CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96228 | HIGH | 8.1 | SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions u… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-93904 | HIGH | 7.5 | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vul… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-93855 | HIGH | 7.5 | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'su… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-93757 | HIGH | 7.5 | The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Col… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-42949 | MEDIUM | 5.6 | A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s):… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-42922 | CRITICAL | 9.8 | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-40063 | MEDIUM | 5.3 | A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (ve… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-118426 | NONE | — | In affected versions of Octopus Server with the LDAP authentication provider enabled, any authentica… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-109516 | CRITICAL | 9.8 | The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass lead… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-66092 | NONE | — | In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logo… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-66091 | NONE | — | In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authenticat… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-66090 | NONE | — | In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-66089 | NONE | — | In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a pars… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-66088 | NONE | — | In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs s… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-16889 | NONE | — | In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/im… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-114173 | MEDIUM | 5.3 | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-113409 | MEDIUM | 4.8 | The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings pa… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-113387 | HIGH | 8.6 | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, rel… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-21157 | NONE | — | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to la… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118590 | MEDIUM | 5.3 | A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the … |
T1190
T1203
|
|
2026-10-29 |