CVE Vulnerability Database
Search and browse 424,925 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-66563 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Windsor <= 2.10 versions. |
| CVE-2026-66483 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions. |
| CVE-2026-66482 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions. |
| CVE-2026-66481 | MEDIUM | 6.8 | 0.3% | Oct 10, 2026 | Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions. |
| CVE-2026-66480 | MEDIUM | 5.3 | 0.2% | Oct 10, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Produc... |
| CVE-2026-65459 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions. |
| CVE-2026-62130 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions. |
| CVE-2026-62129 | CRITICAL | 9.9 | 0.3% | Oct 10, 2026 | Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions. |
| CVE-2026-62125 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions. |
| CVE-2026-62124 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions. |
| CVE-2026-62123 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Invetex <= 2.18 versions. |
| CVE-2026-62120 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Law Office <= 3.20 versions. |
| CVE-2026-62118 | HIGH | 7.3 | 0.2% | Oct 10, 2026 | Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
| CVE-2026-62117 | HIGH | 8.5 | 0.3% | Oct 10, 2026 | Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
| CVE-2026-62116 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
| CVE-2026-62115 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. |
| CVE-2026-62100 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions. |
| CVE-2026-62099 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. |
| CVE-2026-62098 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | Unauthenticated Content Injection in Boutique <= 2.3.3 versions. |
| CVE-2026-62096 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. |
| CVE-2026-62095 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions. |
| CVE-2026-62094 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. |
| CVE-2026-62093 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions. |
| CVE-2026-62092 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. |
| CVE-2026-62091 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions. |