CVE Vulnerability Database
Search and browse 424,993 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104742 | LOW | 3.1 | 0.3% | Oct 10, 2026 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass i... |
| CVE-2026-104741 | LOW | 3.1 | 0.3% | Oct 10, 2026 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass i... |
| CVE-2026-104725 | HIGH | 8.8 | 0.3% | Oct 10, 2026 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation i... |
| CVE-2026-104723 | HIGH | 8.8 | 0.4% | Oct 10, 2026 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injecti... |
| CVE-2026-104023 | MEDIUM | 4.9 | 0.4% | Oct 10, 2026 | The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all... |
| CVE-2026-103912 | MEDIUM | 4.7 | 0.2% | Oct 10, 2026 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Sc... |
| CVE-2026-103520 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-... |
| CVE-2026-103482 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_... |
| CVE-2026-9696 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in ... |
| CVE-2026-97670 | CRITICAL | 9.1 | 0.4% | Oct 10, 2026 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi... |
| CVE-2026-97630 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shor... |
| CVE-2026-96648 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell ... |
| CVE-2026-89301 | HIGH | 7.5 | 0.4% | Oct 10, 2026 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to ins... |
| CVE-2026-87869 | MEDIUM | 6.1 | 0.2% | Oct 10, 2026 | The Filter Everything — WordPress & WooCommerce Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scrip... |
| CVE-2026-6723 | MEDIUM | 5.3 | 0.2% | Oct 10, 2026 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Inc... |
| CVE-2026-5727 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. T... |
| CVE-2026-104993 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to ... |
| CVE-2026-104735 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2026-104724 | MEDIUM | 5.3 | 0.2% | Oct 10, 2026 | The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulne... |
| CVE-2026-104021 | HIGH | 7.2 | 0.4% | Oct 10, 2026 | The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.... |
| CVE-2026-103998 | MEDIUM | 6.1 | 0.2% | Oct 10, 2026 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflect... |
| CVE-2026-103964 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc... |
| CVE-2026-103889 | CRITICAL | 9.8 | 0.7% | Oct 10, 2026 | The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions ... |
| CVE-2026-103424 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2026-102401 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all... |