Medium-severity CVEs (page 66)
Page 66 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6964 | Medium | 5.3 | 2026-06-16 | The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.6.7. This is due to the plu… |
CVE-2026-42014 | Medium | 6.6 | 2026-06-16 | A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability… |
CVE-2026-1767 | Medium | 5.6 | 2026-06-16 | A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit t… |
CVE-2026-1766 | Medium | 5.6 | 2026-06-16 | A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buff… |
CVE-2026-1765 | Medium | 5.6 | 2026-06-16 | A flaw was found in the `tracker-extract-mp3` component of GNOME localsearch (previously known as tracker-miners). This vulnerability, a heap buffer overflow… |
CVE-2026-1764 | Medium | 5.6 | 2026-06-16 | A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags… |
CVE-2026-12162 | Medium | 5.5 | 2026-06-16 | Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social log… |
CVE-2026-9262 | Medium | 6.5 | 2026-06-16 | Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
CVE-2026-9261 | Medium | 6.8 | 2026-06-16 | Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
CVE-2026-9260 | Medium | 6.2 | 2026-06-16 | Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
CVE-2026-9259 | Medium | 6.5 | 2026-06-16 | Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
CVE-2026-9258 | Medium | 6.5 | 2026-06-16 | Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
CVE-2026-48157 | Medium | 6.1 | 2026-06-15 | Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpExceptio… |
CVE-2026-49775 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. |
CVE-2026-49773 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions. |
CVE-2026-49043 | Medium | 4.7 | 2026-06-15 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions. |
CVE-2026-48965 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. |
CVE-2026-48887 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions. |
CVE-2026-48880 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. |
CVE-2026-48878 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. |
CVE-2026-48870 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. |
CVE-2026-48518 | Medium | 4.3 | 2026-06-15 | MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster without the need for local instances. In versions 8.0.0 through 10.0.0… |
CVE-2026-42752 | Medium | 6.5 | 2026-06-15 | Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. |
CVE-2026-42743 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. |
CVE-2026-42688 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions. |
CVE-2026-42663 | Medium | 6.5 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. |
CVE-2026-42662 | Medium | 6.5 | 2026-06-15 | Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. |
CVE-2026-42660 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. |
CVE-2026-42659 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. |
CVE-2026-42657 | Medium | 5.3 | 2026-06-15 | Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. |
CVE-2026-42656 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. |
CVE-2026-42655 | Medium | 5.9 | 2026-06-15 | Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. |
CVE-2026-42651 | Medium | 6.3 | 2026-06-15 | Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. |
CVE-2026-42640 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. |
CVE-2026-42378 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. |
CVE-2026-41556 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. |
CVE-2026-40799 | Medium | 5.3 | 2026-06-15 | Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. |
CVE-2026-40796 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. |
CVE-2026-40795 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Amelia <= 2.2 versions. |
CVE-2026-40794 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in myCred <= 3.0.3 versions. |
CVE-2026-40793 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Groundhogg < 4.4.1 versions. |
CVE-2026-40792 | Medium | 6.3 | 2026-06-15 | Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions. |
CVE-2026-40790 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions. |
CVE-2026-40782 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. |
CVE-2026-40773 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions. |
CVE-2026-40743 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. |
CVE-2026-39594 | Medium | 6.4 | 2026-06-15 | Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. |
CVE-2026-39584 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. |
CVE-2026-39540 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions. |
CVE-2026-39527 | Medium | 5.4 | 2026-06-15 | Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions. |
CVE-2026-39525 | Medium | 6.5 | 2026-06-15 | Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions. |
CVE-2026-39515 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Motors < 1.4.107 versions. |
CVE-2026-39491 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in JupiterX Core <= 4.14.1 versions. |
CVE-2026-39489 | Medium | 4.4 | 2026-06-15 | Author Arbitrary File Download in Download Monitor <= 5.1.9 versions. |
CVE-2026-39468 | Medium | 6.8 | 2026-06-15 | Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions. |
CVE-2026-39451 | Medium | 6.3 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions. |
CVE-2026-34892 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions. |
CVE-2026-25440 | Medium | 5.3 | 2026-06-15 | Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions. |
CVE-2025-69332 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Bookify <= 1.1.1 versions. |
CVE-2025-68049 | Medium | 6.3 | 2026-06-15 | Subscriber Broken Access Control in bunny.net <= 2.3.6 versions. |
CVE-2025-60175 | Medium | 4.4 | 2026-06-15 | Administrator Server Side Request Forgery (SSRF) in PopAd <= 1.0.4 versions. |
CVE-2026-52721 | Medium | 5.3 | 2026-06-15 | Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries duri… |
CVE-2026-52718 | Medium | 6.5 | 2026-06-15 | A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte… |
CVE-2026-50892 | Medium | 6.5 | 2026-06-15 | Incorrect access control in the "Let's Encrypt" certificate download endpoint of Nginx Proxy Manager v2.14.0 allows authenticated attackers to obtain the TLS p… |
CVE-2026-50876 | Medium | 5.4 | 2026-06-15 | A cross-site scripting (XSS) vulnerability in Deck9 Input v2.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. |
CVE-2026-49953 | Medium | 6.5 | 2026-06-15 | Discuz! X5.0 releases 20260320 through 20260610 contains a CAPTCHA bypass vulnerability that allows unauthenticated remote attackers to defeat challenge contro… |
CVE-2026-39197 | Medium | 6.5 | 2026-06-15 | An issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to cause a Denial of Service (DoS) via a crafted request or payl… |
CVE-2026-37216 | Medium | 6.1 | 2026-06-15 | Ruoyi 4.8.2 is vulnerable to Cross Site Scripting (XSS) at the interface /system/notice/add. |
CVE-2026-36933 | Medium | 6.8 | 2026-06-15 | An issue in Boyleep K11, y108 firmware v.2.3.0.11291 allows a physically proximate attacker to execute arbitrary code via the factory test feature. |
CVE-2026-36521 | Medium | 6.1 | 2026-06-15 | PublicCMS V5.202506.d has a Cross Site Scripting (XSS) vulnerability in the site configuration management module. |
CVE-2026-11931 | Medium | 5.5 | 2026-06-15 | Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or p… |
CVE-2025-70102 | Medium | 6.3 | 2026-06-15 | A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (src/if-options.c:18… |
CVE-2025-55663 | Medium | 5.5 | 2026-06-15 | A segmentation violation in the Track_SetStreamDescriptor function (isomedia/track.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2025-55661 | Medium | 5.5 | 2026-06-15 | A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafte… |
CVE-2025-55660 | Medium | 5.5 | 2026-06-15 | A stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via sup… |
CVE-2025-55652 | Medium | 5.5 | 2026-06-15 | A heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via s… |
CVE-2025-55650 | Medium | 5.5 | 2026-06-15 | A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) vi… |
CVE-2025-55649 | Medium | 5.5 | 2026-06-15 | A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS)… |
CVE-2025-55648 | Medium | 5.5 | 2026-06-15 | A heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service… |
CVE-2025-55647 | Medium | 5.5 | 2026-06-15 | An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supp… |
CVE-2025-55645 | Medium | 5.5 | 2026-06-15 | A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via sup… |
CVE-2025-55644 | Medium | 5.5 | 2026-06-15 | A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) vi… |
CVE-2025-55643 | Medium | 5.5 | 2026-06-15 | A NULL pointer dereference in the TrackWriter handling component (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2025-55642 | Medium | 6.5 | 2026-06-15 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmx_process function (isomedia/isom_write.c). |
CVE-2025-55641 | Medium | 5.5 | 2026-06-15 | A NULL pointer dereference in the gf_isom_copy_sample_info function (isomedia/isom_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (… |
CVE-2026-49294 | Medium | 6.1 | 2026-06-15 | Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. Versions 3.6.3 and prior are vulnerable to reflected cros… |
CVE-2026-20262 | Medium | 6.5 | 2026-06-15 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or over… |
CVE-2026-9595 | Medium | 5.3 | 2026-06-15 | Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and… |
CVE-2026-8683 | Medium | 6.5 | 2026-06-15 | Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a maliciou… |
CVE-2026-5038 | Medium | 5.3 | 2026-06-15 | Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage. Aborted or malformed multip… |
CVE-2026-10634 | Medium | 4.8 | 2026-06-15 | Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, whi… |
CVE-2025-15659 | Medium | 6.5 | 2026-06-15 | Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions. |
CVE-2025-15658 | Medium | 5.9 | 2026-06-15 | Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions. |
CVE-2026-6517 | Medium | 6.3 | 2026-06-15 | Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop… |
CVE-2026-48969 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions. |
CVE-2025-64215 | Medium | 6.5 | 2026-06-15 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects… |
CVE-2016-20083 | Medium | 5.3 | 2026-06-15 | WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF to… |
CVE-2016-20082 | Medium | 6.2 | 2026-06-15 | WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the acti… |
CVE-2016-20080 | Medium | 6.2 | 2026-06-15 | WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to inc… |
CVE-2016-20079 | Medium | 6.2 | 2026-06-15 | WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by m… |