CVE Find is a real-time vulnerability database indexing 420 208 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3114 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-116624 |
2026-11-06 12h17 +00:00 |
The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versi... Improper Privilege Management |
8.8 |
High |
|
CVE-2026-114630 |
2026-11-06 12h17 +00:00 |
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitr... Directory Traversal |
9.1 |
Critical |
|
CVE-2026-107622 |
2026-11-06 12h17 +00:00 |
The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and... Improper Privilege Management |
9.8 |
Critical |
|
CVE-2026-123323 |
2026-11-06 11h17 +00:00 |
In JetBrains YouTrack before 2025.3.170763,
2026.1.14150,
2026.2.19656 improper URL validation in ... Authorization problems |
8.4 |
High |
|
CVE-2026-123301 |
2026-11-06 11h17 +00:00 |
In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possibl... Cross-site Scripting |
8.2 |
High |
|
CVE-2026-123294 |
2026-11-06 11h17 +00:00 |
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authenticat... |
9.6 |
Critical |
|
CVE-2026-123279 |
2026-11-06 11h17 +00:00 |
In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-... Authorization problems |
9 |
Critical |
|
CVE-2026-33379 |
2026-11-06 10h05 +00:00 |
A user with any role, including Viewer or a service account with no permissions, can create, externa... Authorization problems |
8.5 |
High |
|
CVE-2026-123087 |
2026-11-06 09h30 +00:00 |
SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JS... SQL Injection |
8.7 |
High |
|
CVE-2026-88800 |
2026-11-06 08h17 +00:00 |
The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 act on a role ... Authorization problems |
9.1 |
Critical |