Vulnerability database

15,878 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-119641Summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apach…6.5medium03 Nov 2026

CVE-2026-92610Summary: In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loa…9.8critical03 Nov 2026

CVE-2026-91075Eupago Gateway For Woocommerce<= 4.7.55.3medium03 Nov 2026

CVE-2026-109161Summary: Insufficient bounds checking in the Digital I/O function may allow a remote atta…6.9medium03 Nov 2026

CVE-2026-105981Summary: Improper input validation in the Digital I/O function may allow a remote attacke…8.6high03 Nov 2026

CVE-2026-105979Summary: Improper input validation in the ZeroTier VPN function may allow a remote attack…8.6high03 Nov 2026

CVE-2026-105978Summary: Improper input validation in management control functions may allow a remote att…8.6high03 Nov 2026

CVE-2026-103327CryptoCloud – Crypto Payment Gateway<= 3.0.15.3medium03 Nov 2026

CVE-2026-74846Summary: Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing a…7.5high03 Nov 2026

CVE-2026-120987Summary: Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox…7.5high03 Nov 2026

CVE-2025-5769Summary: The authentication endpoint does not properly encode user-supplied input before…6.1medium03 Nov 2026

CVE-2025-1397Summary: When utilizing JWT Bearer or SAML2 Bearer grant types, the system fails to valid…4.8medium03 Nov 2026

CVE-2026-115205AZEXO Store Locator<= 1.46.5medium03 Nov 2026

CVE-2026-106004DT LMS – elearning, WordPress LMS Plugin<= 1.25.3medium03 Nov 2026

CVE-2026-105993DT Directory Lite Addon<= 1.15.3medium03 Nov 2026

CVE-2026-105967Gallery for Social Photo<= 1.0.0.415.8medium03 Nov 2026

CVE-2026-104648weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce< 2.1.74.9medium03 Nov 2026

CVE-2026-104647weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce< 2.1.73.8low03 Nov 2026

CVE-2026-103379WATI Chat and Notification<= 1.1.85.3medium03 Nov 2026

CVE-2026-77799Summary: ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Facto…EPSS 1.2%7.4high03 Nov 2026

CVE-2026-120577FluentCart – Online Store Builder & eCommerce Checkout<= 1.6.28.1high03 Nov 2026

CVE-2026-120563WPML Multilingual & Multicurrency for WooCommerce<= 5.5.74.9medium03 Nov 2026

CVE-2026-120559Contact Form Extender for Divi – Submissions DB & Extra Fields<= 1.0.67.5high03 Nov 2026

CVE-2026-120551WP Compress – Instant Performance & Speed Optimization<= 7.22.015.3medium03 Nov 2026

CVE-2026-120538Easy Digital Downloads – eCommerce Payments and Subscriptions made easy<= 3.7.28.1high03 Nov 2026