CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-100231 | MEDIUM | 6.1 | A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing str… | — |
|
2026-10-14 |
| CVE-2026-103671 | MEDIUM | 4.7 | External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 se… | — |
|
2026-10-14 |
| CVE-2026-110227 | MEDIUM | 5.3 | Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exp… | — |
|
2026-10-14 |
| CVE-2026-107757 | MEDIUM | 4.9 | The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… | — |
|
2026-10-14 |
| CVE-2026-107756 | MEDIUM | 6.4 | The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display… | — |
|
2026-10-14 |
| CVE-2026-107754 | MEDIUM | 6.4 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPre… | — |
|
2026-10-14 |
| CVE-2026-107650 | MEDIUM | 6.4 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPre… | — |
|
2026-10-14 |
| CVE-2026-104761 | MEDIUM | 6.4 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' p… | — |
|
2026-10-14 |
| CVE-2026-103907 | MEDIUM | 6.5 | The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due … | — |
|
2026-10-14 |
| CVE-2026-103380 | MEDIUM | 4.3 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPres… | — |
|
2026-10-14 |
| CVE-2025-9373 | MEDIUM | 6.4 | The PeproDev Branches Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all v… | — |
|
2026-10-14 |
| CVE-2026-96904 | MEDIUM | 5.3 | The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to vi… | — |
|
2026-10-14 |
| CVE-2026-96900 | MEDIUM | 5.3 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownersh… | — |
|
2026-10-14 |
| CVE-2026-94360 | MEDIUM | 5.3 | The Paymentfor Gateway for WooCommerce WordPress plugin before 1.0.6 does not verify the authenticit… | — |
|
2026-10-14 |
| CVE-2026-94261 | MEDIUM | 5.3 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier … | — |
|
2026-10-14 |
| CVE-2026-94260 | MEDIUM | 5.3 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, th… | — |
|
2026-10-14 |
| CVE-2026-94254 | MEDIUM | 5.3 | The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when to… | — |
|
2026-10-14 |
| CVE-2026-92426 | MEDIUM | 4.9 | The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the reque… | — |
|
2026-10-14 |
| CVE-2026-92409 | MEDIUM | 6.8 | The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a s… | — |
|
2026-10-14 |
| CVE-2026-91076 | MEDIUM | 5.3 | The Robokassa payment gateway for Woocommerce WordPress plugin before 1.9.0 does not verify the auth… | — |
|
2026-10-14 |