CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-46560 | HIGH | 7.5 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` auth… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-39786 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-39734 | HIGH | 7.5 | Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-28160 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118090 | HIGH | 8.8 | Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118089 | HIGH | 7.2 | Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118086 | HIGH | 8.8 | Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. |
T1068
T1134
|
|
2026-10-30 |
| CVE-2026-116862 | HIGH | 7.5 | Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116861 | HIGH | 7.5 | Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116851 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116847 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116405 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-116401 | HIGH | 7.5 | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-105077 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-97638 | HIGH | 7.5 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vuln… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-96894 | HIGH | 7.2 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerabl… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-84243 | HIGH | 7.0 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environme… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-76012 | HIGH | 7.5 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119979 | HIGH | 8.8 | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveD… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119978 | HIGH | 8.5 | Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to exe… |
T1190
T1203
|
|
2026-10-30 |