CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-85655 | MEDIUM | 4.3 | The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118435 | MEDIUM | 5.4 | Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation. |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-101935 | MEDIUM | 6.1 | The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerabl… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-92098 | MEDIUM | 6.1 | The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to Reflected… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-77871 | MEDIUM | 6.4 | The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-77188 | MEDIUM | 6.4 | The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Stored Cro… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-76780 | MEDIUM | 6.3 | The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and inclu… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-76058 | MEDIUM | 5.3 | The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-76005 | MEDIUM | 6.5 | The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_or… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-63286 | HIGH | 7.1 | Database backups are vulnerable to offline attacks. Backups created using a version prior to the pat… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-2839 | MEDIUM | 5.3 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of da… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118169 | MEDIUM | 4.9 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118164 | MEDIUM | 6.4 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116761 | MEDIUM | 5.4 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1_grp[0][… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-116750 | MEDIUM | 6.5 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to blind SQL Injectio… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116749 | MEDIUM | 6.4 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116610 | MEDIUM | 4.3 | The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116609 | MEDIUM | 6.5 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection vi… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-111372 | MEDIUM | 4.3 | The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111213 | MEDIUM | 4.3 | The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to a… |
T1190
T1059
+1
|
|
2026-10-28 |