CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111120 | HIGH | 8.8 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111111 | HIGH | 7.2 | The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for Word… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111068 | MEDIUM | 4.4 | The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110662 | HIGH | 7.2 | The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Sto… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-110185 | MEDIUM | 5.9 | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-110071 | MEDIUM | 6.4 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' par… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110020 | MEDIUM | 6.5 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization bypass in a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109988 | MEDIUM | 4.4 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vuln… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109980 | MEDIUM | 4.3 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109979 | MEDIUM | 4.3 | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109978 | MEDIUM | 6.4 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Template… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109975 | MEDIUM | 6.4 | The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Template… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109972 | MEDIUM | 6.4 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109590 | MEDIUM | 6.4 | The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109385 | MEDIUM | 6.4 | The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for Wor… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109384 | HIGH | 8.8 | The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Uplo… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109381 | HIGH | 7.2 | The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, an… |
T1068
T1134
|
|
2026-10-28 |
| CVE-2026-109370 | MEDIUM | 6.4 | The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerab… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109218 | CRITICAL | 9.8 | The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up t… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-108366 | MEDIUM | 6.4 | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin… |
T1190
T1203
|
|
2026-10-28 |