CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-109980 | MEDIUM | 4.3 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109979 | MEDIUM | 4.3 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109978 | MEDIUM | 6.4 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Template… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109975 | MEDIUM | 6.4 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Template… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109972 | MEDIUM | 6.4 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109590 | MEDIUM | 6.4 | The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109385 | MEDIUM | 6.4 | The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for Wor… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109370 | MEDIUM | 6.4 | The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerab… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-108366 | MEDIUM | 6.4 | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-107710 | MEDIUM | 6.4 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-104743 | MEDIUM | 4.9 | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and in… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-104740 | MEDIUM | 6.4 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-104729 | MEDIUM | 6.4 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-103996 | MEDIUM | 6.4 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-103370 | MEDIUM | 6.4 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stor… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-100175 | MEDIUM | 5.4 | The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Auto… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-115281 | MEDIUM | 6.8 | The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and sho… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-115255 | MEDIUM | 5.3 | The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-115225 | MEDIUM | 5.8 | The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailCh… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-115224 | MEDIUM | 4.1 | The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statemen… |
T1190
T1203
|
|
2026-10-28 |