CVE Vulnerability Database
Search and browse 424,901 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-86717 | CRITICAL | 9.1 | 0.3% | Oct 11, 2026 | The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allo... |
| CVE-2026-86706 | CRITICAL | 9.1 | 0.3% | Oct 11, 2026 | The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actio... |
| CVE-2026-85126 | HIGH | 7.2 | 0.3% | Oct 11, 2026 | The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing use... |
| CVE-2026-85121 | CRITICAL | 9.1 | 0.3% | Oct 11, 2026 | The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allo... |
| CVE-2026-85118 | CRITICAL | 9.8 | 0.3% | Oct 11, 2026 | The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some o... |
| CVE-2026-84737 | CRITICAL | 9.8 | 0.3% | Oct 11, 2026 | The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user... |
| CVE-2026-84734 | CRITICAL | 9.8 | 0.3% | Oct 11, 2026 | The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request again... |
| CVE-2026-84261 | HIGH | 8.8 | 0.3% | Oct 11, 2026 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted th... |
| CVE-2026-84260 | HIGH | 8.8 | 0.3% | Oct 11, 2026 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted thr... |
| CVE-2026-84259 | HIGH | 8.8 | 0.3% | Oct 11, 2026 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through a... |
| CVE-2026-84258 | HIGH | 8.8 | 0.3% | Oct 11, 2026 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted throu... |
| CVE-2026-84254 | CRITICAL | 9.8 | 0.2% | Oct 11, 2026 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when ... |
| CVE-2026-84253 | CRITICAL | 9.8 | 0.2% | Oct 11, 2026 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when u... |
| CVE-2026-84252 | CRITICAL | 9.8 | 0.2% | Oct 11, 2026 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updatin... |
| CVE-2026-84251 | CRITICAL | 9.8 | 0.2% | Oct 11, 2026 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when upd... |
| CVE-2026-81649 | CRITICAL | 9.1 | 0.3% | Oct 11, 2026 | The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API... |
| CVE-2026-81420 | HIGH | 8.6 | 0.3% | Oct 11, 2026 | The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement ... |
| CVE-2026-81156 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputt... |
| CVE-2026-81155 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a... |
| CVE-2026-81154 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one ... |
| CVE-2026-81153 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputtin... |
| CVE-2026-14854 | HIGH | 7.5 | 0.3% | Oct 11, 2026 | The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate... |
| CVE-2026-12980 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets bef... |
| CVE-2026-108541 | MEDIUM | 6.3 | 0.2% | Oct 11, 2026 | A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /... |
| CVE-2026-108540 | CRITICAL | 9.9 | 1.7% | Oct 11, 2026 | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of... |