CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116068 | HIGH | 8.8 | Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins … |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116067 | HIGH | 8.2 | Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, … |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116066 | MEDIUM | 6.8 | Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright ser… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116050 | HIGH | 7.3 | A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116049 | HIGH | 7.3 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae35… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116048 | HIGH | 7.3 | A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d7… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116047 | MEDIUM | 4.3 | A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown pr… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116046 | MEDIUM | 5.3 | A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getC… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116045 | MEDIUM | 4.3 | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_re… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-94295 | MEDIUM | 5.3 | The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116044 | MEDIUM | 6.3 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by thi… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-115251 | HIGH | 7.2 | The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to use… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-115214 | CRITICAL | 9.8 | The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-115183 | LOW | 2.4 | The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's hea… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114743 | LOW | 3.1 | The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its Inst… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114742 | LOW | 2.7 | The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114741 | LOW | 3.8 | The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when read… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-114740 | MEDIUM | 4.9 | The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a t… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111981 | LOW | 2.7 | The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-111980 | MEDIUM | 5.5 | The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capabili… |
T1190
T1203
|
|
2026-10-25 |