Vulnerability database

8,826 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2025-71451Summary: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vul…5.1medium03 Nov 2026

CVE-2026-57154Summary: OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and…8.1high03 Nov 2026

CVE-2026-46487Summary: GeoNetwork is a catalog application to manage spatially referenced resources. Fr…7.5high03 Nov 2026

CVE-2026-121652Summary: Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.…4.8medium03 Nov 2026

CVE-2026-121501Summary: A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project. The a…2.1low03 Nov 2026

CVE-2026-119922Summary: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1…8.7high03 Nov 2026

CVE-2026-112917Summary: In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux conta…9.2critical03 Nov 2026

CVE-2026-44267Summary: Elo is a purely functional expression language for no-code tools. Prior to 1.0.1…PoC ×19.8critical03 Nov 2026

CVE-2026-121626Summary: GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability…6.3medium03 Nov 2026

CVE-2026-39777WCFM Membership – WooCommerce Memberships for Multivendor Marketplace<= 2.12.04.3medium03 Nov 2026

CVE-2026-39743WCFM Membership – WooCommerce Memberships for Multivendor Marketplace<= 2.12.05.3medium03 Nov 2026

CVE-2026-38595Summary: An issue in im3x Scriptables through v2-dev branch allows attackers to inject ar…9.8critical03 Nov 2026

CVE-2026-121604Summary: wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surfa…4.8medium03 Nov 2026

CVE-2026-121587Summary: Coolify before 4.1.1 contains an information disclosure vulnerability that allow…6.9medium03 Nov 2026

CVE-2026-121261Summary: A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is…2.1low03 Nov 2026

CVE-2026-121259Summary: A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafte…6.5medium03 Nov 2026

CVE-2026-120846Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT<= 7.7.15.3medium03 Nov 2026

CVE-2026-120843Posts Table with Search & Sort<= 1.4.146.5medium03 Nov 2026

CVE-2026-119521Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction<= 3.1.36.5medium03 Nov 2026

CVE-2026-116858Forminator Forms – Contact Form, Payment Form & Custom Form Builder<= 1.58.34.3medium03 Nov 2026

CVE-2026-114187Dynific Addons for Elementor (formerly Anywhere Elementor)<= 1.3.05.3medium03 Nov 2026

CVE-2026-114183Dynific Addons for Elementor (formerly Anywhere Elementor)<= 1.3.06.5medium03 Nov 2026

CVE-2026-121561Summary: Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-sid…6.3medium03 Nov 2026

CVE-2026-121557Summary: WPPConnect Server through 2.10.74 contains a missing authentication vulnerabilit…8.2high03 Nov 2026

CVE-2026-121553Summary: Cotonti through 1.0.0 generates registration and email-change validation tokens…6.3medium03 Nov 2026