CVE Vulnerability Database
Search and browse 424,958 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97348 | MEDIUM | 6.5 | 0.7% | Oct 10, 2026 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu... |
| CVE-2026-96840 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_nam... |
| CVE-2026-96574 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post... |
| CVE-2026-96572 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Com... |
| CVE-2026-96558 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cros... |
| CVE-2026-95684 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'attachm... |
| CVE-2026-94538 | HIGH | 8.1 | 0.2% | Oct 10, 2026 | The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.... |
| CVE-2026-89100 | MEDIUM | 6.1 | 0.2% | Oct 10, 2026 | The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '#re... |
| CVE-2026-6243 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kses bypass / mut... |
| CVE-2026-5725 | MEDIUM | 6.1 | 0.2% | Oct 10, 2026 | The Favicon Rotator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fvrt_' prefixed reques... |
| CVE-2026-3717 | MEDIUM | 5.3 | 0.2% | Oct 10, 2026 | The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file uplo... |
| CVE-2026-15178 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5.... |
| CVE-2026-12626 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection... |
| CVE-2026-108503 | LOW | 3.3 | 0.1% | Oct 10, 2026 | ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack s... |
| CVE-2026-108502 | LOW | 3.3 | 0.1% | Oct 10, 2026 | ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant... |
| CVE-2026-107742 | HIGH | 7.2 | 0.2% | Oct 10, 2026 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Store... |
| CVE-2026-107712 | MEDIUM | 6.5 | 0.3% | Oct 10, 2026 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current... |
| CVE-2026-104801 | CRITICAL | 9.1 | 0.8% | Oct 10, 2026 | The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion ... |
| CVE-2026-104006 | LOW | 3.7 | 0.3% | Oct 10, 2026 | The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure ... |
| CVE-2026-103897 | MEDIUM | 4.4 | 0.2% | Oct 10, 2026 | The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' pa... |
| CVE-2026-103427 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'country' parameter in a... |
| CVE-2026-102402 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttp_f... |
| CVE-2026-100196 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
| CVE-2026-100161 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'w... |
| CVE-2026-97643 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... |