CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110806 | MEDIUM | 6.5 | Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an … | — |
|
2026-10-16 |
| CVE-2026-110804 | MEDIUM | 4.3 | Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2… | — |
|
2026-10-16 |
| CVE-2026-110287 | MEDIUM | 4.3 | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allow… | — |
|
2026-10-16 |
| CVE-2026-105664 | MEDIUM | 5.3 | The endpoint exposes an observable response discrepancy when processing ID values. A request submitt… | — |
|
2026-10-16 |
| CVE-2026-111555 | MEDIUM | 6.0 | A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capa… | — |
|
2026-10-16 |
| CVE-2026-111409 | MEDIUM | 5.3 | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal… | — |
|
2026-10-16 |
| CVE-2026-111405 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-111400 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-111397 | MEDIUM | 5.3 | Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-v… | — |
|
2026-10-16 |
| CVE-2026-110903 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-16 |
| CVE-2026-110901 | MEDIUM | 5.4 | Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo… | — |
|
2026-10-16 |
| CVE-2026-110900 | MEDIUM | 5.3 | Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorr… | — |
|
2026-10-16 |
| CVE-2026-110896 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorre… | — |
|
2026-10-16 |
| CVE-2026-110380 | MEDIUM | 5.3 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiti… | — |
|
2026-10-16 |
| CVE-2026-111390 | MEDIUM | 5.3 | Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypas… | — |
|
2026-10-16 |
| CVE-2026-110029 | MEDIUM | 5.4 | The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX act… | — |
|
2026-10-16 |
| CVE-2026-109930 | MEDIUM | 5.3 | The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, tre… | — |
|
2026-10-16 |
| CVE-2026-109118 | MEDIUM | 4.6 | Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the … | — |
|
2026-10-16 |
| CVE-2026-110703 | MEDIUM | 6.4 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPre… | — |
|
2026-10-16 |
| CVE-2026-107649 | MEDIUM | 5.4 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'even… | — |
|
2026-10-16 |