CVE Vulnerability Database
Search and browse 424,301 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108495 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S... |
| CVE-2026-108493 | MEDIUM | 5.3 | — | Oct 13, 2026 | Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment ... |
| CVE-2026-108492 | MEDIUM | 5.3 | — | Oct 13, 2026 | Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting I... |
| CVE-2026-108490 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A... |
| CVE-2026-108489 | MEDIUM | 5.3 | — | Oct 13, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce p... |
| CVE-2026-108488 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations ... |
| CVE-2026-108487 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Boo... |
| CVE-2026-108179 | HIGH | 7.6 | — | Oct 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF ... |
| CVE-2026-108174 | MEDIUM | 5.3 | — | Oct 13, 2026 | Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Conf... |
| CVE-2026-106598 | MEDIUM | 5.3 | — | Oct 13, 2026 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive... |
| CVE-2026-106597 | MEDIUM | 5.3 | — | Oct 13, 2026 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf... |
| CVE-2026-105881 | MEDIUM | 6.5 | — | Oct 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Re... |
| CVE-2026-103076 | MEDIUM | 5.4 | — | Oct 13, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Requ... |
| CVE-2026-101020 | HIGH | 8.5 | 0.1% | Oct 13, 2026 | An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud... |
| CVE-2026-89097 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all v... |
| CVE-2026-67165 | MEDIUM | 5.4 | 0.2% | Oct 13, 2026 | HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbi... |
| CVE-2026-15399 | MEDIUM | 4.9 | — | Oct 13, 2026 | The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter i... |
| CVE-2026-14308 | MEDIUM | 4.9 | 0.4% | Oct 13, 2026 | Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature va... |
| CVE-2026-109703 | MEDIUM | 5.3 | — | Oct 13, 2026 | Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue... |
| CVE-2026-109109 | CRITICAL | 10 | 0.6% | Oct 13, 2026 | A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file... |
| CVE-2026-109108 | CRITICAL | 9.9 | 2.3% | Oct 13, 2026 | A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file ... |
| CVE-2026-109107 | MEDIUM | 6.5 | — | Oct 13, 2026 | A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /c... |
| CVE-2026-103418 | HIGH | 8.8 | 0.2% | Oct 13, 2026 | Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-... |
| CVE-2026-103417 | MEDIUM | 5.5 | 0.1% | Oct 13, 2026 | Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-log... |
| CVE-2026-102562 | HIGH | 7.2 | 0.2% | Oct 13, 2026 | The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the ... |