High-severity CVEs (page 44)
Page 44 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-32569 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions. |
CVE-2026-25434 | High | 8.5 | 2026-10-06 | Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions. |
CVE-2026-25433 | High | 7.1 | 2026-10-06 | Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions. |
CVE-2026-105317 | High | 8.5 | 2026-10-06 | Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions. |
CVE-2026-105071 | High | 7.5 | 2026-10-06 | Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions. |
CVE-2026-105070 | High | 8.8 | 2026-10-06 | Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions. |
CVE-2026-105061 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions. |
CVE-2026-105058 | High | 8.8 | 2026-10-06 | Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions. |
CVE-2026-104814 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions. |
CVE-2026-104757 | High | 7.2 | 2026-10-06 | Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions. |
CVE-2026-104747 | High | 8.1 | 2026-10-06 | Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. |
CVE-2026-104672 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions. |
CVE-2026-104670 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions. |
CVE-2026-104406 | High | 7.3 | 2026-10-06 | Unauthenticated Broken Access Control in picu <= 3.10.1 versions. |
CVE-2026-104405 | High | 8.1 | 2026-10-06 | Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions. |
CVE-2026-104395 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions. |
CVE-2026-104394 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions. |
CVE-2026-104387 | High | 7.2 | 2026-10-06 | Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions. |
CVE-2026-104385 | High | 7.5 | 2026-10-06 | Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions. |
CVE-2026-103346 | High | 7.1 | 2026-10-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway… |
CVE-2026-102915 | High | 8.5 | 2026-10-06 | Subscriber Broken Access Control in WPO365 <= 44.1 versions. |
CVE-2026-102387 | High | 7.5 | 2026-10-06 | Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions. |
CVE-2026-105807 | High | 7.3 | 2026-10-06 | A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manip… |
CVE-2026-57559 | High | 7.8 | 2026-10-06 | Memory corruption while processing service requests. |
CVE-2026-57555 | High | 7.8 | 2026-10-06 | Memory Corruption when executing system service routines due to improper handling of user input buffers. |
CVE-2026-57554 | High | 7.8 | 2026-10-06 | Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. |
CVE-2026-57546 | High | 7.5 | 2026-10-06 | Transient DOS when processing a continuous receive command with a zero-sized global configuration override. |
CVE-2026-57545 | High | 7.8 | 2026-10-06 | Memory corruption when processing draw objects of incorrect type during graphics command list execution. |
CVE-2026-57537 | High | 7.8 | 2026-10-06 | Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. |
CVE-2026-25302 | High | 7.1 | 2026-10-06 | Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted a… |
CVE-2026-25291 | High | 7.8 | 2026-10-06 | Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. |
CVE-2026-25267 | High | 7.8 | 2026-10-06 | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
CVE-2026-105776 | High | 7.3 | 2026-10-06 | A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this… |
CVE-2026-105701 | High | 8.8 | 2026-10-06 | The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is du… |
CVE-2026-75962 | High | 7.2 | 2026-10-06 | The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored… |
CVE-2026-41563 | High | 7.5 | 2026-10-06 | Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions. |
CVE-2026-41558 | High | 7.5 | 2026-10-06 | Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions. |
CVE-2026-39789 | High | 7.5 | 2026-10-06 | Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions. |
CVE-2026-39760 | High | 7.1 | 2026-10-06 | Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions. |
CVE-2026-39723 | High | 7.5 | 2026-10-06 | Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2026-105072 | High | 7.5 | 2026-10-06 | Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions. |
CVE-2026-105704 | High | 7.3 | 2026-10-06 | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulatio… |
CVE-2026-105571 | High | 7.3 | 2026-10-06 | A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the compon… |
CVE-2026-105486 | High | 7.3 | 2026-10-06 | A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API… |
CVE-2026-82988 | High | 7.5 | 2026-10-06 | There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unp… |
CVE-2026-105783 | High | 8.0 | 2026-10-06 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with… |
CVE-2026-105782 | High | 7.5 | 2026-10-06 | Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treate… |
CVE-2026-105762 | High | 8.3 | 2026-10-06 | Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py acce… |
CVE-2026-105471 | High | 7.3 | 2026-10-06 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown fun… |
CVE-2026-105761 | High | 7.1 | 2026-10-05 | Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/m… |
CVE-2026-105470 | High | 7.3 | 2026-10-05 | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function… |
CVE-2026-105469 | High | 7.3 | 2026-10-05 | A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unkn… |
CVE-2026-21589 | High | 7.5 | 2026-10-05 | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. C… |
CVE-2026-105751 | High | 7.5 | 2026-10-05 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docl… |
CVE-2026-105744 | High | 7.5 | 2026-10-05 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, calle… |
CVE-2026-105468 | High | 7.3 | 2026-10-05 | A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli_que… |
CVE-2026-77226 | High | 8.1 | 2026-10-05 | Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource in… |
CVE-2026-105773 | High | 7.0 | 2026-10-05 | Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and… |
CVE-2026-105741 | High | 7.1 | 2026-10-05 | Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Proto… |
CVE-2026-102262 | High | 7.3 | 2026-10-05 | Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside ma… |
CVE-2026-97257 | High | 8.8 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Even… |
CVE-2026-95265 | High | 7.5 | 2026-10-05 | Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopba… |
CVE-2026-95263 | High | 7.2 | 2026-10-05 | Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password o… |
CVE-2026-93617 | High | 7.2 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Phot… |
CVE-2026-78861 | High | 7.7 | 2026-10-05 | An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key |
CVE-2026-78860 | High | 7.8 | 2026-10-05 | An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext |
CVE-2026-105679 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from… |
CVE-2026-105677 | High | 7.2 | 2026-10-05 | Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Adm… |
CVE-2026-105675 | High | 7.5 | 2026-10-05 | Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret toke… |
CVE-2026-105651 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an extern… |
CVE-2026-105650 | High | 8.1 | 2026-10-05 | Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts be… |
CVE-2026-105649 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored… |
CVE-2026-105392 | High | 7.3 | 2026-10-05 | A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.p… |
CVE-2026-103348 | High | 7.2 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in Smackcoders Inc. WP Ultimate Exporter wp-ultimate-exporter allows Object Injection.This issue affects WP Ult… |
CVE-2026-103066 | High | 8.5 | 2026-10-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-s… |
CVE-2026-100511 | High | 8.8 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection.This issue a… |
CVE-2026-100506 | High | 7.2 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from… |
CVE-2026-97303 | High | 7.6 | 2026-10-05 | Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly… |
CVE-2026-58880 | High | 7.0 | 2026-10-05 | In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of pri… |
CVE-2026-58865 | High | 7.5 | 2026-10-05 | In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of se… |
CVE-2026-58859 | High | 7.8 | 2026-10-05 | In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional ex… |
CVE-2026-58854 | High | 7.8 | 2026-10-05 | In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional executi… |
CVE-2026-58841 | High | 7.8 | 2026-10-05 | In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local esca… |
CVE-2026-58835 | High | 8.8 | 2026-10-05 | In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additio… |
CVE-2026-58815 | High | 7.8 | 2026-10-05 | In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no addit… |
CVE-2026-55286 | High | 7.8 | 2026-10-05 | In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privileg… |
CVE-2026-55280 | High | 8.8 | 2026-10-05 | In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional… |
CVE-2026-55270 | High | 7.8 | 2026-10-05 | In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no… |
CVE-2026-55269 | High | 7.8 | 2026-10-05 | In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of pr… |
CVE-2026-55266 | High | 7.8 | 2026-10-05 | In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with… |
CVE-2026-49937 | High | 7.8 | 2026-10-05 | In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of pr… |
CVE-2026-49933 | High | 7.8 | 2026-10-05 | In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer deref… |
CVE-2026-49885 | High | 7.8 | 2026-10-05 | In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2026-49880 | High | 7.8 | 2026-10-05 | In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2026-49878 | High | 7.2 | 2026-10-05 | In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote co… |
CVE-2026-45524 | High | 8.8 | 2026-10-05 | In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege… |
CVE-2026-28648 | High | 7.8 | 2026-10-05 | In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2026-28647 | High | 7.8 | 2026-10-05 | In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local es… |
CVE-2026-28641 | High | 7.8 | 2026-10-05 | In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. T… |
CVE-2026-28640 | High | 7.8 | 2026-10-05 | In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This co… |