High-severity CVEs (page 14)
Page 14 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-109193 | High | 7.2 | 2026-10-16 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user at… |
CVE-2026-107768 | High | 7.2 | 2026-10-16 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' param… |
CVE-2026-104715 | High | 7.8 | 2026-10-16 | A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet… |
CVE-2026-96570 | High | 7.2 | 2026-10-16 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versio… |
CVE-2026-95809 | High | 7.2 | 2026-10-16 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cros… |
CVE-2026-95686 | High | 7.2 | 2026-10-16 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cros… |
CVE-2026-89051 | High | 7.2 | 2026-10-16 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' functio… |
CVE-2026-85659 | High | 8.8 | 2026-10-16 | The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability… |
CVE-2026-111122 | High | 7.2 | 2026-10-16 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and including, 1… |
CVE-2026-109513 | High | 7.2 | 2026-10-16 | The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for Word… |
CVE-2026-109447 | High | 8.1 | 2026-10-16 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in al… |
CVE-2026-109232 | High | 7.2 | 2026-10-16 | The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln[<c… |
CVE-2026-107764 | High | 7.2 | 2026-10-16 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all versions up… |
CVE-2026-104932 | High | 8.0 | 2026-10-16 | The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function… |
CVE-2026-104000 | High | 7.2 | 2026-10-16 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and includ… |
CVE-2026-103999 | High | 7.2 | 2026-10-16 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and including, 3.5… |
CVE-2026-103896 | High | 7.5 | 2026-10-16 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in v… |
CVE-2026-100186 | High | 7.2 | 2026-10-16 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… |
CVE-2026-111114 | High | 7.5 | 2026-10-16 | The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, an… |
CVE-2026-110590 | High | 7.5 | 2026-10-16 | The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin no… |
CVE-2026-109998 | High | 7.2 | 2026-10-16 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to… |
CVE-2026-109400 | High | 7.5 | 2026-10-16 | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 T… |
CVE-2026-109221 | High | 8.1 | 2026-10-16 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat… |
CVE-2026-107746 | High | 7.5 | 2026-10-16 | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.16.0… |
CVE-2026-107659 | High | 7.5 | 2026-10-16 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including… |
CVE-2026-103895 | High | 8.1 | 2026-10-16 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5… |
CVE-2026-103525 | High | 7.5 | 2026-10-16 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… |
CVE-2026-97339 | High | 7.2 | 2026-10-16 | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker… |
CVE-2026-93953 | High | 8.0 | 2026-10-16 | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restor… |
CVE-2026-111451 | High | 7.8 | 2026-10-16 | Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can exec… |
CVE-2026-111447 | High | 8.1 | 2026-10-16 | Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to… |
CVE-2026-111446 | High | 8.6 | 2026-10-16 | Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in de… |
CVE-2026-111445 | High | 8.1 | 2026-10-16 | Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), prod… |
CVE-2026-109990 | High | 7.2 | 2026-10-16 | The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' pa… |
CVE-2026-109207 | High | 7.2 | 2026-10-16 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Script… |
CVE-2026-107758 | High | 7.2 | 2026-10-16 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1… |
CVE-2026-104745 | High | 8.1 | 2026-10-16 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versio… |
CVE-2026-111389 | High | 7.7 | 2026-10-16 | Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input… |
CVE-2026-111382 | High | 8.8 | 2026-10-16 | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious… |
CVE-2026-111381 | High | 7.3 | 2026-10-16 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via in… |
CVE-2026-111380 | High | 8.8 | 2026-10-16 | FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer siz… |
CVE-2026-111379 | High | 7.3 | 2026-10-16 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplyin… |
CVE-2026-111378 | High | 7.5 | 2026-10-16 | FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exh… |
CVE-2026-92629 | High | 7.3 | 2026-10-16 | A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a lo… |
CVE-2026-84823 | High | 7.1 | 2026-10-16 | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal v… |
CVE-2026-75941 | High | 8.0 | 2026-10-16 | A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on th… |
CVE-2026-111210 | High | 7.3 | 2026-10-16 | A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Req… |
CVE-2026-111369 | High | 7.1 | 2026-10-15 | ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, inclu… |
CVE-2026-111366 | High | 7.2 | 2026-10-15 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments… |
CVE-2026-111359 | High | 7.1 | 2026-10-15 | CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users'… |
CVE-2026-111356 | High | 7.4 | 2026-10-15 | MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accou… |
CVE-2026-111352 | High | 8.8 | 2026-10-15 | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every… |
CVE-2026-111312 | High | 7.7 | 2026-10-15 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that que… |
CVE-2026-111282 | High | 8.2 | 2026-10-15 | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path l… |
CVE-2026-111280 | High | 7.4 | 2026-10-15 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers… |
CVE-2026-111279 | High | 7.5 | 2026-10-15 | Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT… |
CVE-2026-111277 | High | 7.5 | 2026-10-15 | NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrie… |
CVE-2026-110922 | High | 8.8 | 2026-10-15 | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p… |
CVE-2026-110921 | High | 8.8 | 2026-10-15 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-110920 | High | 8.8 | 2026-10-15 | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110919 | High | 8.8 | 2026-10-15 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-110915 | High | 8.8 | 2026-10-15 | Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-110914 | High | 8.8 | 2026-10-15 | Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a c… |
CVE-2026-110913 | High | 8.8 | 2026-10-15 | Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-111357 | High | 7.0 | 2026-10-15 | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root… |
CVE-2026-109468 | High | 7.5 | 2026-10-15 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-108452 | High | 8.8 | 2026-10-15 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove… |
CVE-2026-108451 | High | 8.8 | 2026-10-15 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108450 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108449 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108448 | High | 7.5 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-108447 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108446 | High | 8.8 | 2026-10-15 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-108445 | High | 8.8 | 2026-10-15 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108444 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-108443 | High | 8.8 | 2026-10-15 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108442 | High | 8.8 | 2026-10-15 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108441 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108440 | High | 8.8 | 2026-10-15 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108439 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108437 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108433 | High | 7.8 | 2026-10-15 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-108432 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108431 | High | 8.8 | 2026-10-15 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108430 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108429 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108428 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108427 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108426 | High | 8.8 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-105040 | High | 8.8 | 2026-10-15 | The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another acc… |
CVE-2026-105036 | High | 7.5 | 2026-10-15 | EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updat… |
CVE-2026-105035 | High | 7.8 | 2026-10-15 | The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations. An attacker who rec… |
CVE-2026-105034 | High | 8.2 | 2026-10-15 | The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker ca… |
CVE-2026-105033 | High | 8.8 | 2026-10-15 | The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log i… |
CVE-2026-106708 | High | 8.8 | 2026-10-15 | XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController). The endpoi… |
CVE-2026-106700 | High | 8.8 | 2026-10-15 | ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.syste… |
CVE-2026-97370 | High | 7.5 | 2026-10-15 | Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly exe… |
CVE-2026-87018 | High | 7.5 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when… |
CVE-2026-55872 | High | 8.7 | 2026-10-15 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php render… |
CVE-2026-55587 | High | 8.1 | 2026-10-15 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind p… |