CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/10/2026 |
| CVE-2026-119117 | MEDIUM6.5 | Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versions of the library pass | 30/10/2026 |
| CVE-2026-118090 | HIGH8.8 | Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. | 30/10/2026 |
| CVE-2026-118089 | HIGH7.2 | Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. | 30/10/2026 |
| CVE-2026-118086 | HIGH8.8 | Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. | 30/10/2026 |
| CVE-2026-116862 | HIGH7.5 | Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. | 30/10/2026 |
| CVE-2026-116861 | HIGH7.5 | Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. | 30/10/2026 |
| CVE-2026-116854 | MEDIUM6.5 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. | 30/10/2026 |
| CVE-2026-116853 | MEDIUM6.5 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. | 30/10/2026 |
| CVE-2026-116852 | CRITICAL9.1 | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. | 30/10/2026 |
| CVE-2026-116851 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. | 30/10/2026 |
| CVE-2026-116847 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. | 30/10/2026 |
| CVE-2026-116410 | MEDIUM6.5 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. | 30/10/2026 |
| CVE-2026-116405 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. | 30/10/2026 |
| CVE-2026-116401 | HIGH7.5 | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-116386 | CRITICAL9.8 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | 30/10/2026 |
| CVE-2026-115947 | MEDIUM6.5 | Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-115604 | MEDIUM5.0 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. | 30/10/2026 |