2026 CVEs (page 10)
Page 10 of 659 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94122 | High | 7.2 | 2026-09-30 | Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. |
CVE-2026-94121 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions. |
CVE-2026-94120 | High | 7.5 | 2026-09-30 | Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions. |
CVE-2026-94115 | High | 8.5 | 2026-09-30 | Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions. |
CVE-2026-94082 | High | 7.6 | 2026-09-30 | Author SQL Injection in Quiz Cat <= 3.1.1 versions. |
CVE-2026-94081 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions. |
CVE-2026-94078 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions. |
CVE-2026-94077 | Medium | 6.5 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions. |
CVE-2026-94076 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions. |
CVE-2026-94074 | Medium | 6.5 | 2026-09-30 | Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions. |
CVE-2026-93771 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. |
CVE-2026-93770 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions. |
CVE-2026-93651 | High | 7.2 | 2026-09-30 | Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions. |
CVE-2026-93624 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. |
CVE-2026-93621 | High | 8.2 | 2026-09-30 | Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. |
CVE-2026-93514 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. |
CVE-2026-93512 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. |
CVE-2026-92899 | Medium | 4.8 | 2026-09-30 | Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It stored the Nonce as raw base64 text, but authentica… |
CVE-2026-92121 | High | 7.5 | 2026-09-30 | In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set… |
CVE-2026-89238 | Critical | 9.1 | 2026-09-30 | WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentiality cove… |
CVE-2026-86778 | Medium | 5.3 | 2026-09-30 | Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc. Maksisoft Gym allows Account Footprinting. Thi… |
CVE-2026-76504 | Critical | 9.8 | 2026-09-30 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access a… |
CVE-2026-74865 | | 2026-09-30 | sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unau… | |
CVE-2026-74864 | | 2026-09-30 | sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without… | |
CVE-2026-62085 | High | 7.6 | 2026-09-30 | Administrator SQL Injection in WP Activity Log <= 5.6.6 versions. |
CVE-2026-62083 | Medium | 5.4 | 2026-09-30 | Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. |
CVE-2026-62081 | Medium | 5.4 | 2026-09-30 | Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions. |
CVE-2026-62080 | Medium | 6.5 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions. |
CVE-2026-62079 | Medium | 6.5 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions. |
CVE-2026-62078 | Medium | 6.5 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. |
CVE-2026-27371 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
CVE-2026-27085 | Low | 2.7 | 2026-09-30 | Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. |
CVE-2026-103321 | | 2026-09-30 | MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored w… | |
CVE-2026-103117 | Medium | 4.7 | 2026-09-30 | A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file functions/DatabaseInc.php of… |
CVE-2026-103116 | Medium | 6.3 | 2026-09-30 | A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component S… |
CVE-2026-103115 | Medium | 6.3 | 2026-09-30 | A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the compo… |
CVE-2026-102399 | Medium | 5.4 | 2026-09-30 | Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions. |
CVE-2026-102398 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions. |
CVE-2026-102396 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions. |
CVE-2026-102395 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions. |
CVE-2026-102386 | Medium | 6.5 | 2026-09-30 | Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions. |
CVE-2026-102385 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. |
CVE-2026-102384 | Medium | 5.9 | 2026-09-30 | Author Cross Site Scripting (XSS) in Supreme Modules Lite <= 2.5.63 versions. |
CVE-2026-100513 | Medium | 6.5 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.5 versions. |
CVE-2026-100508 | Medium | 5.3 | 2026-09-30 | Unauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versions. |
CVE-2026-100507 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in If-So Dynamic Content Personalization <= 1.10.1 versions. |
CVE-2026-88920 | Critical | 9.8 | 2026-09-30 | An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a craft… |
CVE-2026-87830 | Critical | 9.1 | 2026-09-30 | In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XM… |
CVE-2026-85532 | High | 7.5 | 2026-09-30 | Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive C… |
CVE-2026-62146 | High | 7.8 | 2026-09-30 | A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once… |
CVE-2026-10739 | | 2026-09-30 | Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-sup… | |
CVE-2026-10726 | | 2026-09-30 | Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, r… | |
CVE-2026-103242 | High | 7.1 | 2026-09-30 | A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header ty… |
CVE-2026-103114 | Medium | 6.3 | 2026-09-30 | A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery_assignment of the file modules/grades/Assignmen… |
CVE-2026-103012 | | 2026-09-30 | Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid… | |
CVE-2026-96342 | | 2026-09-30 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a thro… | |
CVE-2026-76992 | High | 7.5 | 2026-09-30 | The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote… |
CVE-2026-13720 | Medium | 5.4 | 2026-09-30 | An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating a dashboar… |
CVE-2026-13719 | Medium | 4.3 | 2026-09-30 | An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders th… |
CVE-2026-103239 | | 2026-09-30 | MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP reques… | |
CVE-2026-103113 | Medium | 4.7 | 2026-09-30 | A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of… |
CVE-2026-94053 | Critical | 9.1 | 2026-09-30 | Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is… |
CVE-2026-94052 | Critical | 9.1 | 2026-09-30 | A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authenticatio… |
CVE-2026-94029 | Medium | 6.5 | 2026-09-30 | Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-hand… |
CVE-2026-94002 | High | 7.5 | 2026-09-30 | Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. … |
CVE-2026-93996 | Medium | 6.5 | 2026-09-30 | Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library fo… |
CVE-2026-93995 | Medium | 6.5 | 2026-09-30 | Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side… |
CVE-2026-93994 | High | 8.1 | 2026-09-30 | Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two… |
CVE-2026-79625 | High | 8.1 | 2026-09-30 | Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorr… |
CVE-2026-77185 | Critical | 9.1 | 2026-09-30 | Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH… |
CVE-2026-10764 | High | 8.7 | 2026-09-30 | Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data. |
CVE-2026-103237 | | 2026-09-30 | MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute add/edit, event ed… | |
CVE-2026-103235 | | 2026-09-30 | MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the applica… | |
CVE-2026-97347 | High | 7.2 | 2026-09-30 | The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1… |
CVE-2026-93908 | Medium | 6.4 | 2026-09-30 | The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_price_text' p… |
CVE-2026-92712 | Medium | 6.4 | 2026-09-30 | The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions… |
CVE-2026-75098 | High | 7.5 | 2026-09-30 | The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter paramete… |
CVE-2026-102588 | Medium | 6.5 | 2026-09-30 | A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user wit… |
CVE-2026-102587 | Low | 2.7 | 2026-09-30 | A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privilege… |
CVE-2026-102586 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (… |
CVE-2026-102585 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group act… |
CVE-2026-102584 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without hol… |
CVE-2026-102583 | Low | 2.7 | 2026-09-30 | A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authent… |
CVE-2026-102582 | Low | 2.2 | 2026-09-30 | A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with e… |
CVE-2026-102581 | Medium | 4.6 | 2026-09-30 | A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An… |
CVE-2026-102580 | Low | 2.2 | 2026-09-30 | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrar… |
CVE-2026-102579 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other stude… |
CVE-2026-102578 | Medium | 5.5 | 2026-09-30 | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries… |
CVE-2026-102577 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote use… |
CVE-2026-102511 | | 2026-09-30 | Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X (PLC4Go) allows an attacker able to se… | |
CVE-2026-102510 | | 2026-09-30 | Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache… | |
CVE-2026-102509 | | 2026-09-30 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X (PLC… | |
CVE-2026-102459 | Medium | 6.1 | 2026-09-30 | EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript codes… |
CVE-2026-102458 | Critical | 9.8 | 2026-09-30 | EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords thr… |
CVE-2026-102457 | Medium | 6.5 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrar… |
CVE-2026-102456 | Medium | 6.5 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database conten… |
CVE-2026-102455 | Critical | 9.8 | 2026-09-30 | EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by s… |
CVE-2026-102454 | High | 7.2 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby… |
CVE-2026-97150 | High | 7.2 | 2026-09-30 | When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is… |
CVE-2026-93464 | Medium | 5.4 | 2026-09-30 | A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be… |