CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-105972 | HIGH | 7.5 | The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item v… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-104694 | MEDIUM | 6.8 | The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter'… |
T1190
T1005
+1
|
|
2026-10-28 |
| CVE-2026-103688 | CRITICAL | 9.8 | The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded f… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-103382 | MEDIUM | 5.3 | The Casso Flow WordPress plugin before 4.2.0 does not properly authenticate incoming bank-transfer … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-103372 | MEDIUM | 5.3 | The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-103331 | MEDIUM | 5.3 | The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115522 | NONE | — | Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Ki… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-104384 | NONE | — | Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aqu… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-104383 | NONE | — | Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-99100 | NONE | — | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate firmware re… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-1928 | HIGH | 8.8 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118276 | LOW | 3.5 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the fun… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118275 | MEDIUM | 5.3 | A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.r… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-116613 | HIGH | 7.5 | The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in vers… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111727 | MEDIUM | 6.4 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111255 | HIGH | 7.5 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vul… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-97019 | HIGH | 7.2 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Sc… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-84999 | CRITICAL | 9.8 | The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118384 | MEDIUM | 6.1 | GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c. |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118378 | HIGH | 7.8 | Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP… |
T1190
T1005
+1
|
|
2026-10-28 |