CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111122 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter ... |
| CVE-2026-110017 | MEDIUM | 6.4 | 0.2% | Oct 16, 2026 | The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... |
| CVE-2026-109513 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Fl... |
| CVE-2026-109447 | HIGH | 8.1 | 0.3% | Oct 16, 2026 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2026-109414 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src... |
| CVE-2026-109232 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stor... |
| CVE-2026-107764 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_aut... |
| CVE-2026-107748 | MEDIUM | 6.4 | 0.2% | Oct 16, 2026 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2026-104932 | HIGH | 8 | 0.3% | Oct 16, 2026 | The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrus... |
| CVE-2026-104001 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcod... |
| CVE-2026-104000 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' para... |
| CVE-2026-103999 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in... |
| CVE-2026-103896 | HIGH | 7.5 | 0.5% | Oct 16, 2026 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a lim... |
| CVE-2026-103768 | CRITICAL | 9.8 | 0.6% | Oct 16, 2026 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in a... |
| CVE-2026-103480 | MEDIUM | 6.4 | 0.2% | Oct 16, 2026 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2026-100186 | HIGH | 7.2 | 0.2% | Oct 16, 2026 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2026-100158 | MEDIUM | 6.4 | 0.2% | Oct 16, 2026 | The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($v... |
| CVE-2026-96562 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, a... |
| CVE-2026-111114 | HIGH | 7.5 | 0.3% | Oct 16, 2026 | The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privile... |
| CVE-2026-111106 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/seg... |
| CVE-2026-110721 | MEDIUM | 5.3 | 0.2% | Oct 16, 2026 | The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in ... |
| CVE-2026-110590 | HIGH | 7.5 | 0.3% | Oct 16, 2026 | The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi... |
| CVE-2026-110019 | MEDIUM | 4.3 | 0.2% | Oct 16, 2026 | The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and ... |
| CVE-2026-109998 | HIGH | 7.2 | 0.3% | Oct 16, 2026 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all vers... |
| CVE-2026-109515 | CRITICAL | 9.8 | 0.4% | Oct 16, 2026 | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulne... |