CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-73790 | HIGH | 8.2 | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. | — |
|
2026-10-14 |
| CVE-2026-107428 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-92392 | HIGH | 8.1 | During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_… |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-110284 | HIGH | 7.5 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable t… | — |
|
2026-10-14 |
| CVE-2026-109901 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | — |
|
2026-10-14 |
| CVE-2026-107751 | HIGH | 7.2 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name'… | — |
|
2026-10-14 |
| CVE-2026-107631 | HIGH | 7.2 | The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Sit… | — |
|
2026-10-14 |
| CVE-2026-105107 | HIGH | 7.6 | Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.… | — |
|
2026-10-14 |
| CVE-2026-105106 | HIGH | 8.8 | Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.… |
T1190
T1059
+1
|
|
2026-10-14 |
| CVE-2026-104909 | HIGH | 8.1 | The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and… | — |
|
2026-10-14 |
| CVE-2026-104764 | HIGH | 7.2 | The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all … | — |
|
2026-10-14 |
| CVE-2026-103367 | HIGH | 8.1 | The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Incl… | — |
|
2026-10-14 |
| CVE-2026-103366 | HIGH | 7.5 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPres… | — |
|
2026-10-14 |
| CVE-2026-100163 | HIGH | 7.4 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPres… | — |
|
2026-10-14 |
| CVE-2026-89288 | HIGH | 8.6 | The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it… | — |
|
2026-10-14 |
| CVE-2026-86799 | HIGH | 8.8 | The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor esca… | — |
|
2026-10-14 |
| CVE-2026-86787 | HIGH | 7.2 | The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from sup… | — |
|
2026-10-14 |
| CVE-2026-107508 | HIGH | 8.6 | The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used … | — |
|
2026-10-14 |
| CVE-2026-107126 | HIGH | 8.8 | The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-control… | — |
|
2026-10-14 |
| CVE-2026-103307 | HIGH | 8.6 | The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly saniti… | — |
|
2026-10-14 |