High-severity CVEs (page 46)
Page 46 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-97307 | High | 7.5 | 2026-10-04 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sens… |
CVE-2026-97276 | High | 7.1 | 2026-10-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected X… |
CVE-2026-103354 | High | 7.1 | 2026-10-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks… |
CVE-2026-103344 | High | 7.1 | 2026-10-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free… |
CVE-2026-103062 | High | 7.1 | 2026-10-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual all… |
CVE-2026-93549 | High | 8.8 | 2026-10-04 | The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce pr… |
CVE-2026-105133 | High | 7.3 | 2026-10-04 | A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the c… |
CVE-2026-88779 | High | 7.5 | 2026-10-04 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37… |
CVE-2026-105126 | High | 7.2 | 2026-10-04 | LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing o… |
CVE-2026-105123 | High | 8.8 | 2026-10-04 | W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing th… |
CVE-2026-96451 | High | 8.8 | 2026-10-03 | Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affect… |
CVE-2026-103342 | High | 7.1 | 2026-10-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free… |
CVE-2026-103065 | High | 8.2 | 2026-10-03 | Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This is… |
CVE-2026-105115 | High | 8.6 | 2026-10-03 | OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers… |
CVE-2026-97660 | High | 7.2 | 2026-10-03 | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name in all… |
CVE-2026-96267 | High | 7.5 | 2026-10-03 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, an… |
CVE-2026-94505 | High | 8.1 | 2026-10-03 | The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includ… |
CVE-2026-93889 | High | 7.2 | 2026-10-03 | The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message in all versio… |
CVE-2026-75028 | High | 7.5 | 2026-10-03 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and… |
CVE-2026-18443 | High | 8.8 | 2026-10-03 | The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'access_privilege… |
CVE-2026-97341 | High | 7.2 | 2026-10-03 | The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all version… |
CVE-2026-97337 | High | 7.5 | 2026-10-03 | The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and inclu… |
CVE-2026-96650 | High | 7.2 | 2026-10-03 | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platform_user_photo' Custom Field in all versions up to, and inc… |
CVE-2026-96575 | High | 7.2 | 2026-10-03 | The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Pr… |
CVE-2026-96564 | High | 7.2 | 2026-10-03 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author Display Name in all versions up to, and… |
CVE-2026-93430 | High | 7.2 | 2026-10-03 | The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all vers… |
CVE-2026-91078 | High | 8.2 | 2026-10-03 | The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS account it creates on activation to be chan… |
CVE-2026-89236 | High | 8.6 | 2026-10-03 | The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowi… |
CVE-2026-88783 | High | 8.8 | 2026-10-03 | The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is app… |
CVE-2026-87091 | High | 7.2 | 2026-10-03 | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and incl… |
CVE-2026-103913 | High | 7.5 | 2026-10-03 | The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and includin… |
CVE-2026-103514 | High | 7.5 | 2026-10-03 | The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's… |
CVE-2026-101928 | High | 7.2 | 2026-10-03 | The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and i… |
CVE-2026-101923 | High | 8.1 | 2026-10-03 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, and including, 1.2.30. This is due to the… |
CVE-2026-101161 | High | 7.5 | 2026-10-03 | The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fa… |
CVE-2026-101160 | High | 7.5 | 2026-10-03 | The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeri… |
CVE-2026-101159 | High | 7.5 | 2026-10-03 | The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available… |
CVE-2026-97644 | High | 8.8 | 2026-10-03 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all ve… |
CVE-2026-92977 | High | 7.2 | 2026-10-03 | The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and… |
CVE-2026-92536 | High | 8.8 | 2026-10-03 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to… |
CVE-2026-96270 | High | 7.2 | 2026-10-03 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored… |
CVE-2026-93428 | High | 7.5 | 2026-10-03 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to author… |
CVE-2026-104478 | High | 7.1 | 2026-10-03 | Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Att… |
CVE-2026-104433 | High | 7.5 | 2026-10-03 | Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated… |
CVE-2026-97363 | High | 7.5 | 2026-10-02 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacke… |
CVE-2026-97212 | High | 7.3 | 2026-10-02 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifi… |
CVE-2026-94593 | High | 7.8 | 2026-10-02 | Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the ho… |
CVE-2026-94592 | High | 8.4 | 2026-10-02 | Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generat… |
CVE-2026-94591 | High | 8.4 | 2026-10-02 | Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled… |
CVE-2026-82044 | High | 7.7 | 2026-10-02 | UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal… |
CVE-2026-82039 | High | 8.8 | 2026-10-02 | UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject arbit… |
CVE-2026-39718 | High | 8.8 | 2026-10-02 | Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a thro… |
CVE-2026-104991 | High | 7.1 | 2026-10-02 | Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments, single_comment… |
CVE-2026-104988 | High | 8.1 | 2026-10-02 | A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth… |
CVE-2026-96940 | High | 8.8 | 2026-10-02 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-103958 | High | 7.6 | 2026-10-02 | Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to ob… |
CVE-2020-37278 | High | 7.5 | 2026-10-02 | Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supp… |
CVE-2014-125130 | High | 7.5 | 2026-10-02 | CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability tha… |
CVE-2026-59265 | High | 8.8 | 2026-10-02 | A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (eve… |
CVE-2026-104861 | High | 7.5 | 2026-10-02 | probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/parse_stream/svg.js use the searching… |
CVE-2026-104851 | High | 8.8 | 2026-10-02 | fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceF… |
CVE-2026-67989 | High | 7.5 | 2026-10-02 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model ca… |
CVE-2026-51917 | High | 7.3 | 2026-10-02 | FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code. |
CVE-2026-51916 | High | 7.5 | 2026-10-02 | TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowledges.py. In affec… |
CVE-2026-51914 | High | 8.8 | 2026-10-02 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, save_agent_as_tem… |
CVE-2026-51907 | High | 8.1 | 2026-10-02 | In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitra… |
CVE-2026-51901 | High | 8.1 | 2026-10-02 | SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated use… |
CVE-2026-104845 | High | 7.5 | 2026-10-02 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSO… |
CVE-2026-103631 | High | 8.8 | 2026-10-02 | Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-103625 | High | 8.8 | 2026-10-02 | Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-103624 | High | 8.3 | 2026-10-02 | Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-103623 | High | 8.8 | 2026-10-02 | Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-103622 | High | 8.8 | 2026-10-02 | Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-101104 | High | 7.7 | 2026-10-02 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices… |
CVE-2026-104637 | High | 7.3 | 2026-10-02 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function… |
CVE-2026-104026 | High | 7.8 | 2026-10-02 | In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if clon… |
CVE-2026-94422 | High | 8.8 | 2026-10-02 | An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-B… |
CVE-2026-93875 | High | 7.2 | 2026-10-02 | The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including, 2.5… |
CVE-2026-85215 | High | 7.1 | 2026-10-02 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injec… |
CVE-2026-104609 | High | 7.3 | 2026-10-02 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the… |
CVE-2026-104472 | High | 7.5 | 2026-10-02 | YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass page rea… |
CVE-2026-104471 | High | 7.2 | 2026-10-02 | YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ d… |
CVE-2026-104467 | High | 8.1 | 2026-10-02 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenticated attackers to call admin-only API… |
CVE-2026-104464 | High | 8.6 | 2026-10-02 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying a… |
CVE-2026-104463 | High | 7.0 | 2026-10-02 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Fo… |
CVE-2026-104462 | High | 7.5 | 2026-10-02 | YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN cl… |
CVE-2026-104460 | High | 7.5 | 2026-10-02 | YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into SQL REGEX… |
CVE-2026-104457 | High | 8.6 | 2026-10-02 | YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filterN attribute tokens in quotes and conca… |
CVE-2026-104456 | High | 7.6 | 2026-10-02 | YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a stored username is concatenated unescaped… |
CVE-2026-104448 | High | 8.1 | 2026-10-02 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanently deletes a page on any GET request car… |
CVE-2026-104447 | High | 7.1 | 2026-10-02 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows attackers to delete installed packages via… |
CVE-2026-104445 | High | 8.2 | 2026-10-02 | YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified HTTP signature signer to the acti… |
CVE-2026-104444 | High | 7.1 | 2026-10-02 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comments API editComment route that allows authenticated low-privilege users to over… |
CVE-2026-104443 | High | 8.1 | 2026-10-02 | YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user to delete or forge arbitrary semantic t… |
CVE-2026-104437 | High | 7.4 | 2026-10-02 | Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs… |
CVE-2026-104435 | High | 7.4 | 2026-10-02 | Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corr… |
CVE-2026-104431 | High | 7.5 | 2026-10-02 | Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requi… |
CVE-2026-104430 | High | 7.5 | 2026-10-02 | Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CH… |
CVE-2026-104423 | High | 7.5 | 2026-10-02 | Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing… |
CVE-2026-104422 | High | 7.5 | 2026-10-02 | The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far… |