Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 326–350 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-54853 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… | |
| CVE-2026-54852 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-52708 | MEDIUM | 4.3 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W… | |
| CVE-2026-48884 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W… | |
| CVE-2026-42691 | MEDIUM | 5.4 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-management allows Privilege Abuse.This issue affects Event… | |
| CVE-2026-39742 | MEDIUM | 6.5 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-bloc… | |
| CVE-2026-39737 | MEDIUM | 6.5 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.Th… | |
| CVE-2026-27063 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects K… | |
| CVE-2026-27062 | MEDIUM | 4.3 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery.This issue affects WPFunnels: from n/a through 3.13.5. | |
| CVE-2026-25450 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… | |
| CVE-2026-25448 | MEDIUM | 4.3 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through… | |
| CVE-2026-118097 | MEDIUM | 6.5 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows Stored XSS.This… | |
| CVE-2026-118095 | MEDIUM | 6.5 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows D… | |
| CVE-2026-118092 | MEDIUM | 4.3 | 2026-10-29 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Sec… | |
| CVE-2026-118091 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunne… | |
| CVE-2026-118088 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunne… | |
| CVE-2026-116856 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommer… | |
| CVE-2026-116850 | MEDIUM | 6.5 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored… | |
| CVE-2026-116849 | MEDIUM | 6.5 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCast streamcast allows Stored XSS.This issue affects St… | |
| CVE-2026-116846 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… | |
| CVE-2026-116406 | MEDIUM | 4.3 | 2026-10-29 | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… | |
| CVE-2026-116387 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureF… | |
| CVE-2026-115713 | HIGH | Patched | 7.5 | 2026-10-29 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other de… |
| CVE-2026-115712 | MEDIUM | Patched | 4.3 | 2026-10-29 | Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-level settings via Accessing Functionality Not Properl… |
| CVE-2026-115711 | MEDIUM | Patched | 6.4 | 2026-10-29 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to credential disclosure via Retrieve E… |