Search
Search Results (417426 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-116410 | 2026-10-30 | 6.5 Medium | ||
| Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. | ||||
| CVE-2026-116405 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. | ||||
| CVE-2026-116401 | 2026-10-30 | 7.5 High | ||
| Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. | ||||
| CVE-2026-116386 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | ||||
| CVE-2026-115947 | 2026-10-30 | 6.5 Medium | ||
| Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. | ||||
| CVE-2026-115604 | 2026-10-30 | 5 Medium | ||
| Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. | ||||
| CVE-2026-114711 | 2026-10-30 | 6.5 Medium | ||
| Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. | ||||
| CVE-2026-107868 | 2026-10-30 | 5.3 Medium | ||
| Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. | ||||
| CVE-2026-105077 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. | ||||
| CVE-2026-94175 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions. | ||||
| CVE-2026-90888 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. | ||||
| CVE-2026-78527 | 2026-10-30 | 8.8 High | ||
| Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions. | ||||
| CVE-2026-73186 | 2026-10-30 | 8.8 High | ||
| Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions. | ||||
| CVE-2026-54855 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. | ||||
| CVE-2026-54854 | 2026-10-30 | 6.3 Medium | ||
| Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. | ||||
| CVE-2026-54850 | 2026-10-30 | 6.5 Medium | ||
| Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. | ||||
| CVE-2026-48201 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. | ||||
| CVE-2026-39786 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions. | ||||
| CVE-2026-39738 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions. | ||||
| CVE-2026-39734 | 2026-10-30 | 7.5 High | ||
| Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. | ||||