CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-77871 | MEDIUM | 6.4 | The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-77188 | MEDIUM | 6.4 | The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Stored Cro… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-76780 | MEDIUM | 6.3 | The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and inclu… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-76058 | MEDIUM | 5.3 | The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-76005 | MEDIUM | 6.5 | The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_or… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-2839 | MEDIUM | 5.3 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of da… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118169 | MEDIUM | 4.9 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118164 | MEDIUM | 6.4 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116761 | MEDIUM | 5.4 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1_grp[0][… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-116750 | MEDIUM | 6.5 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to blind SQL Injectio… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116749 | MEDIUM | 6.4 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116610 | MEDIUM | 4.3 | The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116609 | MEDIUM | 6.5 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection vi… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-111372 | MEDIUM | 4.3 | The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111213 | MEDIUM | 4.3 | The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to a… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111068 | MEDIUM | 4.4 | The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110185 | MEDIUM | 5.9 | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-110071 | MEDIUM | 6.4 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' par… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110020 | MEDIUM | 6.5 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization bypass in a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109988 | MEDIUM | 4.4 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vuln… |
T1190
T1059
+1
|
|
2026-10-28 |