CVE Vulnerability Database
Search and browse 420,055 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16511 | HIGH | 8.8 | — | Nov 4, 2026 | Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0), did not validate... |
| CVE-2026-11753 | MEDIUM | 5.1 | 0.3% | Nov 4, 2026 | A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is re... |
| CVE-2026-11749 | HIGH | 7.6 | 0.3% | Nov 4, 2026 | A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-ti... |
| CVE-2026-118983 | MEDIUM | 6.8 | 0.2% | Nov 4, 2026 | The VikWidgetsLoader WordPress plugin before 1.12.3 does not sanitise or escape several block attributes before outputt... |
| CVE-2026-118783 | MEDIUM | 6.8 | 0.2% | Nov 4, 2026 | The All-in-One Video Gallery WordPress plugin before 5.0.0 does not validate and escape some of its shortcode attribute... |
| CVE-2026-118637 | LOW | 2.7 | 0.1% | Nov 4, 2026 | The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenc... |
| CVE-2026-118523 | MEDIUM | 5.3 | 0.1% | Nov 4, 2026 | The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowi... |
| CVE-2026-118422 | HIGH | 7.1 | 0.2% | Nov 4, 2026 | The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin ... |
| CVE-2026-118407 | MEDIUM | 5.4 | 0.1% | Nov 4, 2026 | The Premium Packages WordPress plugin before 7.3.1 does not verify that a user claiming a guest order is the original b... |
| CVE-2026-118404 | MEDIUM | 5.3 | 0.1% | Nov 4, 2026 | The Premium Packages WordPress plugin before 7.3.1 does not verify ownership or session binding when loading a previous... |
| CVE-2026-118403 | LOW | 3.7 | 0.1% | Nov 4, 2026 | The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order before returni... |
| CVE-2026-115426 | MEDIUM | 5.5 | 0.2% | Nov 4, 2026 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly validate a backup storage di... |
| CVE-2026-115262 | MEDIUM | 4.8 | 0.2% | Nov 4, 2026 | The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its databa... |
| CVE-2026-115257 | MEDIUM | 5.3 | 0.1% | Nov 4, 2026 | The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored ros... |
| CVE-2026-115250 | MEDIUM | 6.8 | 0.2% | Nov 4, 2026 | The Text Typing WordPress plugin before 2.2.2 does not properly sanitize and escape a block attribute before storing it... |
| CVE-2026-115243 | MEDIUM | 6.7 | 0.1% | Nov 4, 2026 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it... |
| CVE-2026-115242 | MEDIUM | 5.5 | 0.2% | Nov 4, 2026 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the staging destination fold... |
| CVE-2026-115241 | MEDIUM | 6.5 | 0.1% | Nov 4, 2026 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a submitted snapshot iden... |
| CVE-2026-114431 | MEDIUM | 6.4 | 0.2% | Nov 4, 2026 | The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload ... |
| CVE-2026-112244 | MEDIUM | 5.3 | 0.2% | Nov 4, 2026 | The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent direct acce... |
| CVE-2026-112243 | MEDIUM | 5.8 | 0.2% | Nov 4, 2026 | The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not sanitise and escape... |
| CVE-2026-111962 | LOW | 3.7 | 0.2% | Nov 4, 2026 | The WP Remote Users Sync WordPress plugin before 2.2.0 does not adequately restrict access to the user export files it w... |
| CVE-2026-111740 | LOW | 2.7 | 0.1% | Nov 4, 2026 | The Post Duplicator WordPress plugin before 3.0.17 does not check whether the requesting user may view each post before ... |
| CVE-2026-110964 | MEDIUM | 6.5 | 0.1% | Nov 4, 2026 | The Essential Real Estate WordPress plugin before 5.3.5 does not verify that a media attachment belongs to the requestin... |
| CVE-2026-110692 | MEDIUM | 4.1 | 0.1% | Nov 4, 2026 | The PowerPack Addons for Elementor: Widgets, Form Styler and Templates WordPress plugin before 3.1.3 does not validate a... |