CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-92086 | MEDIUM | 5.3 | The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-5702 | NONE | — | Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-5700 | NONE | — | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to s… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-5699 | NONE | — | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to s… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-5698 | NONE | — | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to s… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-5697 | NONE | — | Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to s… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-27401 | MEDIUM | 5.3 | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-119028 | HIGH | 8.8 | oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inj… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119027 | HIGH | 7.5 | oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inj… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119025 | HIGH | 7.5 | open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to exe… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115821 | HIGH | 7.2 | The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_fi… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-110184 | HIGH | 7.5 | The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in a… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-109822 | MEDIUM | 6.5 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure sto… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-109216 | MEDIUM | 4.9 | The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-S… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-103665 | HIGH | 7.8 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-71569 | MEDIUM | 4.8 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affect… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-33924 | HIGH | 7.2 | Two OS command injection vulnerabilities were discovered in the update installation functionality du… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-33923 | HIGH | 7.2 | A signature verification vulnerability was discovered in the update installation functionality due t… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118989 | MEDIUM | 5.5 | WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request fo… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118984 | MEDIUM | 5.5 | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holde… |
T1190
T1203
|
|
2026-10-29 |