CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-92115 | HIGH | 8.8 | The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all… | — |
|
2026-10-16 |
| CVE-2026-110701 | HIGH | 7.2 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | — |
|
2026-10-16 |
| CVE-2026-110135 | HIGH | 7.4 | The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-tim… | — |
|
2026-10-16 |
| CVE-2026-110015 | HIGH | 8.8 | The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity… | — |
|
2026-10-16 |
| CVE-2026-109193 | HIGH | 7.2 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnera… | — |
|
2026-10-16 |
| CVE-2026-107768 | HIGH | 7.2 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulner… | — |
|
2026-10-16 |
| CVE-2026-104715 | HIGH | 7.8 | A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege esc… |
T1068
T1134
|
|
2026-10-16 |
| CVE-2026-96570 | HIGH | 7.2 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Sc… | — |
|
2026-10-16 |
| CVE-2026-95809 | HIGH | 7.2 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights … | — |
|
2026-10-16 |
| CVE-2026-95686 | HIGH | 7.2 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights … | — |
|
2026-10-16 |
| CVE-2026-89051 | HIGH | 7.2 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored C… | — |
|
2026-10-16 |
| CVE-2026-85659 | HIGH | 8.8 | The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in al… | — |
|
2026-10-16 |
| CVE-2026-111122 | HIGH | 7.2 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via t… | — |
|
2026-10-16 |
| CVE-2026-109513 | HIGH | 7.2 | The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Anno… | — |
|
2026-10-16 |
| CVE-2026-109447 | HIGH | 8.1 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi… | — |
|
2026-10-16 |
| CVE-2026-109232 | HIGH | 7.2 | The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress i… | — |
|
2026-10-16 |
| CVE-2026-107764 | HIGH | 7.2 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via t… | — |
|
2026-10-16 |
| CVE-2026-104932 | HIGH | 8.0 | The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deser… |
T1190
T1203
|
|
2026-10-16 |
| CVE-2026-104000 | HIGH | 7.2 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | — |
|
2026-10-16 |
| CVE-2026-103999 | HIGH | 7.2 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… | — |
|
2026-10-16 |