CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107629 | MEDIUM | 5.4 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-107627 | MEDIUM | 5.4 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-104727 | MEDIUM | 6.4 | The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-103875 | MEDIUM | 4.7 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-103485 | MEDIUM | 5.4 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scr… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-118030 | MEDIUM | 4.2 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which prov… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-117859 | MEDIUM | 5.4 | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services com… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-117688 | MEDIUM | 5.3 | A flaw was found in the client registration component of Keycloak, an open-source identity and acces… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-117627 | MEDIUM | 5.4 | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. W… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-117548 | MEDIUM | 6.5 | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93293 | MEDIUM | 6.4 | The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bun… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-88928 | MEDIUM | 6.5 | The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signatur… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-78396 | MEDIUM | 5.3 | The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-78395 | MEDIUM | 5.3 | The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login r… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-19610 | MEDIUM | 6.5 | A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to J… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115302 | MEDIUM | 5.3 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX ac… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-115300 | MEDIUM | 4.3 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF token or requ… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115299 | MEDIUM | 5.4 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce before sa… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115282 | MEDIUM | 5.3 | The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check be… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-115259 | MEDIUM | 4.9 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper au… |
T1190
T1203
|
|
2026-10-29 |