High-severity CVEs (page 36)
Page 36 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-42712 | High | 8.5 | 2026-10-10 | Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions. |
CVE-2026-42711 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions. |
CVE-2026-42709 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions. |
CVE-2026-42706 | High | 7.5 | 2026-10-10 | Unauthenticated Broken Access Control in DK <= 3.2.1 versions. |
CVE-2026-42705 | High | 7.5 | 2026-10-10 | Unauthenticated Broken Access Control in Grand News <= 3.4 versions. |
CVE-2026-42704 | High | 8.1 | 2026-10-10 | Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions. |
CVE-2026-42702 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue a… |
CVE-2026-42699 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions. |
CVE-2026-42697 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate… |
CVE-2026-42693 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions. |
CVE-2026-42633 | High | 8.5 | 2026-10-10 | Subscriber SQL Injection in Events Manager <= 7.4.6 versions. |
CVE-2026-42632 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions. |
CVE-2026-42631 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions. |
CVE-2026-42630 | High | 7.5 | 2026-10-10 | Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions. |
CVE-2026-40805 | High | 7.7 | 2026-10-10 | Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions. |
CVE-2026-40803 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions. |
CVE-2026-40802 | High | 7.6 | 2026-10-10 | Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions. |
CVE-2026-40801 | High | 8.1 | 2026-10-10 | Subscriber Broken Access Control in Wordable <= 8.2.10 versions. |
CVE-2026-40777 | High | 8.1 | 2026-10-10 | Subscriber Broken Access Control in WPSection <= 1.5.1 versions. |
CVE-2026-39802 | High | 8.1 | 2026-10-10 | Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions. |
CVE-2026-39800 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions. |
CVE-2026-39799 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions. |
CVE-2026-27350 | High | 7.2 | 2026-10-10 | Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 throu… |
CVE-2026-96341 | High | 8.2 | 2026-10-10 | Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57… |
CVE-2026-57806 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme… |
CVE-2026-94160 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-… |
CVE-2026-62044 | High | 7.2 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player… |
CVE-2026-106609 | High | 7.5 | 2026-10-10 | Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2026-106608 | High | 7.2 | 2026-10-10 | Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 throu… |
CVE-2026-103071 | High | 7.5 | 2026-10-10 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer a… |
CVE-2026-108553 | High | 7.5 | 2026-10-10 | OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expr… |
CVE-2026-108550 | High | 8.8 | 2026-10-10 | SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers… |
CVE-2026-108549 | High | 8.1 | 2026-10-10 | cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthent… |
CVE-2026-108548 | High | 7.3 | 2026-10-10 | AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without valid… |
CVE-2026-108546 | High | 7.5 | 2026-10-10 | Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishi… |
CVE-2026-97264 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.T… |
CVE-2026-97263 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This… |
CVE-2026-94676 | High | 7.2 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1… |
CVE-2026-108161 | High | 7.5 | 2026-10-10 | FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands… |
CVE-2026-105885 | High | 8.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through… |
CVE-2026-102388 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This iss… |
CVE-2026-107794 | High | 7.5 | 2026-10-10 | ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an e… |
CVE-2013-10076 | High | 7.5 | 2026-10-10 | ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an… |
CVE-2026-103636 | High | 7.5 | 2026-10-10 | Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte prea… |
CVE-2026-91136 | High | 7.5 | 2026-10-10 | The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/e… |
CVE-2026-107657 | High | 7.2 | 2026-10-10 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user at… |
CVE-2026-96765 | High | 7.2 | 2026-10-10 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' p… |
CVE-2026-96662 | High | 7.5 | 2026-10-10 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[servi… |
CVE-2026-96278 | High | 7.2 | 2026-10-10 | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including… |
CVE-2026-93951 | High | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Zeinet zeinet allows Reflected XSS.This issue… |
CVE-2026-93950 | High | 7.5 | 2026-10-10 | Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-93949 | High | 7.1 | 2026-10-10 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Ex… |
CVE-2026-93746 | High | 7.5 | 2026-10-10 | The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference… |
CVE-2026-106606 | High | 7.2 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH… |
CVE-2026-104759 | High | 8.1 | 2026-10-10 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in a… |
CVE-2026-101920 | High | 7.2 | 2026-10-10 | The Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting vi… |
CVE-2026-100178 | High | 7.2 | 2026-10-10 | The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'adverts_location' parameter in all versions up to… |
CVE-2026-100147 | High | 7.2 | 2026-10-10 | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shipping_first_name' paramet… |
CVE-2026-96840 | High | 7.2 | 2026-10-10 | The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name User Field in all versions up to, and… |
CVE-2026-96572 | High | 7.2 | 2026-10-10 | The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to… |
CVE-2026-96558 | High | 7.2 | 2026-10-10 | The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_qu… |
CVE-2026-95684 | High | 7.2 | 2026-10-10 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'attachments[name]' Parameter in all versions u… |
CVE-2026-94538 | High | 8.1 | 2026-10-10 | The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not prop… |
CVE-2026-12626 | High | 7.2 | 2026-10-10 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… |
CVE-2026-107742 | High | 7.2 | 2026-10-10 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author'… |
CVE-2026-100196 | High | 7.2 | 2026-10-10 | The LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment_content (rendere… |
CVE-2026-100161 | High | 7.2 | 2026-10-10 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all v… |
CVE-2026-96682 | High | 7.2 | 2026-10-10 | The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via <presto-player> Tag in all versions up to, and incl… |
CVE-2026-96667 | High | 7.2 | 2026-10-10 | The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' paramete… |
CVE-2026-94257 | High | 8.1 | 2026-10-10 | The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during it… |
CVE-2026-94256 | High | 8.1 | 2026-10-10 | The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified one-time code belongs to, allowing unauth… |
CVE-2026-93775 | High | 7.2 | 2026-10-10 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5… |
CVE-2026-92975 | High | 8.1 | 2026-10-10 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4… |
CVE-2026-87781 | High | 8.6 | 2026-10-10 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection… |
CVE-2026-87780 | High | 8.8 | 2026-10-10 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them an… |
CVE-2026-83526 | High | 8.8 | 2026-10-10 | The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This i… |
CVE-2026-77183 | High | 8.8 | 2026-10-10 | The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and i… |
CVE-2026-14335 | High | 7.2 | 2026-10-10 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PayPal IPN Pa… |
CVE-2026-104899 | High | 8.1 | 2026-10-10 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up… |
CVE-2026-104766 | High | 8.8 | 2026-10-10 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up… |
CVE-2026-104752 | High | 7.2 | 2026-10-10 | The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users… |
CVE-2026-104725 | High | 8.8 | 2026-10-10 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4… |
CVE-2026-104723 | High | 8.8 | 2026-10-10 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… |
CVE-2026-89301 | High | 7.5 | 2026-10-10 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the p… |
CVE-2026-104021 | High | 7.2 | 2026-10-10 | The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[cache_coo… |
CVE-2026-104797 | High | 8.1 | 2026-10-10 | The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all ve… |
CVE-2026-92705 | High | 7.8 | 2026-10-09 | Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` me… |
CVE-2026-62376 | High | 8.1 | 2026-10-09 | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens i… |
CVE-2026-57458 | High | 8.1 | 2026-10-09 | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can call `POST… |
CVE-2026-108260 | High | 7.6 | 2026-10-09 | Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich… |
CVE-2026-108259 | High | 8.2 | 2026-10-09 | Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorpor… |
CVE-2026-75353 | High | 7.5 | 2026-10-09 | OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to… |
CVE-2026-75352 | High | 7.5 | 2026-10-09 | OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to c… |
CVE-2026-75351 | High | 7.5 | 2026-10-09 | OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to… |
CVE-2026-75350 | High | 7.5 | 2026-10-09 | EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List se… |
CVE-2026-107840 | High | 7.5 | 2026-10-09 | yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses… |
CVE-2026-107839 | High | 7.5 | 2026-10-09 | ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1… |
CVE-2026-107838 | High | 7.5 | 2026-10-09 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through versio… |
CVE-2026-107837 | High | 8.2 | 2026-10-09 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, _receive()… |
CVE-2026-107826 | High | 7.5 | 2026-10-09 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, readJSON in internal/bodyprocessors/json.go can s… |