Vulnerability database

8,695 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-121587Summary: Coolify before 4.1.1 contains an information disclosure vulnerability that allow…6.9medium03 Nov 2026

CVE-2026-121261Summary: A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is…2.1low03 Nov 2026

CVE-2026-121259Summary: A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafte…6.5medium03 Nov 2026

CVE-2026-120846Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT<= 7.7.15.3medium03 Nov 2026

CVE-2026-120843Posts Table with Search & Sort<= 1.4.146.5medium03 Nov 2026

CVE-2026-119521Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction<= 3.1.36.5medium03 Nov 2026

CVE-2026-116858Forminator Forms – Contact Form, Payment Form & Custom Form Builder<= 1.58.34.3medium03 Nov 2026

CVE-2026-114187Dynific Addons for Elementor (formerly Anywhere Elementor)<= 1.3.05.3medium03 Nov 2026

CVE-2026-114183Dynific Addons for Elementor (formerly Anywhere Elementor)<= 1.3.06.5medium03 Nov 2026

CVE-2026-121561Summary: Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-sid…6.3medium03 Nov 2026

CVE-2026-121557Summary: WPPConnect Server through 2.10.74 contains a missing authentication vulnerabilit…8.2high03 Nov 2026

CVE-2026-121553Summary: Cotonti through 1.0.0 generates registration and email-change validation tokens…6.3medium03 Nov 2026

CVE-2026-121549Summary: nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread…4.1medium03 Nov 2026

CVE-2026-121545Summary: Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWeb…6.9medium03 Nov 2026

CVE-2026-121454Summary: Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServ…6.3medium03 Nov 2026

CVE-2026-121450Summary: CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that…7.7high03 Nov 2026

CVE-2026-119741Samba Rsync8.7high03 Nov 2026

CVE-2026-121446Summary: svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerabi…5.3medium03 Nov 2026

CVE-2026-121442Summary: Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allow…5.3medium03 Nov 2026

CVE-2026-121438Summary: Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.…6.9medium03 Nov 2026

CVE-2026-121434Summary: Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certif…5.3medium03 Nov 2026

CVE-2026-121430Summary: AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GE…5.3medium03 Nov 2026

CVE-2026-121426Summary: Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in…8.3high03 Nov 2026

CVE-2026-121422Summary: SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnera…5.1medium03 Nov 2026

CVE-2026-121418Summary: SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerabil…5.3medium03 Nov 2026