CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2021-48013 | HIGH | 7.5 | Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2019-25779 | HIGH | 7.5 | WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attac… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2019-25778 | HIGH | 8.2 | SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attack… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2018-25439 | HIGH | 7.5 | MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that al… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2018-25438 | HIGH | 7.5 | Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability i… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2017-20289 | HIGH | 7.5 | Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulne… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2017-20287 | HIGH | 7.5 | Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unaut… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-112085 | HIGH | 8.2 | webpack-dev-server is a development server that provides live reloading for webpack projects. In ver… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112379 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112312 | HIGH | 7.5 | Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Inco… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112242 | HIGH | 8.8 | Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Pr… |
T1068
T1134
|
|
2026-10-22 |
| CVE-2026-111851 | HIGH | 7.6 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111830 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114177 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-97328 | HIGH | 7.5 | The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-111958 | HIGH | 7.5 | The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single previ… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-109987 | HIGH | 7.2 | The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-109927 | HIGH | 7.2 | The HIPAA Forms WordPress plugin before 3.3.2 does not perform a capability check when handling a re… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114221 | HIGH | 7.4 | NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114219 | HIGH | 7.4 | NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated… |
T1078
T1548
|
|
2026-10-22 |