Medium-severity CVEs (page 47)
Page 47 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-84661 | Medium | 5.4 | 2026-09-02 | A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step… |
CVE-2026-84660 | Medium | 5.4 | 2026-09-02 | A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the `build` step to be… |
CVE-2026-84659 | Medium | 4.3 | 2026-09-02 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbo… |
CVE-2026-84658 | Medium | 4.3 | 2026-09-02 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configur… |
CVE-2026-84657 | Medium | 4.2 | 2026-09-02 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build… |
CVE-2026-84656 | Medium | 4.3 | 2026-09-02 | A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build p… |
CVE-2026-84655 | Medium | 4.3 | 2026-09-02 | Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attacker… |
CVE-2026-84654 | Medium | 5.4 | 2026-09-02 | In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding… |
CVE-2026-84651 | Medium | 6.3 | 2026-09-02 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration… |
CVE-2026-84646 | Medium | 4.3 | 2026-09-02 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers wit… |
CVE-2026-19475 | Medium | 6.5 | 2026-09-02 | An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause… |
CVE-2026-12704 | Medium | 6.8 | 2026-09-02 | When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP… |
CVE-2026-8151 | Medium | 5.4 | 2026-09-02 | The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-… |
CVE-2026-83547 | Medium | 6.8 | 2026-09-02 | The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could… |
CVE-2026-83533 | Medium | 5.3 | 2026-09-02 | The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowi… |
CVE-2026-82884 | Medium | 6.8 | 2026-09-02 | The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which… |
CVE-2026-82293 | Medium | 4.3 | 2026-09-02 | Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Ac… |
CVE-2026-81571 | Medium | 4.8 | 2026-09-02 | The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allow… |
CVE-2026-78609 | Medium | 5.4 | 2026-09-02 | Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (CAPEC-690). An acto… |
CVE-2026-78602 | Medium | 5.3 | 2026-09-02 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead to information disclosure via Path Trav… |
CVE-2026-78601 | Medium | 5.5 | 2026-09-02 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to a Kib… |
CVE-2026-78599 | Medium | 6.5 | 2026-09-02 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of in… |
CVE-2026-78598 | Medium | 5.4 | 2026-09-02 | Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Configured Access Contro… |
CVE-2026-78594 | Medium | 4.9 | 2026-09-02 | Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via Excessive Allocation (CAPEC-130). An authent… |
CVE-2026-78591 | Medium | 6.3 | 2026-09-02 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of re… |
CVE-2026-78588 | Medium | 6.5 | 2026-09-02 | Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker ab… |
CVE-2026-78586 | Medium | 6.5 | 2026-09-02 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated… |
CVE-2026-78584 | Medium | 4.3 | 2026-09-02 | Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An auth… |
CVE-2026-78153 | Medium | 5.3 | 2026-09-02 | The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection cover… |
CVE-2026-77794 | Medium | 5.3 | 2026-09-02 | The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid regist… |
CVE-2026-77793 | Medium | 5.3 | 2026-09-02 | The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to c… |
CVE-2026-2811 | Medium | 5.4 | 2026-09-02 | The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supp… |
CVE-2026-2688 | Medium | 6.5 | 2026-09-02 | The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server expl… |
CVE-2026-17563 | Medium | 5.3 | 2026-09-02 | The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when re… |
CVE-2026-14255 | Medium | 5.5 | 2026-09-02 | A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may lever… |
CVE-2026-10821 | Medium | 6.6 | 2026-09-02 | The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache config… |
CVE-2025-8945 | Medium | 5.3 | 2026-09-02 | The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API. |
CVE-2025-15490 | Medium | 5.3 | 2026-09-02 | The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via cra… |
CVE-2025-15489 | Medium | 5.3 | 2026-09-02 | The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password… |
CVE-2025-15481 | Medium | 5.3 | 2026-09-02 | The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails. |
CVE-2024-3773 | Medium | 5.9 | 2026-09-02 | The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/po… |
CVE-2026-81269 | Medium | 5.3 | 2026-09-02 | Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13. |
CVE-2026-81205 | Medium | 5.3 | 2026-09-02 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP In… |
CVE-2026-81201 | Medium | 6.1 | 2026-09-02 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affect… |
CVE-2026-81167 | Medium | 4.8 | 2026-09-02 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XS… |
CVE-2026-81166 | Medium | 5.3 | 2026-09-02 | Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0… |
CVE-2026-81165 | Medium | 5.3 | 2026-09-02 | Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18. |
CVE-2026-81164 | Medium | 5.4 | 2026-09-02 | Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5. |
CVE-2026-81162 | Medium | 5.3 | 2026-09-02 | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. T… |
CVE-2026-81160 | Medium | 6.1 | 2026-09-02 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affec… |
CVE-2026-81158 | Medium | 5.3 | 2026-09-02 | Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0. |
CVE-2026-76758 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*. |
CVE-2026-76757 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
CVE-2026-76756 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
CVE-2026-76755 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
CVE-2026-73478 | Medium | 5.3 | 2026-09-02 | Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1. |
CVE-2026-73477 | Medium | 5.3 | 2026-09-02 | Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1. |
CVE-2026-73476 | Medium | 5.4 | 2026-09-02 | Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication v… |
CVE-2026-73474 | Medium | 5.3 | 2026-09-02 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versi… |
CVE-2026-18986 | Medium | 4.8 | 2026-09-02 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS. This issue affec… |
CVE-2026-16647 | Medium | 4.1 | 2026-09-02 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Log… |
CVE-2026-84835 | Medium | 5.3 | 2026-09-02 | Missing Authorization vulnerability in DimaFreund Rentsyst rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-84808 | Medium | 4.3 | 2026-09-02 | Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that fails to enforce activity-team ac… |
CVE-2026-84807 | Medium | 5.4 | 2026-09-02 | Kimai (kimai/kimai) through 2.65.0 contains a business logic / improper authorization vulnerability in the default team creation endpoints. An authenticated us… |
CVE-2026-84806 | Medium | 5.4 | 2026-09-02 | Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and re… |
CVE-2026-84805 | Medium | 4.3 | 2026-09-02 | Kimai versions from 2.61.0 before 2.63.0 fail to disable admin-only work-contract preferences for low-privilege users in the PATCH /api/users/{id}/preferences… |
CVE-2026-84804 | Medium | 5.4 | 2026-09-02 | Kimai before 2.65.0 fails to properly validate permissions when removing team access to activities, projects, and customers via API endpoints. Authenticated us… |
CVE-2026-84802 | Medium | 4.3 | 2026-09-02 | Craft CMS versions from 5.7.0 before 5.10.12 contain an information disclosure vulnerability in AssetsController::actionMoveInfo that fails to enforce volume p… |
CVE-2026-84799 | Medium | 4.3 | 2026-09-02 | Craft CMS before 5.11.0 fails to enforce user-group scope filters on native GraphQL user relations including author, authors, uploader, draftCreator, and revis… |
CVE-2026-84797 | Medium | 6.3 | 2026-09-02 | Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDuplicate() that allows authenticated users with c… |
CVE-2026-84793 | Medium | 4.8 | 2026-09-02 | Craft CMS versions from 5.0.0-RC1 before 5.10.11 contain a stored cross-site scripting vulnerability in the site name field that fails to sanitize input. Admin… |
CVE-2026-84792 | Medium | 4.3 | 2026-09-02 | Craft CMS versions before 5.10.11 contain a broken access control vulnerability in the element-indexes/save-elements endpoint that allows control panel users t… |
CVE-2026-84781 | Medium | 6.5 | 2026-09-02 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions. |
CVE-2026-84780 | Medium | 5.3 | 2026-09-02 | Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions. |
CVE-2026-84775 | Medium | 5.3 | 2026-09-02 | Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions. |
CVE-2026-84772 | Medium | 5.5 | 2026-09-02 | Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions. |
CVE-2026-84771 | Medium | 5.3 | 2026-09-02 | Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions. |
CVE-2026-84760 | Medium | 5.3 | 2026-09-02 | Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions. |
CVE-2026-84217 | Medium | 5.4 | 2026-09-02 | Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.Thi… |
CVE-2026-83562 | Medium | 6.5 | 2026-09-02 | Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions. |
CVE-2026-82223 | Medium | 6.5 | 2026-09-02 | Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions. |
CVE-2026-66652 | Medium | 5.4 | 2026-09-02 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5… |
CVE-2026-32773 | Medium | 6.1 | 2026-09-02 | There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code whi… |
CVE-2026-53683 | Medium | 4.3 | 2026-09-02 | reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionall… |
CVE-2025-7963 | Medium | 6.4 | 2026-09-02 | The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode_easywaveformplayer() function in all versions up t… |
CVE-2026-3850 | Medium | 6.4 | 2026-09-02 | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `redirect_url` parameter of the `et_pb_contact_form` shortcode in all version… |
CVE-2026-82182 | Medium | 4.1 | 2026-09-02 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query… |
CVE-2026-81583 | Medium | 5.4 | 2026-09-02 | The My Login WordPress plugin before 7.2.0 does not enforce the network's registration setting when processing site signups on multisite installations, allowi… |
CVE-2026-81432 | Medium | 4.3 | 2026-09-02 | The JetStyleManager for Gutenberg WordPress plugin before 1.3.9 does not have CSRF protection on some of its AJAX actions, allowing attackers to make a logged-… |
CVE-2026-81428 | Medium | 6.5 | 2026-09-02 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing auth… |
CVE-2026-81427 | Medium | 4.3 | 2026-09-02 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order… |
CVE-2026-81426 | Medium | 4.3 | 2026-09-02 | The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attacke… |
CVE-2026-81199 | Medium | 5.3 | 2026-09-02 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics… |
CVE-2026-81197 | Medium | 5.3 | 2026-09-02 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filte… |
CVE-2026-81195 | Medium | 5.3 | 2026-09-02 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and… |
CVE-2026-81194 | Medium | 4.3 | 2026-09-02 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any… |
CVE-2026-79621 | Medium | 4.3 | 2026-09-02 | The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store before including it in the product enqui… |
CVE-2026-78151 | Medium | 5.3 | 2026-09-02 | The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its… |
CVE-2026-77788 | Medium | 4.9 | 2026-09-02 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, a… |
CVE-2026-77782 | Medium | 5.3 | 2026-09-02 | The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated S… |