CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114708 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-114707 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-97295 | MEDIUM | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-libra… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-97255 | MEDIUM | 5.3 | Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons roy… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-97254 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116255 | MEDIUM | 5.3 | A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Af… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116254 | MEDIUM | 6.5 | A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. Thi… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115958 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board a… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115949 | MEDIUM | 6.5 | Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor b… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115614 | MEDIUM | 5.3 | Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-115613 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-115602 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-114709 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-112865 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-112250 | MEDIUM | 4.4 | A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under speci… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-110377 | MEDIUM | 5.3 | Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-95664 | MEDIUM | 5.4 | Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression La… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-95663 | MEDIUM | 4.8 | Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affe… |
T1190
T1059
+1
|
|
2026-10-26 |
| CVE-2026-95629 | MEDIUM | 5.4 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-95628 | MEDIUM | 5.4 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac… |
T1190
T1203
|
|
2026-10-26 |