CVE Vulnerability Database
Search and browse 423,806 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107752 | MEDIUM | 4.9 | 0.3% | Oct 17, 2026 | The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fie... |
| CVE-2026-107744 | MEDIUM | 6.5 | 0.3% | Oct 17, 2026 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authoriza... |
| CVE-2026-104736 | CRITICAL | 9.8 | 0.4% | Oct 17, 2026 | The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via d... |
| CVE-2026-103899 | HIGH | 7.2 | 0.2% | Oct 17, 2026 | The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_numb... |
| CVE-2026-111602 | LOW | 3.7 | 0.3% | Oct 17, 2026 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to S... |
| CVE-2026-111601 | MEDIUM | 6.1 | 0.2% | Oct 17, 2026 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'toke... |
| CVE-2026-110653 | CRITICAL | 9.1 | 0.4% | Oct 17, 2026 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to A... |
| CVE-2026-109208 | HIGH | 7.2 | 0.3% | Oct 17, 2026 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-107763 | MEDIUM | 4.3 | 0.2% | Oct 17, 2026 | The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including... |
| CVE-2026-107762 | HIGH | 7.5 | 0.4% | Oct 17, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Ob... |
| CVE-2026-104734 | HIGH | 7.2 | 0.5% | Oct 17, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injecti... |
| CVE-2026-111855 | HIGH | 7.5 | 0.5% | Oct 17, 2026 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the we... |
| CVE-2026-111854 | HIGH | 8.1 | 0.4% | Oct 17, 2026 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILE... |
| CVE-2026-111853 | HIGH | 8.8 | 0.9% | Oct 17, 2026 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in... |
| CVE-2026-111823 | CRITICAL | 9.8 | 0.4% | Oct 17, 2026 | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider. |
| CVE-2026-89096 | MEDIUM | 5.9 | 0.3% | Oct 16, 2026 | A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repea... |
| CVE-2026-89088 | MEDIUM | 5.5 | 0.2% | Oct 16, 2026 | A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling ... |
| CVE-2026-89085 | MEDIUM | 6.6 | 0.2% | Oct 16, 2026 | A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem ... |
| CVE-2026-17591 | LOW | 3.6 | 0.2% | Oct 16, 2026 | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due ... |
| CVE-2026-111802 | MEDIUM | 6.6 | 0.2% | Oct 16, 2026 | A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to... |
| CVE-2026-110759 | CRITICAL | 9.8 | 0.2% | Oct 16, 2026 | Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed ... |
| CVE-2026-110758 | HIGH | 7.5 | 0.2% | Oct 16, 2026 | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_t... |
| CVE-2026-110757 | CRITICAL | 9.8 | 0.2% | Oct 16, 2026 | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in c... |
| CVE-2026-110756 | CRITICAL | 9.8 | 0.2% | Oct 16, 2026 | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field prece... |
| CVE-2026-110755 | HIGH | 7.5 | 0.2% | Oct 16, 2026 | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-on... |