CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-19867 | MEDIUM | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail t… | — |
|
2026-10-16 |
| CVE-2026-19798 | MEDIUM | 4.3 | The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a mi… | — |
|
2026-10-16 |
| CVE-2026-19603 | MEDIUM | 4.3 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t… | — |
|
2026-10-16 |
| CVE-2026-19601 | MEDIUM | 4.9 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t… |
T1190
T1203
|
|
2026-10-16 |
| CVE-2026-19541 | MEDIUM | 6.5 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t… | — |
|
2026-10-16 |
| CVE-2026-18795 | MEDIUM | 6.4 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-18551 | MEDIUM | 6.5 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to… | — |
|
2026-10-16 |
| CVE-2026-15222 | MEDIUM | 5.4 | The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction… | — |
|
2026-10-16 |
| CVE-2026-111178 | MEDIUM | 4.9 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection… | — |
|
2026-10-16 |
| CVE-2026-111069 | MEDIUM | 6.4 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPre… | — |
|
2026-10-16 |
| CVE-2026-110664 | MEDIUM | 6.4 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored C… | — |
|
2026-10-16 |
| CVE-2026-110366 | MEDIUM | 5.3 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incor… |
T1190
T1203
|
|
2026-10-16 |
| CVE-2026-110290 | MEDIUM | 6.4 | The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Script… | — |
|
2026-10-16 |
| CVE-2026-110252 | MEDIUM | 5.4 | The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in … | — |
|
2026-10-16 |
| CVE-2026-110179 | MEDIUM | 6.8 | The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value ag… | — |
|
2026-10-16 |
| CVE-2026-110014 | MEDIUM | 5.3 | The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization befo… | — |
|
2026-10-16 |
| CVE-2026-110013 | MEDIUM | 4.8 | The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access t… | — |
|
2026-10-16 |
| CVE-2026-110012 | MEDIUM | 4.3 | The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking R… |
T1190
T1203
|
|
2026-10-16 |
| CVE-2026-109982 | MEDIUM | 4.2 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capab… | — |
|
2026-10-16 |
| CVE-2026-109388 | MEDIUM | 6.4 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnera… | — |
|
2026-10-16 |