All CVEs — page 333 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

HIGH 8.6CVE-2026-105115public exploit available2026-10-03
This vulnerability allows unauthenticated attackers to execute arbitrary code via the legacy JAX-RPC SOAP interface, potentially leading to server crashes or code execution.
MEDIUM 6.1CVE-2026-105114public exploit available2026-10-03
MEDIUM 6.5CVE-2026-105113public exploit available2026-10-03
MEDIUM 5.3CVE-2026-105112public exploit available2026-10-03
CRITICAL 9.8CVE-2026-105105public exploit available2026-10-03
The flaw allows unauthenticated remote attackers to inject commands and exfiltrate telemetry data, posing a significant security risk.
MEDIUM 6.3CVE-2026-104983public exploit available2026-10-03
UNSCOREDCVE-2026-97873public exploit available2026-10-03
UNSCOREDCVE-2026-85515public exploit available2026-10-03
UNSCOREDCVE-2026-71892public exploit available2026-10-03
UNSCOREDCVE-2026-71891public exploit available2026-10-03
UNSCOREDCVE-2026-71890public exploit available2026-10-03
UNSCOREDCVE-2026-71889public exploit available2026-10-03
UNSCOREDCVE-2026-71888public exploit available2026-10-03
UNSCOREDCVE-2026-71887public exploit available2026-10-03
UNSCOREDCVE-2026-71886public exploit available2026-10-03
UNSCOREDCVE-2026-71885public exploit available2026-10-03
UNSCOREDCVE-2026-71883public exploit available2026-10-03
UNSCOREDCVE-2026-18040public exploit available2026-10-03
MEDIUM 6.4CVE-2026-927672026-10-03
CRITICAL 9.1CVE-2026-920842026-10-03
The flaw allows unauthenticated attackers to execute arbitrary shortcodes, leading to potential remote code execution.
MEDIUM 4.3CVE-2026-104982public exploit available2026-10-03
HIGH 7.2CVE-2026-976602026-10-03
MEDIUM 4.3CVE-2026-97343public exploit available2026-10-03
HIGH 7.5CVE-2026-962672026-10-03
The WP Visitor Statistics plugin contains a second-order SQL injection vulnerability in the 'fullRef' parameter that allows unauthenticated attackers to inject malicious SQL queries through persistent referrer data, potentially enabling data extraction from the WordPress database.
HIGH 8.1CVE-2026-945052026-10-03
The flaw allows authenticated attackers with contributor-level access or higher to delete any reusable social message, including those authored by administrators, due to improper authorization checks.