CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109512 | MEDIUM | 6.4 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' p… | — |
|
2026-10-16 |
| CVE-2026-109191 | MEDIUM | 4.3 | The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress i… | — |
|
2026-10-16 |
| CVE-2026-103911 | MEDIUM | 6.5 | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is … | — |
|
2026-10-16 |
| CVE-2026-103481 | MEDIUM | 6.1 | The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p… | — |
|
2026-10-16 |
| CVE-2026-101335 | MEDIUM | 6.5 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vuln… | — |
|
2026-10-16 |
| CVE-2026-93535 | MEDIUM | 6.4 | The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable … | — |
|
2026-10-16 |
| CVE-2026-89280 | MEDIUM | 4.3 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Et… | — |
|
2026-10-16 |
| CVE-2026-77829 | MEDIUM | 6.4 | The Cooked – Recipe Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | — |
|
2026-10-16 |
| CVE-2026-111450 | MEDIUM | 5.9 | Wheels through 4.1.1 derives its default production error-email address from the Host header of the … | — |
|
2026-10-16 |
| CVE-2026-111449 | MEDIUM | 5.9 | Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disab… | — |
|
2026-10-16 |
| CVE-2026-111443 | MEDIUM | 6.5 | Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test appl… | — |
|
2026-10-16 |
| CVE-2026-104769 | MEDIUM | 5.9 | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Travers… | — |
|
2026-10-16 |
| CVE-2026-103518 | MEDIUM | 4.9 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnera… | — |
|
2026-10-16 |
| CVE-2026-111388 | MEDIUM | 5.4 | Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip a… | — |
|
2026-10-16 |
| CVE-2026-111387 | MEDIUM | 6.5 | Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenti… | — |
|
2026-10-16 |
| CVE-2026-111386 | MEDIUM | 4.3 | Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenti… | — |
|
2026-10-16 |
| CVE-2026-111385 | MEDIUM | 4.8 | Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool th… | — |
|
2026-10-16 |
| CVE-2026-111384 | MEDIUM | 6.5 | Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager W… | — |
|
2026-10-16 |
| CVE-2026-111383 | MEDIUM | 6.5 | Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticat… | — |
|
2026-10-16 |
| CVE-2026-111377 | MEDIUM | 6.5 | FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannel… | — |
|
2026-10-16 |