CVE Vulnerability Database
Search and browse 424,017 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110455 | HIGH | 8.1 | 1.2% | Oct 14, 2026 | A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vul... |
| CVE-2026-110454 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prote... |
| CVE-2026-110453 | MEDIUM | 4.3 | 0.1% | Oct 14, 2026 | Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon ... |
| CVE-2026-110452 | MEDIUM | 4 | 0.1% | Oct 14, 2026 | The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installe... |
| CVE-2026-110451 | MEDIUM | 4.3 | 0.1% | Oct 14, 2026 | Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a cer... |
| CVE-2026-110450 | HIGH | 8 | 0.1% | Oct 14, 2026 | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and t... |
| CVE-2026-106931 | HIGH | 8.5 | 1.4% | Oct 14, 2026 | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrar... |
| CVE-2026-105429 | HIGH | 8 | 0.6% | Oct 14, 2026 | Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.g... |
| CVE-2026-103369 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Stored Cross-Site Scrip... |
| CVE-2026-101926 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' p... |
| CVE-2026-101924 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4... |
| CVE-2026-97471 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a... |
| CVE-2026-97398 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcod... |
| CVE-2026-97020 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all ver... |
| CVE-2026-96661 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter i... |
| CVE-2026-95816 | HIGH | 7.2 | 0.4% | Oct 14, 2026 | The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2026-95808 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind S... |
| CVE-2026-95807 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in ... |
| CVE-2026-94377 | HIGH | 7.2 | 0.4% | Oct 14, 2026 | The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderati... |
| CVE-2026-93885 | HIGH | 7.2 | 0.4% | Oct 14, 2026 | The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2026-87855 | CRITICAL | 9.8 | 0.8% | Oct 14, 2026 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and... |
| CVE-2026-83592 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field ... |
| CVE-2026-78193 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Iden... |
| CVE-2026-77114 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action R... |
| CVE-2026-16495 | MEDIUM | 6.4 | 0.2% | Oct 14, 2026 | The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect_u... |