CVE Vulnerability Database
Search and browse 424,993 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-101324 | MEDIUM | 4.7 | 0.2% | Oct 10, 2026 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne... |
| CVE-2026-96743 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field... |
| CVE-2026-94589 | CRITICAL | 9.8 | 0.7% | Oct 10, 2026 | The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable ... |
| CVE-2026-108501 | MEDIUM | 5.7 | 0.2% | Oct 10, 2026 | ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and r... |
| CVE-2026-107645 | CRITICAL | 9.1 | 0.3% | Oct 10, 2026 | The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.5... |
| CVE-2026-104898 | MEDIUM | 6.8 | 0.3% | Oct 10, 2026 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Obje... |
| CVE-2026-104797 | HIGH | 8.1 | 0.4% | Oct 10, 2026 | The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass v... |
| CVE-2026-104732 | CRITICAL | 9.8 | 0.5% | Oct 10, 2026 | The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including... |
| CVE-2026-103365 | MEDIUM | 5.3 | 0.3% | Oct 10, 2026 | The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Informatio... |
| CVE-2026-101947 | HIGH | 8.4 | 0.1% | Oct 10, 2026 | ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/... |
| CVE-2026-93883 | MEDIUM | 6.4 | 0.2% | Oct 10, 2026 | The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phon... |
| CVE-2026-104915 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorizati... |
| CVE-2026-104022 | MEDIUM | 5.4 | 0.1% | Oct 10, 2026 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege E... |
| CVE-2026-108474 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions |
| CVE-2026-22061 | HIGH | 8.2 | 0.1% | Oct 9, 2026 | Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker... |
| CVE-2026-18524 | — | — | — | Oct 9, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-16681 | — | — | — | Oct 9, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-103755 | — | — | — | Oct 9, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-108269 | CRITICAL | 9.1 | 0.1% | Oct 9, 2026 | Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0,... |
| CVE-2026-108268 | CRITICAL | 9.1 | 0.1% | Oct 9, 2026 | Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to t... |
| CVE-2026-108267 | CRITICAL | 9.1 | 0.1% | Oct 9, 2026 | Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasy... |
| CVE-2026-92705 | HIGH | 7.8 | 0.1% | Oct 9, 2026 | Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation script... |
| CVE-2026-62376 | HIGH | 8.1 | 0.2% | Oct 9, 2026 | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-conf... |
| CVE-2026-62367 | HIGH | 7.5 | 0.1% | Oct 9, 2026 | Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator e... |
| CVE-2026-57458 | HIGH | 8.1 | 0.3% | Oct 9, 2026 | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oau... |