CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 22:10 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88090 New | ME Microsoft Edge (Chromium-based) Microsoft | 5.4 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-20942 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-18894 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-77817 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-77819 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-90991 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-102590 New | LO Langflow OSS IBM | 5.0 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104308 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104309 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104310 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104314 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104315 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104316 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-113576 New | AD Adobe Digital Editions Adobe | 6.3 | Oct 29 | Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-104331 New | LO Langflow OSS IBM | 5.4 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110190 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110192 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110200 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-106036 New | SZ Szafir Krajowa Izba Rozliczeniowa | 6.9 | Oct 29 | Improper certificate validation in Szafir |
| CVE-2026-42694 New | KI Kirki Themeum | 4.3 | Oct 29 | WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability |
| CVE-2026-48200 New | DL Document Library Lite Barn2 Plugins | 5.3 | Oct 29 | WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-116848 New | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH Innovations | 6.5 | Oct 29 | WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-109891 New | HA Happy Addons for Elementor weDevs | 6.4 | Oct 29 | WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability |
| CVE-2026-25448 New | WE WP ERP weDevs | 4.3 | Oct 29 | WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability |
| CVE-2026-42691 New | EV EventPrime EventPrime | 5.4 | Oct 29 | WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability |
| CVE-2026-54852 New | PR Page Restriction WordPress (WP) miniOrange | 5.3 | Oct 29 | WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability |
| CVE-2026-97073 New | MY myCred myCred | 5.3 | Oct 29 | WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability |
| CVE-2026-118097 New | FH Flash & HTML5 Video bPlugins | 6.5 | Oct 29 | WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27062 New | WP WPFunnels WPFunnels Team | 4.3 | Oct 29 | WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-54853 New | PB Profile Builder Cozmoslabs | 5.3 | Oct 29 | WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability |
| CVE-2026-114706 New | ST Strong Testimonials WP Chill | 6.5 | Oct 29 | WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27063 New | KF Kit (formerly ConvertKit) Kit | 5.3 | Oct 29 | WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability |
| CVE-2026-115601 New | CP Custom Price for WooCommerce WP Desk | 5.3 | Oct 29 | WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerability |
| CVE-2026-115605 New | SU SureDash Brainstorm Force | 4.3 | Oct 29 | WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability |
| CVE-2026-118095 New | ML Media LIbrary Assistant David Lingren | 6.5 | Oct 29 | WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54871 New | SE ShopBuilder – Elementor WooCommerce Builder Addons Mamunur Rashid | 5.3 | Oct 29 | WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability |
| CVE-2026-25450 New | UR User Registration ThemeGrill | 5.3 | Oct 29 | WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability |
| CVE-2026-116850 New | HA Happy Addons for Elementor weDevs | 6.5 | Oct 29 | WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-114181 New | TB Taxi Booking Manager for WooCommerce Magepeople inc. | 5.3 | Oct 29 | WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability |
| CVE-2026-118088 New | WP WPFunnels WPFunnels Team | 5.3 | Oct 29 | WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability |
| CVE-2026-116849 New | ST StreamCast bPlugins | 6.5 | Oct 29 | WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-110881 New | SU SureDash Brainstorm Force | 6.5 | Oct 29 | WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-116856 New | FQ Flexible Quantity – Measurement Price Calculator for WooCommerce WP Desk | 5.3 | Oct 29 | WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability |
| CVE-2026-39737 New | JF JetElements For Elementor Crocoblock | 6.5 | Oct 29 | WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-118091 New | WP WPFunnels WPFunnels Team | 5.3 | Oct 29 | WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability |
| CVE-2026-116387 New | SU SureForms Brainstorm Force | 5.3 | Oct 29 | WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability |
| CVE-2026-39742 New | GB Gutenberg Blocks by Kadence Blocks Liquid Web / StellarWP | 6.5 | Oct 29 | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115610 New | PA PublishPress Authors PublishPress | 6.5 | Oct 29 | WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-118092 New | ML MasterStudy LMS StylemixThemes | 4.3 | Oct 29 | WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability |
| CVE-2026-116406 New | WB Webba Booking Webba Plugins | 4.3 | Oct 29 | WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability |