CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116856 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116850 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116849 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116846 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploi… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116406 | MEDIUM | 4.3 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploit… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116387 | MEDIUM | 5.3 | Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorr… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115713 | HIGH | 7.5 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115712 | MEDIUM | 4.3 | Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modific… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115711 | MEDIUM | 6.4 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115709 | HIGH | 8.2 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115708 | HIGH | 7.2 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-115707 | MEDIUM | 6.4 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic… |
T1068
T1134
|
|
2026-10-29 |
| CVE-2026-115706 | MEDIUM | 6.8 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lea… |
T1068
T1134
|
|
2026-10-29 |
| CVE-2026-115610 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115605 | MEDIUM | 4.3 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrec… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115601 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocomm… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-114706 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-114181 | MEDIUM | 5.3 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-tax… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-110881 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107024 | NONE | — | Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitr… |
T1190
T1203
|
|
2026-10-29 |