CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118593 | MEDIUM | 5.9 | A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119087 | MEDIUM | 4.3 | The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable t… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119059 | MEDIUM | 4.3 | The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a mis… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118698 | MEDIUM | 6.5 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerabl… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-118634 | MEDIUM | 6.4 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'widt… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118500 | MEDIUM | 6.4 | The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to St… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118194 | MEDIUM | 6.5 | The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all ver… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118165 | MEDIUM | 6.8 | The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118101 | MEDIUM | 5.3 | The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118100 | MEDIUM | 5.3 | The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118072 | MEDIUM | 5.4 | The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a use… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118071 | MEDIUM | 6.8 | The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before o… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-117572 | MEDIUM | 4.1 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and esca… |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-115277 | MEDIUM | 4.7 | The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied va… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-114444 | MEDIUM | 4.4 | The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-5461 | MEDIUM | 6.5 | The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up … |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-96389 | MEDIUM | 6.5 | Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affect… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118539 | MEDIUM | 6.5 | Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue aff… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-114572 | MEDIUM | 5.4 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restri… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-107312 | MEDIUM | 4.3 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers… |
T1190
T1059
+1
|
|
2026-10-30 |