CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114270 | MEDIUM | 5.3 | The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rend… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-110983 | MEDIUM | 4.3 | The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110505 | MEDIUM | 6.8 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elemen… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110504 | MEDIUM | 6.8 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG fi… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110030 | MEDIUM | 5.3 | The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration hand… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-108763 | MEDIUM | 4.3 | The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-42949 | MEDIUM | 5.6 | A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s):… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-40063 | MEDIUM | 5.3 | A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (ve… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-114173 | MEDIUM | 5.3 | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-113409 | MEDIUM | 4.8 | The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings pa… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118590 | MEDIUM | 5.3 | A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118589 | MEDIUM | 5.3 | A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118586 | MEDIUM | 5.3 | A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-82411 | MEDIUM | 6.5 | Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-75520 | MEDIUM | 5.4 | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118578 | MEDIUM | 4.3 | A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected el… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118577 | MEDIUM | 6.3 | A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unkno… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-61575 | MEDIUM | 4.7 | AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-c… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-61573 | MEDIUM | 6.1 | AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request v… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118757 | MEDIUM | 6.5 | PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing au… |
T1190
T1059
+1
|
|
2026-10-28 |