CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109382 | MEDIUM | 6.5 | The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosu… | — |
|
2026-10-16 |
| CVE-2026-107770 | MEDIUM | 6.8 | The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization b… | — |
|
2026-10-16 |
| CVE-2026-107646 | MEDIUM | 5.3 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensi… | — |
|
2026-10-16 |
| CVE-2026-105974 | MEDIUM | 4.3 | The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before … | — |
|
2026-10-16 |
| CVE-2026-105973 | MEDIUM | 4.3 | The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks … | — |
|
2026-10-16 |
| CVE-2026-104755 | MEDIUM | 4.8 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Pri… | — |
|
2026-10-16 |
| CVE-2026-103696 | MEDIUM | 6.8 | The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before us… | — |
|
2026-10-16 |
| CVE-2026-93767 | MEDIUM | 6.5 | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and in… | — |
|
2026-10-16 |
| CVE-2026-88963 | MEDIUM | 6.1 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based… | — |
|
2026-10-16 |
| CVE-2026-12272 | MEDIUM | 5.3 | The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable … |
T1078
T1548
|
|
2026-10-16 |
| CVE-2026-110017 | MEDIUM | 6.4 | The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-… | — |
|
2026-10-16 |
| CVE-2026-109414 | MEDIUM | 6.5 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL In… | — |
|
2026-10-16 |
| CVE-2026-107748 | MEDIUM | 6.4 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi… | — |
|
2026-10-16 |
| CVE-2026-104001 | MEDIUM | 5.4 | The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable t… | — |
|
2026-10-16 |
| CVE-2026-103480 | MEDIUM | 6.4 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerab… | — |
|
2026-10-16 |
| CVE-2026-100158 | MEDIUM | 6.4 | The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-a… | — |
|
2026-10-16 |
| CVE-2026-96562 | MEDIUM | 6.5 | The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in a… | — |
|
2026-10-16 |
| CVE-2026-111106 | MEDIUM | 6.5 | The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the… | — |
|
2026-10-16 |
| CVE-2026-110721 | MEDIUM | 5.3 | The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary c… | — |
|
2026-10-16 |
| CVE-2026-110019 | MEDIUM | 4.3 | The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all … | — |
|
2026-10-16 |