Vulnerability database

9,364 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-110251Revopic – Photo Reviews for WooCommerce<= 1.2.315.4medium31 Oct 2026

CVE-2026-109217PDF Invoices & Packing Slips for WooCommerce<= 5.16.55.3medium31 Oct 2026

CVE-2026-119977WordPress<= 7.1.3CISA KEVPoC ×9EPSS 1.2%8.1high31 Oct 2026

CVE-2026-101326Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder<= 3.15.55.4medium31 Oct 2026

CVE-2026-116755Summary: Improper Neutralization of Special Elements used in a Command ('Command Injectio…7.4high31 Oct 2026

CVE-2026-110176Summary: The File Force Download module for Drupal 7 implements hook_file_download() to a…8.7high31 Oct 2026

CVE-2026-77152Summary: Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 all…5.3medium31 Oct 2026

CVE-2026-117656Summary: Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the S…9.3critical31 Oct 2026

CVE-2026-63414Summary: Shopify App is a Rails engine for building Shopify applications. From 22.1.0 unt…7.6high30 Oct 2026

CVE-2026-63402Summary: i18next is an internationalization framework for JavaScript. Prior to version 26…5.9medium30 Oct 2026

CVE-2026-63400Summary: Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `r…2.3low30 Oct 2026

CVE-2026-63399Summary: Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, th…6.9medium30 Oct 2026

CVE-2026-63377Summary: TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators…9.8critical30 Oct 2026

CVE-2026-63344Summary: Refitter is a tool for generating a C# REST API client using the Refit library.…8.6high30 Oct 2026

CVE-2026-63341Summary: Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the M…7.5high30 Oct 2026

CVE-2026-63339Summary: IXP Manager is a full-stack web application for managing Internet Exchange Point…8.8high30 Oct 2026

CVE-2026-63338Summary: IXP Manager is a full-stack web application for managing Internet Exchange Point…8.3high30 Oct 2026

CVE-2026-63224Summary: OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `…7.2high30 Oct 2026

CVE-2026-63182Summary: LightSAML implements SAML 2.0 data model classes, XML serialization and deserial…8.1high30 Oct 2026

CVE-2026-63121Summary: Kubewarden policies is a collection of WebAssembly policies for securing and gov…6.3medium30 Oct 2026

CVE-2026-62347Summary: Element Call is a native Matrix video conferencing application. From 0.16.0 unti…5.9medium30 Oct 2026

CVE-2026-55614Summary: uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_…6.9medium30 Oct 2026

CVE-2026-55613Summary: uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_…6.9medium30 Oct 2026

CVE-2026-55146Summary: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web app…4.3medium30 Oct 2026

CVE-2026-16760Summary: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle…8.8high30 Oct 2026