October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,401
High
6,159
Medium
6,457
Low
659
Severity not reported
2,805
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (403), apple (322), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-110508 The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-103313 The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-103330 The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-92665 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-86388 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
medium | 5.3 | — | — | 2026-10-28 | 2026-11-04 |
| CVE-2026-86390 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
medium | 6.5 | — | — | 2026-10-28 | 2026-11-02 |
| CVE-2026-86391 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-86392 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
medium | 4.9 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-86383 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
medium | 6.8 | — | — | 2026-10-28 | 2026-11-03 |
| CVE-2026-86386 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.... |
medium | 4.3 | — | — | 2026-10-28 | 2026-11-02 |
| CVE-2026-105457 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v... |
medium | 6.5 | — | — | 2026-10-28 | 2026-11-05 |
| CVE-2026-90720 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
medium | 6.7 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-16020 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 5.4 | — | — | 2026-10-28 | 2026-11-05 |
| CVE-2026-85655 The Enable Media Replace plugin for WordPress is vulnerable to authorization byp... |
medium | 4.3 | — | — | 2026-10-28 | 2026-11-04 |
| CVE-2026-101935 The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for Wo... |
medium | 6.1 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-118435 Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer... |
medium | 5.4 | — | — | 2026-10-28 | 2026-11-05 |
| CVE-2026-76780 The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versi... |
medium | 6.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-77188 The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vuln... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-77871 The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPre... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-92098 The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vul... |
medium | 6.1 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-118164 The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-118169 The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPre... |
medium | 4.9 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-2839 The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unaut... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-76005 The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL In... |
medium | 6.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-76058 The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authori... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-111372 The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to a... |
medium | 4.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116609 The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable... |
medium | 6.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116610 The Clean Login plugin for WordPress is vulnerable to Missing Authorization in v... |
medium | 4.3 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-116749 The VikRentCar Car Rental Management System plugin for WordPress is vulnerable t... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116750 The VikRentCar Car Rental Management System plugin for WordPress is vulnerable t... |
medium | 6.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116761 The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... |
medium | 5.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-110071 The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-110185 The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Goo... |
medium | 5.9 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-111068 The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
medium | 4.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-111213 The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPres... |
medium | 4.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-109972 The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywa... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-109975 The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks,... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-109978 The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks,... |
medium | 6.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-109979 The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive... |
medium | 4.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-109980 The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive... |
medium | 4.3 | — | — | 2026-10-28 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.