CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2024-58398 | MEDIUM | 4.3 | Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect … |
T1190
T1203
|
|
2026-10-17 |
| CVE-2026-110253 | MEDIUM | 5.4 | The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable… | — |
|
2026-10-17 |
| CVE-2026-109983 | MEDIUM | 6.4 | The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the '… | — |
|
2026-10-17 |
| CVE-2026-97314 | MEDIUM | 6.5 | The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the objec… | — |
|
2026-10-17 |
| CVE-2026-92433 | MEDIUM | 6.5 | The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Pat… | — |
|
2026-10-17 |
| CVE-2026-92432 | MEDIUM | 4.3 | The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination be… | — |
|
2026-10-17 |
| CVE-2026-91074 | MEDIUM | 6.8 | The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter… | — |
|
2026-10-17 |
| CVE-2026-81344 | MEDIUM | 6.6 | The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP cl… | — |
|
2026-10-17 |
| CVE-2026-81343 | MEDIUM | 5.3 | The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability … | — |
|
2026-10-17 |
| CVE-2026-110527 | MEDIUM | 5.3 | The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it crea… | — |
|
2026-10-17 |
| CVE-2026-106470 | MEDIUM | 5.0 | The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in on… | — |
|
2026-10-17 |
| CVE-2026-104246 | MEDIUM | 5.9 | The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature fiel… | — |
|
2026-10-17 |
| CVE-2026-104122 | MEDIUM | 6.8 | The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using … | — |
|
2026-10-17 |
| CVE-2026-103376 | MEDIUM | 5.3 | The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authori… | — |
|
2026-10-17 |
| CVE-2026-92978 | MEDIUM | 4.3 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, Us… | — |
|
2026-10-17 |
| CVE-2026-92715 | MEDIUM | 4.3 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure … | — |
|
2026-10-17 |
| CVE-2026-111726 | MEDIUM | 6.4 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' … | — |
|
2026-10-17 |
| CVE-2026-110268 | MEDIUM | 4.9 | The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all v… | — |
|
2026-10-17 |
| CVE-2026-109989 | MEDIUM | 6.4 | The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_w… | — |
|
2026-10-17 |
| CVE-2026-109985 | MEDIUM | 6.4 | The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnera… | — |
|
2026-10-17 |