High-severity CVEs (page 48)
Page 48 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94390 | High | 7.2 | 2026-10-01 | Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions. |
CVE-2026-79899 | High | 7.9 | 2026-10-01 | Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting… |
CVE-2026-67105 | High | 7.4 | 2026-10-01 | HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept u… |
CVE-2026-62073 | High | 7.5 | 2026-10-01 | Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions. |
CVE-2026-56589 | High | 7.2 | 2026-10-01 | HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scr… |
CVE-2026-103687 | High | 7.3 | 2026-10-01 | A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the compone… |
CVE-2026-103068 | High | 8.8 | 2026-10-01 | Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions. |
CVE-2026-102378 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions. |
CVE-2026-100517 | High | 7.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions. |
CVE-2026-100514 | High | 7.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions. |
CVE-2024-58388 | High | 7.5 | 2026-10-01 | Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arb… |
CVE-2026-66246 | High | 8.8 | 2026-10-01 | iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object… |
CVE-2026-102504 | High | 7.5 | 2026-10-01 | Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol. Nothing range-checks… |
CVE-2026-62060 | High | 7.6 | 2026-10-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows… |
CVE-2026-62059 | High | 7.6 | 2026-10-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Bl… |
CVE-2026-103338 | High | 8.5 | 2026-10-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free… |
CVE-2026-103067 | High | 8.0 | 2026-10-01 | Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Me… |
CVE-2026-102379 | High | 8.5 | 2026-10-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – C… |
CVE-2026-88789 | High | 8.6 | 2026-10-01 | Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.3… |
CVE-2026-103758 | High | 8.1 | 2026-10-01 | Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list om… |
CVE-2026-103757 | High | 7.7 | 2026-10-01 | Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utili… |
CVE-2026-103292 | High | 8.0 | 2026-10-01 | Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An au… |
CVE-2026-103286 | High | 7.3 | 2026-10-01 | Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to esca… |
CVE-2026-103283 | High | 8.1 | 2026-10-01 | Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only… |
CVE-2026-103278 | High | 7.3 | 2026-10-01 | Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attack… |
CVE-2026-103277 | High | 8.1 | 2026-10-01 | Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally host… |
CVE-2026-103272 | High | 7.5 | 2026-10-01 | Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content API that allows unauthenticated attackers to leak user data… |
CVE-2026-103271 | High | 7.5 | 2026-10-01 | Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can by… |
CVE-2026-103268 | High | 8.8 | 2026-10-01 | Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service… |
CVE-2026-103266 | High | 7.1 | 2026-10-01 | Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subsc… |
CVE-2026-103262 | High | 7.5 | 2026-10-01 | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of ser… |
CVE-2026-103259 | High | 7.6 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. At… |
CVE-2026-103257 | High | 7.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to vali… |
CVE-2026-103256 | High | 7.1 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that se… |
CVE-2026-103253 | High | 8.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Dele… |
CVE-2026-103252 | High | 7.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endp… |
CVE-2026-103251 | High | 7.1 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package instal… |
CVE-2026-103250 | High | 8.1 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node t… |
CVE-2026-103249 | High | 7.6 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locat… |
CVE-2026-103247 | High | 8.5 | 2026-10-01 | n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with… |
CVE-2026-103246 | High | 7.7 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference… |
CVE-2026-103082 | High | 7.2 | 2026-10-01 | Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This… |
CVE-2026-96577 | High | 7.1 | 2026-10-01 | A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encrypt… |
CVE-2026-92144 | High | 7.2 | 2026-10-01 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postdata-1[post-… |
CVE-2026-103493 | High | 8.1 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible |
CVE-2026-103490 | High | 7.2 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links |
CVE-2026-103488 | High | 7.1 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues |
CVE-2026-97661 | High | 7.2 | 2026-10-01 | The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, an… |
CVE-2026-96813 | High | 7.2 | 2026-10-01 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on Map Lo… |
CVE-2026-96573 | High | 7.2 | 2026-10-01 | The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field… |
CVE-2026-95687 | High | 8.8 | 2026-10-01 | The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including… |
CVE-2026-92244 | High | 7.2 | 2026-10-01 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company… |
CVE-2026-85235 | High | 7.2 | 2026-10-01 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textare… |
CVE-2026-15983 | High | 8.1 | 2026-10-01 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.31… |
CVE-2026-14995 | High | 7.2 | 2026-10-01 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Path in all versions up to, and including, 3.1.15.1 due to in… |
CVE-2026-103431 | High | 7.7 | 2026-10-01 | colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it… |
CVE-2026-93882 | High | 7.5 | 2026-10-01 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up… |
CVE-2026-19807 | High | 8.8 | 2026-10-01 | The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is d… |
CVE-2026-96255 | High | 7.5 | 2026-10-01 | The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's… |
CVE-2026-92412 | High | 7.1 | 2026-10-01 | The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing… |
CVE-2026-89296 | High | 8.6 | 2026-10-01 | The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated user… |
CVE-2026-85679 | High | 7.2 | 2026-10-01 | The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, and including, 3.1.6… |
CVE-2026-81809 | High | 7.5 | 2026-10-01 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the… |
CVE-2026-81739 | High | 7.5 | 2026-10-01 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin pag… |
CVE-2026-80276 | High | 7.5 | 2026-10-01 | Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not requi… |
CVE-2026-80275 | High | 8.8 | 2026-10-01 | Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative passw… |
CVE-2026-19253 | High | 8.7 | 2026-10-01 | The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not co… |
CVE-2026-101147 | High | 8.8 | 2026-10-01 | The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugin before 8.2.8 do not correctly enforce… |
CVE-2026-82828 | High | 8.8 | 2026-10-01 | Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. T… |
CVE-2026-82826 | High | 7.5 | 2026-10-01 | Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on… |
CVE-2026-103536 | High | 7.3 | 2026-10-01 | A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/mai… |
CVE-2026-96561 | High | 7.2 | 2026-10-01 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includin… |
CVE-2026-92245 | High | 7.5 | 2026-10-01 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the '… |
CVE-2026-103530 | High | 7.3 | 2026-10-01 | A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the compo… |
CVE-2026-103591 | High | 7.5 | 2026-09-30 | DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter… |
CVE-2026-92172 | High | 8.8 | 2026-09-30 | Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity… |
CVE-2026-51860 | High | 7.5 | 2026-09-30 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py. |
CVE-2026-51853 | High | 7.5 | 2026-09-30 | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializ… |
CVE-2026-51852 | High | 7.5 | 2026-09-30 | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method a… |
CVE-2026-51570 | High | 8.1 | 2026-09-30 | modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. |
CVE-2026-51568 | High | 8.1 | 2026-09-30 | modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file. |
CVE-2026-103000 | High | 7.5 | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause p… |
CVE-2026-102999 | High | 7.5 | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachmen… |
CVE-2026-102998 | High | 7.5 | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py ap… |
CVE-2026-102997 | High | 7.5 | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data c… |
CVE-2026-102996 | High | 7.5 | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Wi… |
CVE-2026-102995 | High | 7.5 | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a… |
CVE-2026-102150 | High | 7.2 | 2026-09-30 | A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a… |
CVE-2026-102143 | High | 7.5 | 2026-09-30 | An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload hand… |
CVE-2026-102142 | High | 7.2 | 2026-09-30 | A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. A… |
CVE-2026-102132 | High | 7.2 | 2026-09-30 | An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credenti… |
CVE-2026-102131 | High | 7.2 | 2026-09-30 | Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every form in which they could be supplied. An… |
CVE-2026-102130 | High | 7.2 | 2026-09-30 | Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the applicati… |
CVE-2026-102129 | High | 7.2 | 2026-09-30 | A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrato… |
CVE-2026-102128 | High | 7.5 | 2026-09-30 | An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not aut… |
CVE-2026-102127 | High | 7.0 | 2026-09-30 | An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional, non-default message-processing feature… |
CVE-2026-102126 | High | 8.1 | 2026-09-30 | A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an administrator holding only a single, narrowly scoped delegated permission to stor… |
CVE-2026-102125 | High | 8.8 | 2026-09-30 | The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that san… |
CVE-2026-102123 | High | 7.4 | 2026-09-30 | A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could allow an unauthenticated attacker to wri… |
CVE-2026-102121 | High | 8.6 | 2026-09-30 | A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors… |