CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114242 | HIGH | 7.3 | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf0… | — |
|
2026-10-21 |
| CVE-2026-110884 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-110370 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-por… | — |
|
2026-10-21 |
| CVE-2026-110369 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs… | — |
|
2026-10-21 |
| CVE-2026-97206 | HIGH | 7.5 | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifeti… | — |
|
2026-10-21 |
| CVE-2026-85683 | HIGH | 8.8 | The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of i… | — |
|
2026-10-21 |
| CVE-2026-110899 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-107435 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-21 |
| CVE-2026-92998 | HIGH | 8.6 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort para… | — |
|
2026-10-21 |
| CVE-2026-92997 | HIGH | 8.6 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate … | — |
|
2026-10-21 |
| CVE-2026-88784 | HIGH | 7.5 | The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it r… | — |
|
2026-10-21 |
| CVE-2026-85642 | HIGH | 7.5 | The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before … | — |
|
2026-10-21 |
| CVE-2026-79627 | HIGH | 7.1 | The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stor… | — |
|
2026-10-21 |
| CVE-2026-111949 | HIGH | 7.5 | The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from regi… | — |
|
2026-10-21 |
| CVE-2026-111948 | HIGH | 7.1 | The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before … | — |
|
2026-10-21 |
| CVE-2026-111574 | HIGH | 7.5 | The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submit… | — |
|
2026-10-21 |
| CVE-2026-110523 | HIGH | 8.1 | The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability r… | — |
|
2026-10-21 |
| CVE-2026-109147 | HIGH | 7.1 | The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of its param… | — |
|
2026-10-21 |
| CVE-2026-107506 | HIGH | 7.5 | The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants… | — |
|
2026-10-21 |
| CVE-2026-107237 | HIGH | 8.2 | The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capabilit… | — |
|
2026-10-21 |