CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-87097 | MEDIUM | 5.3 | Sensitive information disclosure due to insufficiently protected credentials. The following products… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115223 | MEDIUM | 4.9 | The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection paylo… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-110508 | MEDIUM | 5.3 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator ap… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-106648 | MEDIUM | 5.3 | The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field v… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-103330 | MEDIUM | 5.3 | The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of inc… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-103313 | MEDIUM | 5.3 | The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-92665 | MEDIUM | 5.3 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-86392 | MEDIUM | 4.9 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-86391 | MEDIUM | 6.4 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-86390 | MEDIUM | 6.5 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-86388 | MEDIUM | 5.3 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-86386 | MEDIUM | 4.3 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-86383 | MEDIUM | 6.8 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release version… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105457 | MEDIUM | 6.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVE… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-90720 | MEDIUM | 6.7 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-16020 | MEDIUM | 5.4 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-85655 | MEDIUM | 4.3 | The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118435 | MEDIUM | 5.4 | Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation. |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-101935 | MEDIUM | 6.1 | The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerabl… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-92098 | MEDIUM | 6.1 | The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to Reflected… |
T1078
T1548
|
|
2026-10-28 |