CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116763 | MEDIUM | 5.4 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comme… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-111419 | HIGH | 8.6 | A sensitive information exposure vulnerability exists on the Foxit official website because JavaScri… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-111418 | HIGH | 7.5 | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PD… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-111417 | HIGH | 7.5 | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-111318 | MEDIUM | 5.4 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vuln… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-110707 | MEDIUM | 4.7 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plu… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-109215 | MEDIUM | 6.4 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bbp_r… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107743 | HIGH | 7.2 | The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-107629 | MEDIUM | 5.4 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-107627 | MEDIUM | 5.4 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-104727 | MEDIUM | 6.4 | The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-103875 | MEDIUM | 4.7 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-103485 | MEDIUM | 5.4 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scr… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-85498 | LOW | 3.5 | A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-7190 | NONE | — | A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo envi… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115303 | LOW | 3.7 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-v… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-114358 | NONE | — | This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user su… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-117174 | NONE | — | Rejected reason: VUL-2026-008368 為先回報之相同問題 |
T1190
T1203
|
|
2026-10-29 |
| CVE-2025-62841 | NONE | — | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2025-62839 | NONE | — | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup… |
T1190
T1203
|
|
2026-10-29 |