CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-54853 | MEDIUM | 5.3 | Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-54852 | MEDIUM | 5.3 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-rest… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-52708 | MEDIUM | 4.3 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting In… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-48884 | MEDIUM | 5.3 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting In… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42691 | MEDIUM | 5.4 | Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-e… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39742 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39737 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-27063 | MEDIUM | 5.3 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting In… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-27062 | MEDIUM | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross S… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-25450 | MEDIUM | 5.3 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploit… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-25448 | MEDIUM | 4.3 | Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Ac… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118097 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118095 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118092 | MEDIUM | 4.3 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-manag… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118091 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrec… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118088 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrec… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116856 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116850 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116849 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116846 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploi… |
T1190
T1203
|
|
2026-10-29 |