CVE Vulnerability Database
Search and browse 424,940 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-42632 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions. |
| CVE-2026-42631 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions. |
| CVE-2026-42630 | HIGH | 7.5 | 0.3% | Oct 10, 2026 | Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions. |
| CVE-2026-42419 | MEDIUM | 5.9 | 0.3% | Oct 10, 2026 | Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions. |
| CVE-2026-40808 | MEDIUM | 6.5 | 0.3% | Oct 10, 2026 | Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions. |
| CVE-2026-40805 | HIGH | 7.7 | 0.4% | Oct 10, 2026 | Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions. |
| CVE-2026-40803 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions. |
| CVE-2026-40802 | HIGH | 7.6 | 0.3% | Oct 10, 2026 | Missing Authorization vulnerability in pubjet Pubjet | پابجت pubjet allows Exploiting Incorrectly Configured Access Con... |
| CVE-2026-40801 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Subscriber Broken Access Control in Wordable <= 8.2.10 versions. |
| CVE-2026-40800 | CRITICAL | 9.3 | 0.4% | Oct 10, 2026 | Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions. |
| CVE-2026-40777 | HIGH | 8.1 | 0.4% | Oct 10, 2026 | Subscriber Broken Access Control in WPSection <= 1.5.1 versions. |
| CVE-2026-39802 | HIGH | 8.1 | 0.5% | Oct 10, 2026 | Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions. |
| CVE-2026-39801 | CRITICAL | 9.8 | 0.4% | Oct 10, 2026 | Subscriber Privilege Escalation in AIWU <= 1.5.9 versions. |
| CVE-2026-39800 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions. |
| CVE-2026-39799 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions. |
| CVE-2026-27350 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This i... |
| CVE-2026-108604 | MEDIUM | 6.3 | 0.1% | Oct 10, 2026 | Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows ... |
| CVE-2026-108603 | LOW | 3.3 | 0.1% | Oct 10, 2026 | slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to ... |
| CVE-2026-108602 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allo... |
| CVE-2026-107434 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions. |
| CVE-2026-107420 | MEDIUM | 5.3 | 0.1% | Oct 10, 2026 | Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 vers... |
| CVE-2026-103685 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-... |
| CVE-2026-96341 | HIGH | 8.2 | 0.3% | Oct 10, 2026 | Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue af... |
| CVE-2026-94590 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads al... |
| CVE-2026-57806 | HIGH | 7.1 | 0.2% | Oct 10, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - ... |