CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-50106 | MEDIUM | 6.5 | When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anch… | — |
|
2026-10-21 |
| CVE-2026-14556 | MEDIUM | 5.4 | The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referra… | — |
|
2026-10-21 |
| CVE-2026-109125 | MEDIUM | 5.3 | In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel ca… | — |
|
2026-10-21 |
| CVE-2026-107447 | MEDIUM | 5.3 | The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity u… | — |
|
2026-10-21 |
| CVE-2026-105256 | MEDIUM | 5.3 | The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determi… | — |
|
2026-10-21 |
| CVE-2026-104641 | MEDIUM | 5.3 | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notific… | — |
|
2026-10-21 |
| CVE-2026-103301 | MEDIUM | 5.3 | The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of in… | — |
|
2026-10-21 |
| CVE-2026-101138 | MEDIUM | 5.3 | The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintena… | — |
|
2026-10-21 |
| CVE-2026-17557 | MEDIUM | 6.5 | A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated … | — |
|
2026-10-21 |
| CVE-2026-93856 | MEDIUM | 4.3 | In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages A… | — |
|
2026-10-21 |
| CVE-2026-92999 | MEDIUM | 5.3 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any author… | — |
|
2026-10-21 |
| CVE-2026-87838 | MEDIUM | 6.5 | The Wava Payment Plugin WordPress plugin before 0.3.10 does not perform any authorisation, nonce or … | — |
|
2026-10-21 |
| CVE-2026-87837 | MEDIUM | 5.3 | The Wava Payment Plugin WordPress plugin before 0.3.10 does not verify the authenticity of incoming … | — |
|
2026-10-21 |
| CVE-2026-86611 | MEDIUM | 4.3 | The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 … | — |
|
2026-10-21 |
| CVE-2026-81813 | MEDIUM | 6.8 | The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of S… | — |
|
2026-10-21 |
| CVE-2026-81812 | MEDIUM | 6.4 | The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on… | — |
|
2026-10-21 |
| CVE-2026-15261 | MEDIUM | 5.3 | The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only acce… | — |
|
2026-10-21 |
| CVE-2026-111957 | MEDIUM | 5.3 | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it… | — |
|
2026-10-21 |
| CVE-2026-111956 | MEDIUM | 5.9 | The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it kee… | — |
|
2026-10-21 |
| CVE-2026-111955 | MEDIUM | 6.5 | The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code… | — |
|
2026-10-21 |