CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2026-116854 | 中危6.5 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. | 30/10/2026 |
| CVE-2026-116853 | 中危6.5 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. | 30/10/2026 |
| CVE-2026-116852 | 严重9.1 | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. | 30/10/2026 |
| CVE-2026-116851 | 高危7.1 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. | 30/10/2026 |
| CVE-2026-116847 | 高危7.1 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. | 30/10/2026 |
| CVE-2026-116410 | 中危6.5 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. | 30/10/2026 |
| CVE-2026-116405 | 高危7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. | 30/10/2026 |
| CVE-2026-116401 | 高危7.5 | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-116386 | 严重9.8 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | 30/10/2026 |
| CVE-2026-115947 | 中危6.5 | Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-115604 | 中危5.0 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. | 30/10/2026 |
| CVE-2026-114711 | 中危6.5 | Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. | 30/10/2026 |
| CVE-2026-107868 | 中危5.3 | Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. | 30/10/2026 |
| CVE-2026-105077 | 高危7.1 | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. | 30/10/2026 |
| CVE-2026-104674 | 中危4.3 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31. | 30/10/2026 |