CVE Vulnerability Database
Search and browse 425,058 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-41558 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions. |
| CVE-2026-39789 | HIGH | 7.5 | 0.2% | Oct 6, 2026 | Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions. |
| CVE-2026-39760 | HIGH | 7.1 | 0.1% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions. |
| CVE-2026-39723 | HIGH | 7.5 | 0.2% | Oct 6, 2026 | Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting I... |
| CVE-2026-39599 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions. |
| CVE-2026-32582 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2026-32576 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung a... |
| CVE-2026-105775 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward... |
| CVE-2026-105708 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi... |
| CVE-2026-105072 | HIGH | 7.5 | 0.2% | Oct 6, 2026 | Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions. |
| CVE-2026-105707 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function... |
| CVE-2026-105706 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut... |
| CVE-2026-105705 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o... |
| CVE-2026-105704 | HIGH | 7.3 | 0.4% | Oct 6, 2026 | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the... |
| CVE-2026-105703 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted elem... |
| CVE-2026-105621 | MEDIUM | 5.4 | — | Oct 6, 2026 | A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail ... |
| CVE-2026-105611 | LOW | 2.7 | 0.2% | Oct 6, 2026 | A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blad... |
| CVE-2026-105610 | MEDIUM | 4.7 | — | Oct 6, 2026 | A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil... |
| CVE-2026-105573 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-bo... |
| CVE-2026-105572 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/tra... |
| CVE-2026-105571 | HIGH | 7.3 | 0.3% | Oct 6, 2026 | A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p... |
| CVE-2026-105487 | MEDIUM | 6.3 | — | Oct 6, 2026 | A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_di... |
| CVE-2026-105486 | HIGH | 7.3 | 0.5% | Oct 6, 2026 | A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro... |
| CVE-2026-105484 | CRITICAL | 10 | 2.1% | Oct 6, 2026 | A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the functio... |
| CVE-2026-104380 | MEDIUM | 5.3 | 0.1% | Oct 6, 2026 | Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in... |