CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110012 | MEDIUM | 4.3 | 0.1% | Oct 16, 2026 | The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to us... |
| CVE-2026-109982 | MEDIUM | 4.2 | 0.1% | Oct 16, 2026 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or valid... |
| CVE-2026-109401 | LOW | 2.7 | 0.3% | Oct 16, 2026 | The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl... |
| CVE-2026-109388 | MEDIUM | 6.4 | 0.3% | Oct 16, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-... |
| CVE-2026-109382 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to... |
| CVE-2026-109193 | HIGH | 7.2 | 0.4% | Oct 16, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-... |
| CVE-2026-107770 | MEDIUM | 6.8 | 0.5% | Oct 16, 2026 | The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all version... |
| CVE-2026-107768 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross... |
| CVE-2026-107646 | MEDIUM | 5.3 | 0.3% | Oct 16, 2026 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exp... |
| CVE-2026-105974 | MEDIUM | 4.3 | 0.1% | Oct 16, 2026 | The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent fo... |
| CVE-2026-105973 | MEDIUM | 4.3 | 0.1% | Oct 16, 2026 | The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form... |
| CVE-2026-104755 | MEDIUM | 4.8 | 0.3% | Oct 16, 2026 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in... |
| CVE-2026-104730 | CRITICAL | 9.8 | 0.5% | Oct 16, 2026 | The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to ... |
| CVE-2026-104715 | HIGH | 7.8 | 0.3% | Oct 16, 2026 | A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a priv... |
| CVE-2026-103696 | MEDIUM | 6.8 | 0.2% | Oct 16, 2026 | The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL stat... |
| CVE-2026-96570 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sas... |
| CVE-2026-95809 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress... |
| CVE-2026-95686 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress... |
| CVE-2026-93767 | MEDIUM | 6.5 | 0.6% | Oct 16, 2026 | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via t... |
| CVE-2026-89079 | CRITICAL | 9.8 | 0.3% | Oct 16, 2026 | The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, an... |
| CVE-2026-89051 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2026-88963 | MEDIUM | 6.1 | 0.2% | Oct 16, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scriptin... |
| CVE-2026-85659 | HIGH | 8.8 | 0.4% | Oct 16, 2026 | The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, an... |
| CVE-2026-12272 | MEDIUM | 5.3 | 0.2% | Oct 16, 2026 | The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Informa... |
| CVE-2026-111458 | MEDIUM | 6.8 | 0.1% | Oct 16, 2026 | The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certifica... |