CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/10/2026 |
| CVE-2026-116854 | MOYENNE6.5 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. | 30/10/2026 |
| CVE-2026-116853 | MOYENNE6.5 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. | 30/10/2026 |
| CVE-2026-116852 | CRITIQUE9.1 | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. | 30/10/2026 |
| CVE-2026-116851 | ÉLEVÉE7.1 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. | 30/10/2026 |
| CVE-2026-116847 | ÉLEVÉE7.1 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. | 30/10/2026 |
| CVE-2026-116410 | MOYENNE6.5 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. | 30/10/2026 |
| CVE-2026-116405 | ÉLEVÉE7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. | 30/10/2026 |
| CVE-2026-116401 | ÉLEVÉE7.5 | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-116386 | CRITIQUE9.8 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | 30/10/2026 |
| CVE-2026-115947 | MOYENNE6.5 | Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-115604 | MOYENNE5.0 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. | 30/10/2026 |
| CVE-2026-114711 | MOYENNE6.5 | Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. | 30/10/2026 |
| CVE-2026-107868 | MOYENNE5.3 | Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. | 30/10/2026 |
| CVE-2026-105077 | ÉLEVÉE7.1 | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. | 30/10/2026 |
| CVE-2026-104674 | MOYENNE4.3 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31. | 30/10/2026 |