CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-66086 | CRITICAL | 9.8 | In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation o… | — |
|
2026-10-12 |
| CVE-2026-108860 | CRITICAL | 9.1 | BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated r… | — |
|
2026-10-11 |
| CVE-2026-108753 | CRITICAL | 9.4 | Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-… | — |
|
2026-10-11 |
| CVE-2026-108576 | CRITICAL | 10.0 | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function proces… | — |
|
2026-10-11 |
| CVE-2026-86717 | CRITICAL | 9.1 | The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of it… | — |
|
2026-10-11 |
| CVE-2026-86706 | CRITICAL | 9.1 | The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on o… | — |
|
2026-10-11 |
| CVE-2026-85121 | CRITICAL | 9.1 | The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of it… | — |
|
2026-10-11 |
| CVE-2026-85118 | CRITICAL | 9.8 | The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capabi… | — |
|
2026-10-11 |
| CVE-2026-84737 | CRITICAL | 9.8 | The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when a… | — |
|
2026-10-11 |
| CVE-2026-84734 | CRITICAL | 9.8 | The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied … | — |
|
2026-10-11 |
| CVE-2026-84254 | CRITICAL | 9.8 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation a… | — |
|
2026-10-11 |
| CVE-2026-84253 | CRITICAL | 9.8 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation an… | — |
|
2026-10-11 |
| CVE-2026-84252 | CRITICAL | 9.8 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF… | — |
|
2026-10-11 |
| CVE-2026-84251 | CRITICAL | 9.8 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and … | — |
|
2026-10-11 |
| CVE-2026-81649 | CRITICAL | 9.1 | The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on sev… | — |
|
2026-10-11 |
| CVE-2026-108540 | CRITICAL | 9.9 | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the fi… | — |
|
2026-10-11 |
| CVE-2026-104028 | CRITICAL | 9.8 | The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce ver… | — |
|
2026-10-11 |
| CVE-2026-108707 | CRITICAL | 9.8 | Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect tha… | — |
|
2026-10-11 |
| CVE-2026-81797 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 … | — |
|
2026-10-10 |
| CVE-2026-78535 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. | — |
|
2026-10-10 |