CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93681 | MEDIUM | 6.4 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cr… | — |
|
2026-10-16 |
| CVE-2026-15575 | MEDIUM | 5.3 | Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Produ… | — |
|
2026-10-16 |
| CVE-2026-15219 | MEDIUM | 6.5 | Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Cos… | — |
|
2026-10-16 |
| CVE-2026-104726 | MEDIUM | 6.4 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dir' Short… | — |
|
2026-10-16 |
| CVE-2026-104003 | MEDIUM | 5.4 | The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Executio… | — |
|
2026-10-16 |
| CVE-2026-96870 | MEDIUM | 6.4 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cr… | — |
|
2026-10-16 |
| CVE-2026-19621 | MEDIUM | 6.5 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-19600 | MEDIUM | 4.5 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t… | — |
|
2026-10-16 |
| CVE-2026-19076 | MEDIUM | 4.4 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-18799 | MEDIUM | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-18560 | MEDIUM | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-18256 | MEDIUM | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-18223 | MEDIUM | 5.0 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… |
T1190
T1203
|
|
2026-10-16 |
| CVE-2026-16251 | MEDIUM | 6.5 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-100108 | MEDIUM | 6.4 | The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… | — |
|
2026-10-16 |
| CVE-2026-100106 | MEDIUM | 6.4 | The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site… | — |
|
2026-10-16 |
| CVE-2026-92427 | MEDIUM | 5.3 | The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the sec… | — |
|
2026-10-16 |
| CVE-2026-91833 | MEDIUM | 6.8 | The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter b… | — |
|
2026-10-16 |
| CVE-2026-91830 | MEDIUM | 6.5 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts… | — |
|
2026-10-16 |
| CVE-2026-74923 | MEDIUM | 5.3 | The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership che… | — |
|
2026-10-16 |