CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116386 | CRITICAL | 9.8 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-115947 | MEDIUM | 6.5 | Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-115604 | MEDIUM | 5.0 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-114711 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-109213 | NONE | — | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason:… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107868 | MEDIUM | 5.3 | Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-105077 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-104674 | MEDIUM | 4.3 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Con… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-9239 | MEDIUM | 6.4 | The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Al… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-97638 | HIGH | 7.5 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vuln… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-96894 | HIGH | 7.2 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerabl… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-84243 | HIGH | 7.0 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environme… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-76012 | HIGH | 7.5 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-69446 | MEDIUM | 4.4 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-13747 | MEDIUM | 6.5 | The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, a… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119979 | HIGH | 8.8 | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveD… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119978 | HIGH | 8.5 | Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to exe… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119777 | HIGH | 7.8 | A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119764 | MEDIUM | 6.8 | Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows atta… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119763 | MEDIUM | 5.3 | changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unau… |
T1078
T1548
|
|
2026-10-30 |