|
cve-2026-15015
|
Missing Authorization |
HIGH
|
N/A
|
2.65%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-13389
|
Missing Authorization |
MEDIUM
|
6.5
|
0.30%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-13369
|
ninjaforms ninja_forms_file_uploads Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
7.5
|
0.60%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-12497
|
properfraction profilepress Improper Privilege Management |
HIGH
|
N/A
|
0.39%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-12077
|
dokan dokan Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
7.5
|
0.46%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-118527
|
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-10-30 |
|
cve-2026-111357
|
CVE-2026-111357 |
HIGH
|
7.0
|
0.53%
|
cvelistv5 |
|
|
cve-2026-10818
|
wpforms wpforms Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
2.48%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-104935
|
CVE-2026-104935 |
HIGH
|
8.6
|
86.77%
|
cvelistv5 |
|
|
cve-2025-7721
|
beardev joomsport Improper Control of Filename for Include/Require Statement in PHP Program |
CRITICAL
|
9.8
|
0.66%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-7402
|
scripteo ads_pro Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
7.5
|
0.35%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-67911
|
Deserialization of Untrusted Data |
CRITICAL
|
9.8
|
0.46%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-5016
|
relevanssi relevanssi Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.23%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-49926
|
laborator kalium Improper Control of Generation of Code |
HIGH
|
7.2
|
0.27%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-49924
|
rymera wholesale_suite Incorrect Privilege Assignment |
HIGH
|
7.2
|
0.40%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-46444
|
scripteo ads_pro Improper Control of Filename for Include/Require Statement in PHP Program |
HIGH
|
N/A
|
0.82%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-26936
|
Improper Control of Generation of Code |
HIGH
|
N/A
|
0.49%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-1702
|
Ultimate Member ultimate_member Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
0.72%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-14842
|
CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous Type |
MEDIUM
|
6.1
|
0.37%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-14736
|
dynamiapps frontend_admin Improper Privilege Management |
HIGH
|
N/A
|
0.72%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-14169
|
FunnelKit funnel_builder Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
7.5
|
0.38%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-13880
|
Missing Authorization |
MEDIUM
|
6.5
|
0.25%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-13673
|
Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
0.53%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-13407
|
Unrestricted Upload of File with Dangerous Type |
MEDIUM
|
6.8
|
0.37%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-13206
|
GiveWP GiveWP Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.2
|
0.39%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-13067
|
royal-elementor-addons royal_elementor_addons Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
0.50%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-12197
|
StellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
7.5
|
18.24%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-11427
|
Server-Side Request Forgery |
MEDIUM
|
5.8
|
0.50%
|
cvelistv5 |
2026-10-13 |
|
cve-2025-10897
|
Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
8.6
|
1.95%
|
cvelistv5 |
2026-10-13 |
|
cve-2024-9893
|
Authentication Bypass Using an Alternate Path or Channel |
CRITICAL
|
9.8
|
0.66%
|
cvelistv5 |
2026-10-13 |
ndaal KEV