CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118094 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118093 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed all… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118087 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-97860 | MEDIUM | 6.7 | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-92086 | MEDIUM | 5.3 | The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-27401 | MEDIUM | 5.3 | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-109822 | MEDIUM | 6.5 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure sto… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-109216 | MEDIUM | 4.9 | The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-S… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-71569 | MEDIUM | 4.8 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affect… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118989 | MEDIUM | 5.5 | WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request fo… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118984 | MEDIUM | 5.5 | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holde… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115962 | MEDIUM | 4.3 | Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.Thi… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-91153 | MEDIUM | 5.3 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin fo… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-91152 | MEDIUM | 6.1 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin fo… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-88941 | MEDIUM | 5.2 | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Ce… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118192 | MEDIUM | 6.5 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerabl… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-116763 | MEDIUM | 5.4 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comme… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-111318 | MEDIUM | 5.4 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vuln… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-110707 | MEDIUM | 4.7 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plu… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-109215 | MEDIUM | 6.4 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bbp_r… |
T1190
T1203
|
|
2026-10-29 |