CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111419 | HIGH | 8.6 | A sensitive information exposure vulnerability exists on the Foxit official website because JavaScri… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-111418 | HIGH | 7.5 | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PD… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-111417 | HIGH | 7.5 | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107743 | HIGH | 7.2 | The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-89216 | HIGH | 8.6 | The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before us… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-86794 | HIGH | 8.8 | The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-15564 | HIGH | 7.4 | Wildfly's IIOP listener may permit deserialization of input streams before authentication is perform… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118905 | HIGH | 7.0 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js version… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115301 | HIGH | 7.2 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine u… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-114488 | HIGH | 7.4 | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-111739 | HIGH | 7.5 | The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-96741 | HIGH | 7.2 | The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Co… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-96669 | HIGH | 7.2 | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Si… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-96666 | HIGH | 7.2 | The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-96228 | HIGH | 8.1 | SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions u… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-93904 | HIGH | 7.5 | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vul… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-93855 | HIGH | 7.5 | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'su… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-93757 | HIGH | 7.5 | The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Col… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-113387 | HIGH | 8.6 | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, rel… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-85749 | HIGH | 8.1 | MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticate… |
T1190
T1059
+1
|
|
2026-10-28 |