CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-110612 | CRITICAL | 9.8 | vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated atta… | — |
|
2026-10-14 |
| CVE-2020-37282 | CRITICAL | 9.8 | office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers … |
T1190
T1203
|
|
2026-10-14 |
| CVE-2026-108065 | CRITICAL | 9.8 | SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Softw… | — |
|
2026-10-14 |
| CVE-2026-16741 | CRITICAL | 9.8 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi… | — |
|
2026-10-14 |
| CVE-2026-16740 | CRITICAL | 9.8 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on vi… | — |
|
2026-10-14 |
| CVE-2026-108291 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injec… | — |
|
2026-10-14 |
| CVE-2026-107424 | CRITICAL | 9.8 | Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboa… | — |
|
2026-10-14 |
| CVE-2026-103904 | CRITICAL | 9.3 | The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitor… | — |
|
2026-10-14 |
| CVE-2026-104748 | CRITICAL | 9.8 | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for Wor… | — |
|
2026-10-14 |
| CVE-2026-89310 | CRITICAL | 9.9 | A parameter taken from the request body is inserted into a T-SQL statement without parameterization … | — |
|
2026-10-14 |
| CVE-2026-107594 | CRITICAL | 10.0 | The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path take… | — |
|
2026-10-14 |
| CVE-2026-87855 | CRITICAL | 9.8 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all… | — |
|
2026-10-14 |
| CVE-2026-104800 | CRITICAL | 9.8 | The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and … | — |
|
2026-10-14 |
| CVE-2026-97668 | CRITICAL | 9.8 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the g… | — |
|
2026-10-14 |
| CVE-2026-97657 | CRITICAL | 9.8 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass v… | — |
|
2026-10-14 |
| CVE-2026-110002 | CRITICAL | 9.8 | The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all vers… | — |
|
2026-10-14 |
| CVE-2026-93388 | CRITICAL | 9.8 | The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticat… | — |
|
2026-10-14 |
| CVE-2026-92097 | CRITICAL | 9.1 | The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution i… | — |
|
2026-10-14 |
| CVE-2026-110392 | CRITICAL | 9.8 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi… |
T1190
T1059
+1
|
|
2026-10-14 |
| CVE-2026-97381 | CRITICAL | 9.9 | Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1… | — |
|
2026-10-13 |