CVE Vulnerability Database
Search and browse 420,590 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114177 | HIGH | 8.8 | 0.1% | Oct 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Re... |
| CVE-2026-114175 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configu... |
| CVE-2026-112867 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in H5P H5P h5p allows... |
| CVE-2026-112843 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Co... |
| CVE-2026-112826 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incor... |
| CVE-2026-111847 | MEDIUM | 5.4 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allow... |
| CVE-2026-105270 | HIGH | 8.7 | 0.3% | Oct 22, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an unauthent... |
| CVE-2026-103634 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp)... |
| CVE-2026-97328 | HIGH | 7.5 | 0.2% | Oct 22, 2026 | The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into eleme... |
| CVE-2026-88849 | LOW | 2.7 | 0.1% | Oct 22, 2026 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its st... |
| CVE-2026-78392 | MEDIUM | 6.8 | 0.2% | Oct 22, 2026 | The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outputting it inside an ... |
| CVE-2026-114570 | MEDIUM | 4.9 | 0.2% | Oct 22, 2026 | WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 d... |
| CVE-2026-111972 | MEDIUM | 4.9 | 0.1% | Oct 22, 2026 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised t... |
| CVE-2026-111971 | MEDIUM | 6.8 | 0.2% | Oct 22, 2026 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and... |
| CVE-2026-111958 | HIGH | 7.5 | 0.1% | Oct 22, 2026 | The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for... |
| CVE-2026-110011 | LOW | 2.7 | 0.1% | Oct 22, 2026 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its e... |
| CVE-2026-110010 | MEDIUM | 4.8 | 0.2% | Oct 22, 2026 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any capability or authentic... |
| CVE-2026-109987 | HIGH | 7.2 | 0.2% | Oct 22, 2026 | The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise and ... |
| CVE-2026-109931 | LOW | 3.7 | 0.1% | Oct 22, 2026 | The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action ... |
| CVE-2026-109927 | HIGH | 7.2 | 0.2% | Oct 22, 2026 | The HIPAA Forms WordPress plugin before 3.3.2 does not perform a capability check when handling a request that rebuilds ... |
| CVE-2026-103234 | MEDIUM | 4.8 | 0.2% | Oct 22, 2026 | The WP Ultimate Review WordPress plugin before 2.4.5 does not neutralise shortcodes in all of the review fields submitte... |
| CVE-2026-100142 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored customer address sele... |
| CVE-2026-114223 | MEDIUM | 5.5 | 0.1% | Oct 22, 2026 | NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local a... |
| CVE-2026-114222 | MEDIUM | 6.2 | 0.1% | Oct 22, 2026 | NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can... |
| CVE-2026-114221 | HIGH | 7.4 | 0.3% | Oct 22, 2026 | NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can... |