CVE Vulnerability Database
Search and browse 424,017 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110449 | HIGH | 7.5 | 0.2% | Oct 14, 2026 | Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untru... |
| CVE-2026-104800 | CRITICAL | 9.8 | 1.0% | Oct 14, 2026 | The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via t... |
| CVE-2026-100193 | MEDIUM | 4.7 | 0.2% | Oct 14, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin... |
| CVE-2026-100185 | MEDIUM | 6.4 | 0.3% | Oct 14, 2026 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored C... |
| CVE-2026-100153 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' ... |
| CVE-2026-97668 | CRITICAL | 9.8 | 0.4% | Oct 14, 2026 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent... |
| CVE-2026-97657 | CRITICAL | 9.8 | 0.4% | Oct 14, 2026 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encrypt... |
| CVE-2026-14765 | HIGH | 7.7 | 0.4% | Oct 14, 2026 | Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchUR... |
| CVE-2026-110447 | CRITICAL | 9.8 | 73.3% | Oct 14, 2026 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution... |
| CVE-2026-110445 | HIGH | 8.8 | 0.6% | Oct 14, 2026 | TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers... |
| CVE-2026-110444 | HIGH | 8.8 | 0.6% | Oct 14, 2026 | TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers... |
| CVE-2026-110002 | CRITICAL | 9.8 | 1.0% | Oct 14, 2026 | The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and incl... |
| CVE-2026-103422 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions u... |
| CVE-2026-102251 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' pa... |
| CVE-2026-93388 | CRITICAL | 9.8 | 0.9% | Oct 14, 2026 | The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file up... |
| CVE-2026-92097 | CRITICAL | 9.1 | 0.5% | Oct 14, 2026 | The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, an... |
| CVE-2026-86607 | MEDIUM | 4.3 | 0.2% | Oct 14, 2026 | Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affects Hitach... |
| CVE-2026-86573 | MEDIUM | 5.1 | 0.1% | Oct 14, 2026 | Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Ser... |
| CVE-2026-82715 | HIGH | 7.9 | 0.1% | Oct 14, 2026 | Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O... |
| CVE-2026-17092 | HIGH | 8.1 | 0.5% | Oct 14, 2026 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authoriz... |
| CVE-2026-110392 | CRITICAL | 9.8 | 1.2% | Oct 14, 2026 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open... |
| CVE-2026-107652 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions ... |
| CVE-2026-104995 | HIGH | 8.1 | 0.9% | Oct 14, 2026 | The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 v... |
| CVE-2026-104767 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Esc... |
| CVE-2026-104749 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln... |