CVE Vulnerability Database
Search and browse 419,784 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107786 | MEDIUM | 6.8 | 0.2% | Nov 5, 2026 | The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting befor... |
| CVE-2026-107775 | LOW | 2.7 | 0.1% | Nov 5, 2026 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not verify that t... |
| CVE-2026-107774 | MEDIUM | 5.3 | 0.1% | Nov 5, 2026 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not use a trusted... |
| CVE-2026-107773 | MEDIUM | 6.5 | 0.1% | Nov 5, 2026 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly ver... |
| CVE-2026-105971 | MEDIUM | 5.3 | 0.1% | Nov 5, 2026 | The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict its unauthenticated single... |
| CVE-2026-105259 | MEDIUM | 6.8 | 0.2% | Nov 5, 2026 | The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of file types... |
| CVE-2026-100144 | CRITICAL | 9.3 | 0.2% | Nov 5, 2026 | The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in... |
| CVE-2025-15702 | HIGH | 8.8 | 0.2% | Nov 5, 2026 | The Cloud Blocks WordPress plugin through 1.1.8 does not perform any authorisation or sanitisation when storing block as... |
| CVE-2025-15701 | LOW | 3.5 | 0.2% | Nov 5, 2026 | The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting ... |
| CVE-2026-93389 | HIGH | 8.2 | 0.2% | Nov 5, 2026 | The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer d... |
| CVE-2026-123012 | HIGH | 7.1 | 0.3% | Nov 5, 2026 | In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read acces... |
| CVE-2026-123011 | MEDIUM | 4.2 | — | Nov 5, 2026 | STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channel... |
| CVE-2026-123010 | HIGH | 7.2 | — | Nov 5, 2026 | @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to... |
| CVE-2026-120553 | MEDIUM | 6.4 | 0.3% | Nov 5, 2026 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slides_t... |
| CVE-2026-120533 | MEDIUM | 6.4 | 0.3% | Nov 5, 2026 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theme_opts Parameter via User ... |
| CVE-2026-118193 | HIGH | 8.8 | 0.4% | Nov 5, 2026 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all ... |
| CVE-2026-116617 | HIGH | 8.1 | 0.5% | Nov 5, 2026 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all vers... |
| CVE-2026-104812 | MEDIUM | 6.4 | 0.2% | Nov 5, 2026 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multi_media' Field Array Key ... |
| CVE-2026-122236 | MEDIUM | 6.3 | 0.4% | Nov 5, 2026 | A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page... |
| CVE-2026-122191 | MEDIUM | 6.3 | 0.2% | Nov 5, 2026 | A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the f... |
| CVE-2026-122190 | LOW | 2.4 | 0.2% | Nov 5, 2026 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function... |
| CVE-2026-69068 | — | — | 0.1% | Nov 5, 2026 | Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. |
| CVE-2026-69066 | — | — | 0.1% | Nov 5, 2026 | Memory corruption in GPU driver due to improper validation of VMID reservation. |
| CVE-2026-69050 | — | — | 0.1% | Nov 5, 2026 | Out-of-bounds memory access in a device driver due to improper resource state tracking. |
| CVE-2026-69044 | — | — | 0.1% | Nov 5, 2026 | In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. |