CVE Vulnerability Database
Search and browse 425,026 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-42417 | CRITICAL | 9.3 | 0.3% | Oct 6, 2026 | Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions. |
| CVE-2026-42416 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Subscriber SQL Injection in UDesign Core <= 4.15.0 versions. |
| CVE-2026-42415 | CRITICAL | 9.3 | 0.2% | Oct 6, 2026 | Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions. |
| CVE-2026-42414 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Subscriber SQL Injection in ListingPro <= 2.9.12 versions. |
| CVE-2026-42413 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 ve... |
| CVE-2026-41562 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. |
| CVE-2026-41561 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. |
| CVE-2026-41560 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. |
| CVE-2026-41559 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. |
| CVE-2026-41555 | CRITICAL | 9.3 | 0.2% | Oct 6, 2026 | Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions... |
| CVE-2026-40807 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 ve... |
| CVE-2026-40806 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. |
| CVE-2026-39798 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. |
| CVE-2026-39797 | CRITICAL | 9.8 | 0.3% | Oct 6, 2026 | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. |
| CVE-2026-39796 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. |
| CVE-2026-39795 | CRITICAL | 9.3 | 0.3% | Oct 6, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress... |
| CVE-2026-39794 | HIGH | 7.5 | 0.4% | Oct 6, 2026 | Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. |
| CVE-2026-39793 | HIGH | 8.8 | 0.4% | Oct 6, 2026 | Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions. |
| CVE-2026-39792 | HIGH | 8.6 | 0.4% | Oct 6, 2026 | Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions. |
| CVE-2026-39791 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions. |
| CVE-2026-39790 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCa... |
| CVE-2026-39788 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions. |
| CVE-2026-39787 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. |
| CVE-2026-39785 | CRITICAL | 9.3 | 0.2% | Oct 6, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmed... |
| CVE-2026-39784 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions. |