CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111947 | MEDIUM | 5.5 | The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation che… | — |
|
2026-10-21 |
| CVE-2026-111596 | MEDIUM | 5.3 | The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds … | — |
|
2026-10-21 |
| CVE-2026-110982 | MEDIUM | 4.9 | The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the t… | — |
|
2026-10-21 |
| CVE-2026-110651 | MEDIUM | 6.8 | The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a v… | — |
|
2026-10-21 |
| CVE-2026-110514 | MEDIUM | 4.9 | The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to e… | — |
|
2026-10-21 |
| CVE-2026-109926 | MEDIUM | 4.3 | The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one o… | — |
|
2026-10-21 |
| CVE-2026-108073 | MEDIUM | 5.3 | The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous vis… | — |
|
2026-10-21 |
| CVE-2026-107790 | MEDIUM | 6.8 | The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its stored data bef… | — |
|
2026-10-21 |
| CVE-2026-107789 | MEDIUM | 5.3 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving … | — |
|
2026-10-21 |
| CVE-2026-107788 | MEDIUM | 4.3 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting… | — |
|
2026-10-21 |
| CVE-2026-107128 | MEDIUM | 5.0 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user… | — |
|
2026-10-21 |
| CVE-2026-106932 | MEDIUM | 6.5 | The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce checks on several of … | — |
|
2026-10-21 |
| CVE-2026-105999 | MEDIUM | 5.3 | The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before retu… | — |
|
2026-10-21 |
| CVE-2026-105998 | MEDIUM | 5.3 | The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity ch… | — |
|
2026-10-21 |
| CVE-2026-105996 | MEDIUM | 4.8 | The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens usi… | — |
|
2026-10-21 |
| CVE-2026-105992 | MEDIUM | 5.3 | The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment st… | — |
|
2026-10-21 |
| CVE-2026-103302 | MEDIUM | 5.3 | The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of inco… | — |
|
2026-10-21 |
| CVE-2026-100145 | MEDIUM | 6.5 | The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of… | — |
|
2026-10-21 |
| CVE-2026-92824 | MEDIUM | 6.2 | A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorr… | — |
|
2026-10-21 |
| CVE-2026-92823 | MEDIUM | 6.2 | A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is d… | — |
|
2026-10-21 |