CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111399 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-111396 | HIGH | 7.1 | Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-ma… | — |
|
2026-10-16 |
| CVE-2026-107564 | HIGH | 7.5 | An unauthenticated remote attacker may use an allocation of resources without limits or throttling w… | — |
|
2026-10-16 |
| CVE-2026-105958 | HIGH | 7.5 | A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from … | — |
|
2026-10-16 |
| CVE-2026-111391 | HIGH | 8.1 | SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allo… | — |
|
2026-10-16 |
| CVE-2026-107648 | HIGH | 7.2 | The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Si… | — |
|
2026-10-16 |
| CVE-2026-105959 | HIGH | 7.5 | A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocat… | — |
|
2026-10-16 |
| CVE-2026-109119 | HIGH | 8.8 | Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in R… | — |
|
2026-10-16 |
| CVE-2026-96768 | HIGH | 7.2 | The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content… | — |
|
2026-10-16 |
| CVE-2026-92766 | HIGH | 7.5 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL … | — |
|
2026-10-16 |
| CVE-2026-14177 | HIGH | 7.5 | Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure… | — |
|
2026-10-16 |
| CVE-2026-111311 | HIGH | 8.8 | The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Au… | — |
|
2026-10-16 |
| CVE-2026-109224 | HIGH | 7.2 | The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, … | — |
|
2026-10-16 |
| CVE-2026-87111 | HIGH | 7.2 | The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin … | — |
|
2026-10-16 |
| CVE-2026-75903 | HIGH | 8.1 | The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up … |
T1078
T1548
|
|
2026-10-16 |
| CVE-2026-16453 | HIGH | 7.1 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-97640 | HIGH | 7.2 | The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance C… | — |
|
2026-10-16 |
| CVE-2026-97296 | HIGH | 8.1 | Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allo… | — |
|
2026-10-16 |
| CVE-2026-96339 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-92553 | HIGH | 8.8 | The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to… | — |
|
2026-10-16 |