CVE Vulnerability Database
Search and browse 423,801 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109895 | HIGH | 7.1 | 0.2% | Oct 18, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics... |
| CVE-2026-109894 | CRITICAL | 9.3 | 0.2% | Oct 18, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics... |
| CVE-2026-108485 | HIGH | 7.1 | 0.2% | Oct 18, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore ... |
| CVE-2026-107436 | HIGH | 8.8 | 0.4% | Oct 18, 2026 | Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Inject... |
| CVE-2026-96534 | HIGH | 7.7 | 0.2% | Oct 18, 2026 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0... |
| CVE-2026-87844 | MEDIUM | 5.3 | 0.2% | Oct 18, 2026 | The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check a... |
| CVE-2026-111942 | MEDIUM | 4.3 | 0.3% | Oct 18, 2026 | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of th... |
| CVE-2026-111877 | MEDIUM | 4.3 | 0.3% | Oct 18, 2026 | A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects ... |
| CVE-2026-111041 | MEDIUM | 4.9 | 0.2% | Oct 18, 2026 | The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management action... |
| CVE-2026-110981 | HIGH | 7.1 | 0.2% | Oct 18, 2026 | The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before r... |
| CVE-2026-110976 | MEDIUM | 4.9 | 0.2% | Oct 18, 2026 | The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to ... |
| CVE-2026-110070 | MEDIUM | 6.5 | 0.2% | Oct 18, 2026 | The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the tar... |
| CVE-2026-110069 | MEDIUM | 4.3 | 0.2% | Oct 18, 2026 | The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks b... |
| CVE-2026-110035 | MEDIUM | 4.3 | 0.2% | Oct 18, 2026 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staf... |
| CVE-2026-110033 | MEDIUM | 6.8 | 0.2% | Oct 18, 2026 | The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching i... |
| CVE-2026-110032 | MEDIUM | 5.5 | 0.2% | Oct 18, 2026 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles ma... |
| CVE-2026-110031 | HIGH | 7.2 | 0.3% | Oct 18, 2026 | The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role fr... |
| CVE-2026-110026 | MEDIUM | 4.9 | 0.2% | Oct 18, 2026 | The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renamin... |
| CVE-2026-109937 | MEDIUM | 5.4 | 0.1% | Oct 18, 2026 | The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site be... |
| CVE-2026-111876 | MEDIUM | 5.3 | 0.6% | Oct 18, 2026 | A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::outpu... |
| CVE-2026-111875 | MEDIUM | 4.7 | 0.2% | Oct 18, 2026 | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown func... |
| CVE-2026-111874 | LOW | 3.7 | 0.5% | Oct 18, 2026 | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.ph... |
| CVE-2026-111873 | HIGH | 7.3 | 0.3% | Oct 18, 2026 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.... |
| CVE-2026-111872 | HIGH | 7.3 | 0.3% | Oct 18, 2026 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c991... |
| CVE-2026-111871 | HIGH | 7.3 | 0.3% | Oct 18, 2026 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e244... |