE-2026-111842 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly... |
| CVE-2026-111830 | HIGH | 7.1 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mai... |
| CVE-2026-110974 | MEDIUM | 6.3 | 0.3% | Oct 22, 2026 | The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSON... |
| CVE-2026-110894 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-110893 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-114460 | MEDIUM | 5.3 | 0.3% | Oct 22, 2026 | A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an... |
| CVE-2026-114459 | LOW | 3.7 | 0.4% | Oct 22, 2026 | A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to re... |
| CVE-2026-114458 | MEDIUM | 5.9 | 0.3% | Oct 22, 2026 | A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numer... |
| CVE-2026-114457 | LOW | 3.7 | 0.4% | Oct 22, 2026 | A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a speci... |
| CVE-2026-114184 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor ... |
| CVE-2026-114182 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor all... |
| CVE-2026-114180 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Sec... |