CVE Vulnerability Database
Search and browse 425,052 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-32575 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions. |
| CVE-2026-32574 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart F... |
| CVE-2026-32572 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions. |
| CVE-2026-32571 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions. |
| CVE-2026-32570 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions. |
| CVE-2026-32569 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions. |
| CVE-2026-32568 | CRITICAL | 9.9 | 0.7% | Oct 6, 2026 | Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions. |
| CVE-2026-32557 | CRITICAL | 9.3 | 0.4% | Oct 6, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooComme... |
| CVE-2026-25434 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions. |
| CVE-2026-25433 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions. |
| CVE-2026-105879 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2026-105809 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown ... |
| CVE-2026-105808 | LOW | 3.5 | 0.3% | Oct 6, 2026 | A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the f... |
| CVE-2026-105317 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions. |
| CVE-2026-105071 | HIGH | 7.5 | 0.4% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions. |
| CVE-2026-105070 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions. |
| CVE-2026-105061 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions. |
| CVE-2026-105059 | MEDIUM | 6.5 | 0.4% | Oct 6, 2026 | Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allo... |
| CVE-2026-105058 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions. |
| CVE-2026-105057 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions. |
| CVE-2026-104814 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions. |
| CVE-2026-104757 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions. |
| CVE-2026-104747 | HIGH | 8.1 | 0.3% | Oct 6, 2026 | Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. |
| CVE-2026-104672 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions. |
| CVE-2026-104670 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions. |