CVE Vulnerability Database
Search and browse 424,017 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107160 | MEDIUM | 5.3 | 0.1% | Oct 14, 2026 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization be... |
| CVE-2026-107158 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of ... |
| CVE-2026-107126 | HIGH | 8.8 | 0.2% | Oct 14, 2026 | The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value ... |
| CVE-2026-106646 | MEDIUM | 5.9 | 0.2% | Oct 14, 2026 | The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target lis... |
| CVE-2026-106469 | MEDIUM | 6.8 | 0.2% | Oct 14, 2026 | The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before i... |
| CVE-2026-106166 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks ... |
| CVE-2026-106099 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized user... |
| CVE-2026-106098 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST... |
| CVE-2026-105975 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money paymen... |
| CVE-2026-105969 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitte... |
| CVE-2026-105261 | MEDIUM | 6.8 | 0.2% | Oct 14, 2026 | The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress... |
| CVE-2026-104751 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stor... |
| CVE-2026-104644 | MEDIUM | 6.8 | 0.2% | Oct 14, 2026 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuratio... |
| CVE-2026-103307 | HIGH | 8.6 | 0.2% | Oct 14, 2026 | The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user i... |
| CVE-2026-94370 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt ... |
| CVE-2026-50218 | HIGH | 8.5 | 0.3% | Oct 14, 2026 | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seedi... |
| CVE-2026-50217 | MEDIUM | 4.7 | 0.1% | Oct 14, 2026 | A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a loca... |
| CVE-2026-50216 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akama... |
| CVE-2026-110459 | HIGH | 8.6 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prote... |
| CVE-2026-110458 | LOW | 3.7 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability f... |
| CVE-2026-110457 | LOW | 3.7 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability f... |
| CVE-2026-107153 | HIGH | 7 | 0.2% | Oct 14, 2026 | Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) funct... |
| CVE-2026-50215 | MEDIUM | 4.4 | 0.1% | Oct 14, 2026 | A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) bef... |
| CVE-2026-46449 | MEDIUM | 6.7 | 1.7% | Oct 14, 2026 | The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerabilit... |
| CVE-2026-110456 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulne... |