High-severity CVEs (page 63)
Page 63 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57645 | High | 8.1 | 2026-06-26 | newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions. |
CVE-2026-57644 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions. |
CVE-2026-57643 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in WP Post Author <= 3.9.1 versions. |
CVE-2026-57642 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in Gallery <= 4.7.8 versions. |
CVE-2026-57636 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in wpForo Forum <= 3.0.9 versions. |
CVE-2026-57631 | High | 7.6 | 2026-06-26 | Administrator SQL Injection in Popup box <= 6.0.1 versions. |
CVE-2026-57628 | High | 7.6 | 2026-06-26 | Administrator SQL Injection in WP All Import <= 4.0.1 versions. |
CVE-2026-57527 | High | 8.8 | 2026-06-26 | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web ser… |
CVE-2026-57325 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions. |
CVE-2026-57322 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions. |
CVE-2026-57321 | High | 7.1 | 2026-06-26 | Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions. |
CVE-2026-57319 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. |
CVE-2026-57317 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. |
CVE-2026-57315 | High | 8.5 | 2026-06-26 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. |
CVE-2026-57314 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions. |
CVE-2026-57312 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. |
CVE-2026-56773 | High | 8.8 | 2026-06-26 | Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can re… |
CVE-2026-56072 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions. |
CVE-2026-56069 | High | 7.5 | 2026-06-26 | Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions. |
CVE-2026-56064 | High | 8.5 | 2026-06-26 | Subscriber SQL Injection in Tourfic <= 2.22.5 versions. |
CVE-2026-56063 | High | 8.3 | 2026-06-26 | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. |
CVE-2026-56061 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions. |
CVE-2026-56060 | High | 7.5 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions. |
CVE-2026-56055 | High | 8.8 | 2026-06-26 | Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions. |
CVE-2026-56047 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. |
CVE-2026-56045 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. |
CVE-2026-56044 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions. |
CVE-2026-56043 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions. |
CVE-2026-56041 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. |
CVE-2026-56040 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. |
CVE-2026-56039 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. |
CVE-2026-56038 | High | 8.8 | 2026-06-26 | Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. |
CVE-2026-56035 | High | 8.6 | 2026-06-26 | Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions. |
CVE-2026-56031 | High | 8.1 | 2026-06-26 | Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. |
CVE-2026-56029 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions. |
CVE-2026-56025 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. |
CVE-2026-56011 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. |
CVE-2026-56010 | High | 8.8 | 2026-06-26 | Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. |
CVE-2026-56008 | High | 8.8 | 2026-06-26 | Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions. |
CVE-2026-54847 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions. |
CVE-2026-54846 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions. |
CVE-2026-54840 | High | 7.3 | 2026-06-26 | Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. |
CVE-2026-54839 | High | 7.5 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups <= 2.0.9 versions. |
CVE-2026-54837 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions. |
CVE-2026-54835 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. |
CVE-2026-54834 | High | 7.5 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. |
CVE-2026-54833 | High | 7.4 | 2026-06-26 | Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions. |
CVE-2026-54832 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. |
CVE-2026-54826 | High | 7.6 | 2026-06-26 | Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions. |
CVE-2026-54824 | High | 7.5 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. |
CVE-2026-45257 | High | 7.8 | 2026-06-26 | The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does no… |
CVE-2026-30041 | High | 7.5 | 2026-06-26 | An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via… |
CVE-2025-68064 | High | 7.5 | 2026-06-26 | Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions. |
CVE-2025-68063 | High | 7.5 | 2026-06-26 | Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 versions. |
CVE-2025-68052 | High | 8.8 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions. |
CVE-2026-57920 | High | 7.7 | 2026-06-26 | Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints. |
CVE-2026-57915 | High | 7.3 | 2026-06-26 | It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recomme… |
CVE-2026-40711 | High | 8.0 | 2026-06-26 | Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper… |
CVE-2026-57918 | High | 7.1 | 2026-06-26 | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS ser… |
CVE-2026-57913 | High | 7.5 | 2026-06-26 | Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts. |
CVE-2026-57912 | High | 7.5 | 2026-06-26 | Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers. |
CVE-2026-11702 | High | 7.5 | 2026-06-26 | Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then t… |
CVE-2026-11625 | High | 7.5 | 2026-06-26 | Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the f… |
CVE-2026-57877 | High | 8.6 | 2026-06-26 | An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by imprope… |
CVE-2026-57876 | High | 7.5 | 2026-06-26 | An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused… |
CVE-2026-57875 | High | 7.5 | 2026-06-26 | An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LP… |
CVE-2026-57874 | High | 7.5 | 2026-06-26 | An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is… |
CVE-2026-57873 | High | 7.5 | 2026-06-26 | An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerab… |
CVE-2026-57872 | High | 7.5 | 2026-06-26 | An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is cau… |
CVE-2026-49486 | High | 7.5 | 2026-06-26 | The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control channel was… |
CVE-2026-2053 | High | 8.3 | 2026-06-26 | The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict user-controlled input within t… |
CVE-2026-10835 | High | 7.7 | 2026-06-26 | The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a parameter passed to one of its AJAX actions before using it in… |
CVE-2026-10823 | High | 7.5 | 2026-06-26 | The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate a user-supplied query p… |
CVE-2026-50741 | High | 8.8 | 2026-06-26 | Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a dis… |
CVE-2026-48933 | High | 7.5 | 2026-06-26 | A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all su… |
CVE-2026-48619 | High | 7.5 | 2026-06-26 | A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This… |
CVE-2026-48615 | High | 7.5 | 2026-06-26 | A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. When proxy credentials are embedded in th… |
CVE-2026-9222 | High | 8.1 | 2026-06-26 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from th… |
CVE-2026-9221 | High | 7.5 | 2026-06-26 | The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request signature for authenticating communicatio… |
CVE-2026-9220 | High | 7.5 | 2026-06-26 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES ke… |
CVE-2026-40083 | High | 7.2 | 2026-06-25 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in man… |
CVE-2026-8720 | High | 7.5 | 2026-06-25 | wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. W… |
CVE-2026-7532 | High | 7.5 | 2026-06-25 | iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certi… |
CVE-2026-7511 | High | 7.5 | 2026-06-25 | PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to b… |
CVE-2026-6331 | High | 7.5 | 2026-06-25 | HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC verification. In the OpenSSL-compatibilit… |
CVE-2026-6325 | High | 7.5 | 2026-06-25 | Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer. |
CVE-2026-54479 | High | 7.3 | 2026-06-25 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifi… |
CVE-2026-50176 | High | 7.5 | 2026-06-25 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacke… |
CVE-2026-22879 | High | 8.1 | 2026-06-25 | vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability |
CVE-2026-13283 | High | 7.5 | 2026-06-25 | Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures… |
CVE-2026-13281 | High | 8.3 | 2026-06-25 | Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2026-12992 | High | 7.4 | 2026-06-25 | A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VA… |
CVE-2026-12975 | High | 8.5 | 2026-06-25 | A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or dis… |
CVE-2026-11800 | High | 8.1 | 2026-06-25 | A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials t… |
CVE-2026-11703 | High | 7.5 | 2026-06-25 | Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for ticket-based resumption. A cached sessio… |
CVE-2025-71340 | High | 8.1 | 2026-06-25 | picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can e… |
CVE-2025-71335 | High | 8.1 | 2026-06-25 | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) fails to invalidate existing sessions and session tokens after a user changes their password. An at… |
CVE-2025-71328 | High | 8.3 | 2026-06-25 | Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the account setting… |
CVE-2025-71324 | High | 7.5 | 2026-06-25 | Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/do… |
CVE-2021-47987 | High | 7.5 | 2026-06-25 | Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unrevi… |