CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-13747 | MEDIUM | 6.5 | The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, a… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119764 | MEDIUM | 6.8 | Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows atta… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119763 | MEDIUM | 5.3 | changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unau… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119761 | MEDIUM | 6.1 | Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerab… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119176 | MEDIUM | 6.4 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119113 | MEDIUM | 6.4 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPre… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119086 | MEDIUM | 6.5 | Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118635 | MEDIUM | 6.5 | The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for Wor… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116552 | MEDIUM | 4.7 | The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-115869 | MEDIUM | 6.4 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'varia… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-115820 | MEDIUM | 6.5 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is … |
T1190
T1005
+1
|
|
2026-10-30 |
| CVE-2026-110533 | MEDIUM | 6.4 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-110001 | MEDIUM | 5.4 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-109984 | MEDIUM | 5.4 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-109592 | MEDIUM | 4.3 | The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulne… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-104739 | MEDIUM | 4.9 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbit… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-102918 | MEDIUM | 6.4 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all version… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-102905 | MEDIUM | 6.5 | The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary short… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-62055 | MEDIUM | 4.3 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exp… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-55551 | MEDIUM | 6.5 | ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. P… |
T1190
T1059
+1
|
|
2026-10-30 |