CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-103896 | HIGH | 7.5 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is… | — |
|
2026-10-16 |
| CVE-2026-100186 | HIGH | 7.2 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi… | — |
|
2026-10-16 |
| CVE-2026-111114 | HIGH | 7.5 | The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is v… | — |
|
2026-10-16 |
| CVE-2026-110590 | HIGH | 7.5 | The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all version… | — |
|
2026-10-16 |
| CVE-2026-109998 | HIGH | 7.2 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' p… | — |
|
2026-10-16 |
| CVE-2026-109400 | HIGH | 7.5 | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege… | — |
|
2026-10-16 |
| CVE-2026-109221 | HIGH | 8.1 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to ar… | — |
|
2026-10-16 |
| CVE-2026-107746 | HIGH | 7.5 | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to author… | — |
|
2026-10-16 |
| CVE-2026-107659 | HIGH | 7.5 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitiv… | — |
|
2026-10-16 |
| CVE-2026-103895 | HIGH | 8.1 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to A… | — |
|
2026-10-16 |
| CVE-2026-103525 | HIGH | 7.5 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnera… | — |
|
2026-10-16 |
| CVE-2026-97339 | HIGH | 7.2 | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Sit… | — |
|
2026-10-16 |
| CVE-2026-93953 | HIGH | 8.0 | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injectio… | — |
|
2026-10-16 |
| CVE-2026-111451 | HIGH | 7.8 | Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and packag… | — |
|
2026-10-16 |
| CVE-2026-111447 | HIGH | 8.1 | Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking … | — |
|
2026-10-16 |
| CVE-2026-111446 | HIGH | 8.6 | Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients… | — |
|
2026-10-16 |
| CVE-2026-111445 | HIGH | 8.1 | Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condit… | — |
|
2026-10-16 |
| CVE-2026-109990 | HIGH | 7.2 | The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vul… | — |
|
2026-10-16 |
| CVE-2026-109207 | HIGH | 7.2 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plu… | — |
|
2026-10-16 |
| CVE-2026-107758 | HIGH | 7.2 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… | — |
|
2026-10-16 |