CVE Vulnerability Database
Search and browse 425,002 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94245 | MEDIUM | 6.5 | 0.1% | Oct 8, 2026 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet trans... |
| CVE-2026-94244 | MEDIUM | 4.3 | 0.1% | Oct 8, 2026 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a ... |
| CVE-2026-86828 | MEDIUM | 6.6 | 0.2% | Oct 8, 2026 | The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a ... |
| CVE-2026-86827 | MEDIUM | 5.3 | 0.2% | Oct 8, 2026 | The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handle... |
| CVE-2026-86826 | MEDIUM | 5.9 | 0.1% | Oct 8, 2026 | The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses durin... |
| CVE-2026-5769 | MEDIUM | 4.1 | 0.1% | Oct 8, 2026 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintex... |
| CVE-2026-5049 | MEDIUM | 5.7 | 0.2% | Oct 8, 2026 | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local a... |
| CVE-2026-5048 | HIGH | 8 | 0.2% | Oct 8, 2026 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability... |
| CVE-2026-5047 | MEDIUM | 5.7 | 0.2% | Oct 8, 2026 | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log fil... |
| CVE-2026-107459 | CRITICAL | 9.8 | 1.5% | Oct 8, 2026 | The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can ... |
| CVE-2026-105260 | MEDIUM | 4.3 | 0.1% | Oct 8, 2026 | The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when th... |
| CVE-2026-105198 | MEDIUM | 5.3 | 0.1% | Oct 8, 2026 | The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order referenced ... |
| CVE-2026-105197 | LOW | 2.7 | 0.1% | Oct 8, 2026 | The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to... |
| CVE-2026-105196 | LOW | 3.3 | 0.1% | Oct 8, 2026 | The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of it... |
| CVE-2026-105195 | LOW | 2.7 | 0.1% | Oct 8, 2026 | The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user c... |
| CVE-2026-105194 | MEDIUM | 4.3 | 0.1% | Oct 8, 2026 | The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, al... |
| CVE-2026-105193 | MEDIUM | 4.8 | 0.1% | Oct 8, 2026 | The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entrop... |
| CVE-2026-104646 | MEDIUM | 6.8 | 0.2% | Oct 8, 2026 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration ... |
| CVE-2026-104645 | LOW | 2.7 | 0.1% | Oct 8, 2026 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on severa... |
| CVE-2026-103692 | CRITICAL | 9.8 | 0.1% | Oct 8, 2026 | The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions availa... |
| CVE-2026-103646 | CRITICAL | 9.8 | 0.2% | Oct 8, 2026 | The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is l... |
| CVE-2026-103309 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not esc... |
| CVE-2026-94587 | MEDIUM | 4.5 | 0.1% | Oct 8, 2026 | A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file ... |
| CVE-2026-94586 | MEDIUM | 6.8 | 1.2% | Oct 8, 2026 | A command injection vulnerability exists in the WebTools administrative interface handling configuration download or fil... |
| CVE-2026-94585 | HIGH | 8.8 | 0.2% | Oct 8, 2026 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2... |