CVE Vulnerability Database
Search and browse 423,905 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-78087 | MEDIUM | 6.4 | 0.2% | Oct 15, 2026 | The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'linkToPost' Feature in ... |
| CVE-2026-78001 | MEDIUM | 6.4 | 0.2% | Oct 15, 2026 | The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2026-18586 | HIGH | 7.2 | 0.2% | Oct 15, 2026 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross... |
| CVE-2026-18557 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2026-18548 | HIGH | 7.2 | 0.3% | Oct 15, 2026 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
| CVE-2026-17031 | HIGH | 8.1 | 0.3% | Oct 15, 2026 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass... |
| CVE-2026-17001 | MEDIUM | 6.4 | 0.2% | Oct 15, 2026 | The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom C... |
| CVE-2026-15180 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' P... |
| CVE-2026-15090 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all vers... |
| CVE-2026-110926 | — | — | 0.3% | Oct 15, 2026 | Rejected reason: CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582. |
| CVE-2026-110925 | — | — | 0.2% | Oct 15, 2026 | Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583. |
| CVE-2026-110923 | — | — | 0.3% | Oct 15, 2026 | Rejected reason: CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552. |
| CVE-2026-76667 | MEDIUM | 5.7 | 0.1% | Oct 15, 2026 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. |
| CVE-2026-76666 | MEDIUM | 4.7 | 0.1% | Oct 15, 2026 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. |
| CVE-2026-76665 | HIGH | 7.1 | 0.2% | Oct 15, 2026 | A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. |
| CVE-2026-3712 | HIGH | 7.3 | 0.2% | Oct 15, 2026 | The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3... |
| CVE-2026-14572 | MEDIUM | 6.4 | 0.2% | Oct 15, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site ... |
| CVE-2026-108587 | CRITICAL | 9.8 | 0.9% | Oct 15, 2026 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbit... |
| CVE-2026-93484 | HIGH | 8.6 | 0.3% | Oct 15, 2026 | Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL... |
| CVE-2026-93483 | CRITICAL | 9.5 | 0.2% | Oct 15, 2026 | In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensit... |
| CVE-2026-76664 | MEDIUM | 6.4 | 0.1% | Oct 15, 2026 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations |
| CVE-2026-110912 | HIGH | 7.1 | 0.2% | Oct 15, 2026 | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.... |
| CVE-2026-110911 | CRITICAL | 9.8 | 0.3% | Oct 15, 2026 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic fi... |
| CVE-2026-76663 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS. |
| CVE-2026-76662 | MEDIUM | 5.9 | 0.2% | Oct 15, 2026 | A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. |