CVE Vulnerability Database
Search and browse 425,058 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105057 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions. |
| CVE-2026-104814 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions. |
| CVE-2026-104757 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions. |
| CVE-2026-104747 | HIGH | 8.1 | 0.3% | Oct 6, 2026 | Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. |
| CVE-2026-104672 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions. |
| CVE-2026-104670 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions. |
| CVE-2026-104406 | HIGH | 7.3 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Access Control in picu <= 3.10.1 versions. |
| CVE-2026-104405 | HIGH | 8.1 | 0.3% | Oct 6, 2026 | Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions. |
| CVE-2026-104399 | MEDIUM | 6.9 | 0.4% | Oct 6, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensit... |
| CVE-2026-104395 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions. |
| CVE-2026-104394 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions. |
| CVE-2026-104387 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions. |
| CVE-2026-104385 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions. |
| CVE-2026-103346 | HIGH | 7.1 | 0.1% | Oct 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex ... |
| CVE-2026-102915 | HIGH | 8.5 | 0.2% | Oct 6, 2026 | Subscriber Broken Access Control in WPO365 <= 44.1 versions. |
| CVE-2026-102387 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions. |
| CVE-2026-100518 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions. |
| CVE-2026-85153 | CRITICAL | 9.3 | 0.4% | Oct 6, 2026 | This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the clie... |
| CVE-2026-105807 | HIGH | 7.3 | 0.3% | Oct 6, 2026 | A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the f... |
| CVE-2026-105305 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This c... |
| CVE-2026-94299 | MEDIUM | 6.5 | 0.1% | Oct 6, 2026 | The elegro Crypto Payment WordPress plugin through 1.0.1 does not require a shared secret to be configured before trusti... |
| CVE-2026-94293 | CRITICAL | 9.8 | 0.3% | Oct 6, 2026 | An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read a... |
| CVE-2026-94278 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a g... |
| CVE-2026-94271 | MEDIUM | 5.3 | 0.1% | Oct 6, 2026 | The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when hand... |
| CVE-2026-94270 | MEDIUM | 5.3 | 0.1% | Oct 6, 2026 | The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider n... |