CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96461 | HIGH | 7.5 | — | Oct 9, 2026 | Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2026-96337 | MEDIUM | 6.5 | — | Oct 9, 2026 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configur... |
| CVE-2026-96336 | HIGH | 7.5 | 0.3% | Oct 9, 2026 | Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue af... |
| CVE-2026-96334 | MEDIUM | 5.6 | 0.1% | Oct 9, 2026 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf... |
| CVE-2026-96333 | HIGH | 7.5 | — | Oct 9, 2026 | Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issu... |
| CVE-2026-96332 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple P... |
| CVE-2026-96331 | CRITICAL | 9.3 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Sear... |
| CVE-2026-96330 | CRITICAL | 9.3 | 0.2% | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-... |
| CVE-2026-96329 | HIGH | 8.5 | 0.2% | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-... |
| CVE-2026-96328 | CRITICAL | 9.3 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - P... |
| CVE-2026-96327 | CRITICAL | 9.3 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS w... |
| CVE-2026-95610 | HIGH | 8.5 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolut... |
| CVE-2026-95609 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi... |
| CVE-2026-95608 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY... |
| CVE-2026-95607 | HIGH | 8.5 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS ... |
| CVE-2026-95599 | HIGH | 8.5 | — | Oct 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbu... |
| CVE-2026-95598 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search ... |
| CVE-2026-95597 | MEDIUM | 6.5 | 0.2% | Oct 9, 2026 | Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Conf... |
| CVE-2026-95596 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Sho... |
| CVE-2026-95591 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBookin... |
| CVE-2026-95589 | MEDIUM | 6.5 | — | Oct 9, 2026 | Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-pa... |
| CVE-2026-94668 | HIGH | 7.1 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Sal... |
| CVE-2026-94667 | MEDIUM | 6.5 | 0.2% | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetRevi... |
| CVE-2026-94666 | HIGH | 7.5 | 0.4% | Oct 9, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF ... |
| CVE-2026-94665 | MEDIUM | 6.5 | — | Oct 9, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Cla... |