CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114182 | MEDIUM | 4.3 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-li… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114180 | MEDIUM | 5.3 | Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configure… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114175 | MEDIUM | 5.4 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112867 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112843 | MEDIUM | 4.3 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Explo… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-112826 | MEDIUM | 5.3 | Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon all… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111847 | MEDIUM | 5.4 | Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-f… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-78392 | MEDIUM | 6.8 | The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outp… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114570 | MEDIUM | 4.9 | WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, an… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111972 | MEDIUM | 4.9 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-111971 | MEDIUM | 6.8 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and e… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-110010 | MEDIUM | 4.8 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any cap… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-103234 | MEDIUM | 4.8 | The WP Ultimate Review WordPress plugin before 2.4.5 does not neutralise shortcodes in all of the re… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-100142 | MEDIUM | 5.3 | The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored c… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114223 | MEDIUM | 5.5 | NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Una… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114222 | MEDIUM | 6.2 | NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114732 | MEDIUM | 6.8 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vul… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114731 | MEDIUM | 5.3 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consu… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114729 | MEDIUM | 5.3 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypa… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96398 | MEDIUM | 4.3 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects… |
T1190
T1059
+1
|
|
2026-10-22 |