CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-115259 | MEDIUM | 4.9 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper au… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115245 | CRITICAL | 9.8 | The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, r… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-114488 | HIGH | 7.4 | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-114270 | MEDIUM | 5.3 | The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rend… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-113617 | CRITICAL | 9.9 | The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplie… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113616 | CRITICAL | 9.8 | The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code t… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-111739 | HIGH | 7.5 | The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110983 | MEDIUM | 4.3 | The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110505 | MEDIUM | 6.8 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elemen… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110504 | MEDIUM | 6.8 | The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG fi… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110030 | MEDIUM | 5.3 | The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration hand… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-108763 | MEDIUM | 4.3 | The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-108686 | LOW | 3.7 | The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it retu… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-108685 | LOW | 3.7 | The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-105258 | LOW | 3.5 | The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form s… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-103693 | CRITICAL | 9.0 | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 d… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2024-3586 | LOW | 3.5 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, wh… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-96741 | HIGH | 7.2 | The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Co… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-96669 | HIGH | 7.2 | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Si… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-96666 | HIGH | 7.2 | The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
T1078
T1548
|
|
2026-10-29 |