Medium-severity CVEs (page 11)
Page 11 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19054 | Medium | 5.3 | 2026-08-06 | A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists/readFile/wri… |
CVE-2026-18487 | Medium | 5.4 | 2026-08-06 | A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clic… |
CVE-2026-16067 | Medium | 5.3 | 2026-08-06 | The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non-WooCommer… |
CVE-2026-15256 | Medium | 4.8 | 2026-08-06 | The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field's default value, from bein… |
CVE-2026-15208 | Medium | 5.3 | 2026-08-06 | The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the registra… |
CVE-2026-15152 | Medium | 5.3 | 2026-08-06 | The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site's own merchant account… |
CVE-2026-15149 | Medium | 5.3 | 2026-08-06 | The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking… |
CVE-2026-15147 | Medium | 5.3 | 2026-08-06 | The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate th… |
CVE-2026-14936 | Medium | 5.3 | 2026-08-06 | The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account b… |
CVE-2026-14842 | Medium | 5.3 | 2026-08-06 | The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauthenticated… |
CVE-2026-14831 | Medium | 5.3 | 2026-08-06 | The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to c… |
CVE-2026-14306 | Medium | 4.3 | 2026-08-06 | The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected course content, allowing authenticated us… |
CVE-2026-13342 | Medium | 5.3 | 2026-08-06 | The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing t… |
CVE-2026-12901 | Medium | 5.9 | 2026-08-06 | The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to f… |
CVE-2026-12501 | Medium | 5.3 | 2026-08-06 | The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent to the site's configured merchant acco… |
CVE-2026-11361 | Medium | 5.9 | 2026-08-06 | The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it complete, allowing… |
CVE-2025-6508 | Medium | 4.3 | 2026-08-06 | The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API d… |
CVE-2025-12317 | Medium | 5.0 | 2026-08-06 | When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with… |
CVE-2024-6541 | Medium | 6.8 | 2026-08-06 | The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated… |
CVE-2026-68747 | Medium | 6.1 | 2026-08-06 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the CSS scrubber in rrrene html_sanitize_ex… |
CVE-2026-66843 | Medium | 6.1 | 2026-08-06 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to load a docu… |
CVE-2026-66829 | Medium | 6.1 | 2026-08-06 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors o… |
CVE-2026-66370 | Medium | 6.1 | 2026-08-06 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to… |
CVE-2026-19047 | Medium | 5.3 | 2026-08-06 | A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/… |
CVE-2026-18276 | Medium | 4.3 | 2026-08-06 | Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event… |
CVE-2026-18275 | Medium | 6.5 | 2026-08-06 | Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segme… |
CVE-2026-70637 | Medium | 5.9 | 2026-08-06 | LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST follow… |
CVE-2026-66706 | Medium | 5.9 | 2026-08-06 | Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions. |
CVE-2026-66703 | Medium | 6.5 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. |
CVE-2026-66701 | Medium | 5.3 | 2026-08-06 | Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions. |
CVE-2026-66699 | Medium | 5.3 | 2026-08-06 | Custom role Broken Access Control in Dokan <= 5.0.10 versions. |
CVE-2026-66696 | Medium | 4.3 | 2026-08-06 | Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions. |
CVE-2026-66695 | Medium | 6.5 | 2026-08-06 | Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions. |
CVE-2026-66692 | Medium | 4.3 | 2026-08-06 | Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions. |
CVE-2026-66688 | Medium | 6.5 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions. |
CVE-2026-66686 | Medium | 6.5 | 2026-08-06 | Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions. |
CVE-2026-66685 | Medium | 5.3 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions. |
CVE-2026-66684 | Medium | 5.3 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions. |
CVE-2026-66683 | Medium | 5.3 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions. |
CVE-2026-66681 | Medium | 4.3 | 2026-08-06 | Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions. |
CVE-2026-66678 | Medium | 4.3 | 2026-08-06 | Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions. |
CVE-2026-66452 | Medium | 6.5 | 2026-08-06 | Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions. |
CVE-2026-66451 | Medium | 6.5 | 2026-08-06 | Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions. |
CVE-2026-66425 | Medium | 6.5 | 2026-08-06 | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions. |
CVE-2026-65502 | Medium | 5.3 | 2026-08-06 | Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions. |
CVE-2026-61959 | Medium | 6.5 | 2026-08-06 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. |
CVE-2026-32548 | Medium | 5.3 | 2026-08-06 | Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions. |
CVE-2026-32469 | Medium | 5.3 | 2026-08-06 | Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions. |
CVE-2026-28180 | Medium | 5.3 | 2026-08-06 | Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions. |
CVE-2026-28179 | Medium | 5.9 | 2026-08-06 | Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions. |
CVE-2026-28178 | Medium | 6.5 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. |
CVE-2026-28169 | Medium | 5.3 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions. |
CVE-2026-28146 | Medium | 6.5 | 2026-08-06 | Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions. |
CVE-2026-25403 | Medium | 6.5 | 2026-08-06 | Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. |
CVE-2026-19045 | Medium | 5.3 | 2026-08-06 | A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils… |
CVE-2026-19044 | Medium | 5.3 | 2026-08-06 | A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this vulnerability is the function executeOperation of the file src/index.ts of the component… |
CVE-2026-15246 | Medium | 4.3 | 2026-08-06 | The RealHomes Memberships WordPress plugin before 3.1.0 does not verify that a membership payment actually completed, nor check a nonce or the user's capabilit… |
CVE-2026-64993 | Medium | 6.8 | 2026-08-06 | Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could poten… |
CVE-2026-19041 | Medium | 6.3 | 2026-08-06 | A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/co… |
CVE-2026-19040 | Medium | 6.3 | 2026-08-06 | A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a man… |
CVE-2026-18501 | Medium | 6.4 | 2026-08-06 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site S… |
CVE-2026-16316 | Medium | 4.3 | 2026-08-06 | OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame processing. A specially crafted SV fra… |
CVE-2026-70556 | Medium | 4.3 | 2026-08-06 | Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::pos… |
CVE-2026-66732 | Medium | 5.9 | 2026-08-06 | Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved… |
CVE-2026-19039 | Medium | 5.3 | 2026-08-06 | A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh_exec of the file sr… |
CVE-2026-19038 | Medium | 6.3 | 2026-08-06 | A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.t… |
CVE-2026-19037 | Medium | 4.3 | 2026-08-06 | A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_lob of the file src/WtBtCore/MatchEngin… |
CVE-2026-0673 | Medium | 5.3 | 2026-08-06 | The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `elemen… |
CVE-2026-8166 | Medium | 5.4 | 2026-08-06 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Industry and Trade Inc. E-Logo Purchasing P… |
CVE-2026-5391 | Medium | 6.4 | 2026-08-06 | The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_wrapper_classes' attribute of the 'latepoint_resources' shortcode… |
CVE-2026-5158 | Medium | 6.4 | 2026-08-06 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlace… |
CVE-2026-11983 | Medium | 5.3 | 2026-08-06 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a mis… |
CVE-2025-9266 | Medium | 4.3 | 2026-08-06 | The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueue_scripts() function in al… |
CVE-2026-55980 | Medium | 5.5 | 2026-08-06 | A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition. |
CVE-2026-55979 | Medium | 5.2 | 2026-08-06 | An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to… |
CVE-2026-64640 | Medium | 6.5 | 2026-08-06 | Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to regi… |
CVE-2026-19022 | Medium | 6.3 | 2026-08-06 | A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initialize_repo of the file OpenHands/resolver/send_pull_request… |
CVE-2026-19020 | Medium | 6.3 | 2026-08-06 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicet… |
CVE-2026-19019 | Medium | 4.8 | 2026-08-06 | A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executo… |
CVE-2026-19011 | Medium | 5.3 | 2026-08-06 | A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Perfor… |
CVE-2026-19008 | Medium | 6.3 | 2026-08-06 | A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.t… |
CVE-2026-18915 | Medium | 5.0 | 2026-08-06 | Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System F… |
CVE-2026-0637 | Medium | 4.4 | 2026-08-06 | When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without suffic… |
CVE-2025-13909 | Medium | 4.3 | 2026-08-06 | The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-fact… |
CVE-2025-13394 | Medium | 5.4 | 2026-08-06 | The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically… |
CVE-2025-11850 | Medium | 4.3 | 2026-08-06 | When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user… |
CVE-2024-8995 | Medium | 4.9 | 2026-08-06 | Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these code… |
CVE-2024-6832 | Medium | 5.9 | 2026-08-06 | The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locki… |
CVE-2024-10302 | Medium | 4.0 | 2026-08-06 | The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be inc… |
CVE-2026-19007 | Medium | 6.3 | 2026-08-06 | A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedElevatedSender of the file src/auto-reply/… |
CVE-2026-19006 | Medium | 6.3 | 2026-08-06 | A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exe… |
CVE-2026-19005 | Medium | 6.3 | 2026-08-06 | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent… |
CVE-2026-18967 | Medium | 6.4 | 2026-08-06 | A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the IdP-Initiated… |
CVE-2026-18400 | Medium | 6.4 | 2026-08-06 | The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post… |
CVE-2026-18395 | Medium | 5.4 | 2026-08-06 | The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before outputting them back in a page, allowing… |
CVE-2026-16954 | Medium | 6.5 | 2026-08-06 | The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing u… |
CVE-2026-16537 | Medium | 5.4 | 2026-08-06 | The Slick Slider WordPress plugin before 0.5.3 does not sanitize and escape a shortcode attribute value before outputting it in an HTML attribute, allowing use… |
CVE-2026-16290 | Medium | 5.3 | 2026-08-06 | The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for un… |
CVE-2026-16065 | Medium | 6.5 | 2026-08-06 | The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, a… |
CVE-2026-14547 | Medium | 5.3 | 2026-08-06 | The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property re… |