October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,304
Critical
3,140
High
7,177
Medium
6,986
Low
625
Severity not reported
4,376
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-94378 The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin... |
medium | 6.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-94539 The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin... |
medium | 6.5 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-95865 The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordP... |
medium | 6.5 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-92538 The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-92551 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-92727 The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos,... |
medium | 6.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-92826 The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-S... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-100148 The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Store... |
medium | 6.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-100149 The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin... |
medium | 5.3 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-100152 The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema,... |
medium | 6.5 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-101357 The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to... |
medium | 4.9 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-103888 The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to R... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-103909 The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Q... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-11399 The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulne... |
medium | 4.3 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-91108 The Alt Text AI – Automatically generate image alt text for SEO and accessibilit... |
medium | 4.3 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-97344 The Wp Social Login and Register Social Counter plugin for WordPress is vulnerab... |
medium | 6.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-100157 The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary short... |
medium | 6.5 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-103421 The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerabl... |
medium | 5.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-103519 The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary short... |
medium | 5.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-104313 The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerab... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-11601 The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin... |
medium | 5.3 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-15795 The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress i... |
medium | 6.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-92974 The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-93896 The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cro... |
medium | 6.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-97343 The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative)... |
medium | 4.3 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-92767 The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cro... |
medium | 6.4 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-104983 A vulnerability has been found in Linux Mint Xreader up to 4.6.9. |
medium | 6.3 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-105096 A vulnerability was determined in Omega Solution CoinEx Crypto 2025. |
medium | 6.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105097 A vulnerability was identified in Omega Solution CoinEx Crypto 2025. |
medium | 4.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105137 A vulnerability was found in Laradock up to 20.4. |
medium | 5.0 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105141 A security flaw has been discovered in topoteretes cognee up to 1.5.4. |
medium | 6.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105144 A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105146 A vulnerability was found in Comsenz Discuz! |
medium | 4.7 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105157 A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. |
medium | 4.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105163 A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105165 A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. |
medium | 6.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105168 A vulnerability was identified in kishor-23 food-waste-management-system 411989e... |
medium | 6.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105171 A security vulnerability has been detected in kishor-23 food-waste-management-sy... |
medium | 6.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105176 A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. |
medium | 4.7 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105177 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. |
medium | 4.7 | — | — | 2026-10-05 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.