CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-112003 | MEDIUM | 5.9 | ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that… | — |
|
2026-10-18 |
| CVE-2026-112002 | MEDIUM | 6.8 | ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordContr… | — |
|
2026-10-18 |
| CVE-2026-111985 | MEDIUM | 4.3 | A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the fun… | — |
|
2026-10-18 |
| CVE-2026-111984 | MEDIUM | 4.3 | A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects th… | — |
|
2026-10-18 |
| CVE-2026-110885 | MEDIUM | 6.5 | Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivep… | — |
|
2026-10-18 |
| CVE-2026-110883 | MEDIUM | 6.5 | Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Rand… | — |
|
2026-10-18 |
| CVE-2026-110880 | MEDIUM | 6.5 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting In… | — |
|
2026-10-18 |
| CVE-2026-110365 | MEDIUM | 6.5 | Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows … | — |
|
2026-10-18 |
| CVE-2026-87844 | MEDIUM | 5.3 | The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform an… | — |
|
2026-10-18 |
| CVE-2026-111942 | MEDIUM | 4.3 | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an un… | — |
|
2026-10-18 |
| CVE-2026-111877 | MEDIUM | 4.3 | A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db… |
T1190
T1203
|
|
2026-10-18 |
| CVE-2026-111041 | MEDIUM | 4.9 | The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI med… | — |
|
2026-10-18 |
| CVE-2026-110976 | MEDIUM | 4.9 | The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media… | — |
|
2026-10-18 |
| CVE-2026-110070 | MEDIUM | 6.5 | The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is author… |
T1190
T1203
|
|
2026-10-18 |
| CVE-2026-110069 | MEDIUM | 4.3 | The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, o… | — |
|
2026-10-18 |
| CVE-2026-110035 | MEDIUM | 4.3 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API end… | — |
|
2026-10-18 |
| CVE-2026-110033 | MEDIUM | 6.8 | The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image U… | — |
|
2026-10-18 |
| CVE-2026-110032 | MEDIUM | 5.5 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its … | — |
|
2026-10-18 |
| CVE-2026-110026 | MEDIUM | 4.9 | The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities wh… | — |
|
2026-10-18 |
| CVE-2026-109937 | MEDIUM | 5.4 | The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL be… | — |
|
2026-10-18 |