CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-81402 | CRITICAL | 9.8 | The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verifica… |
T1190
T1059
+1
|
|
2026-09-12 |
| CVE-2026-77006 | CRITICAL | 9.6 | The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, doe… |
T1190
T1203
|
|
2026-09-12 |
| CVE-2026-77005 | CRITICAL | 9.6 | The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file pa… |
T1190
T1203
|
|
2026-09-12 |
| CVE-2026-75800 | CRITICAL | 9.8 | The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML… |
T1078
T1548
|
|
2026-09-12 |
| CVE-2026-87719 | CRITICAL | 9.9 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 bef… |
T1190
T1203
|
|
2026-09-12 |
| CVE-2026-85706 | CRITICAL | 10.0 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 … |
T1190
T1059
+1
|
|
2026-09-12 |
| CVE-2026-53952 | CRITICAL | 9.8 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of… |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-79395 | CRITICAL | 9.8 | An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routin… |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-62105 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions. |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-62103 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions. |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-54072 | CRITICAL | 9.3 | Authorizer is an open-source, self-hostable authentication and authorization server. Prior to versio… |
T1190
T1059
+1
|
|
2026-09-11 |
| CVE-2026-72710 | CRITICAL | 9.8 | SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where t… |
T1190
T1059
+1
|
|
2026-09-11 |
| CVE-2026-72709 | CRITICAL | 9.8 | SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpo… |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-89010 | CRITICAL | 9.8 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticat… |
T1190
T1059
+1
|
|
2026-09-11 |
| CVE-2026-89009 | CRITICAL | 9.1 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticat… |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-71644 | CRITICAL | 9.8 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef12345678… |
T1190
T1203
|
|
2026-09-11 |
| CVE-2026-84390 | CRITICAL | 9.8 | A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.… |
T1190
T1059
+1
|
|
2026-09-11 |
| CVE-2026-80462 | CRITICAL | 10.0 | A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthent… |
T1078
T1548
|
|
2026-09-11 |
| CVE-2026-89259 | CRITICAL | 9.8 | Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission mod… |
T1190
T1203
|
|
2026-09-11 |
| CVE-2026-14563 | CRITICAL | 9.8 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before i… |
T1078
T1548
|
|
2026-09-11 |