2026 CVEs (page 11)
Page 11 of 659 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92712 | Medium | 6.4 | 2026-09-30 | The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions… |
CVE-2026-75098 | High | 7.5 | 2026-09-30 | The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter paramete… |
CVE-2026-102588 | Medium | 6.5 | 2026-09-30 | A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user wit… |
CVE-2026-102587 | Low | 2.7 | 2026-09-30 | A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privilege… |
CVE-2026-102586 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (… |
CVE-2026-102585 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group act… |
CVE-2026-102584 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without hol… |
CVE-2026-102583 | Low | 2.7 | 2026-09-30 | A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authent… |
CVE-2026-102582 | Low | 2.2 | 2026-09-30 | A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with e… |
CVE-2026-102581 | Medium | 4.6 | 2026-09-30 | A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An… |
CVE-2026-102580 | Low | 2.2 | 2026-09-30 | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrar… |
CVE-2026-102579 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other stude… |
CVE-2026-102578 | Medium | 5.5 | 2026-09-30 | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries… |
CVE-2026-102577 | Medium | 4.3 | 2026-09-30 | A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote use… |
CVE-2026-102511 | | 2026-09-30 | Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X (PLC4Go) allows an attacker able to se… | |
CVE-2026-102510 | | 2026-09-30 | Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache… | |
CVE-2026-102509 | | 2026-09-30 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X (PLC… | |
CVE-2026-102459 | Medium | 6.1 | 2026-09-30 | EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript codes… |
CVE-2026-102458 | Critical | 9.8 | 2026-09-30 | EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords thr… |
CVE-2026-102457 | Medium | 6.5 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrar… |
CVE-2026-102456 | Medium | 6.5 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database conten… |
CVE-2026-102455 | Critical | 9.8 | 2026-09-30 | EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by s… |
CVE-2026-102454 | High | 7.2 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby… |
CVE-2026-97150 | High | 7.2 | 2026-09-30 | When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is… |
CVE-2026-93464 | Medium | 5.4 | 2026-09-30 | A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be… |
CVE-2026-93463 | Medium | 5.4 | 2026-09-30 | A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed i… |
CVE-2026-93462 | Medium | 5.3 | 2026-09-30 | A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive inf… |
CVE-2026-93460 | Medium | 5.4 | 2026-09-30 | A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary scri… |
CVE-2026-92873 | High | 7.3 | 2026-09-30 | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog nod… |
CVE-2026-92872 | Medium | 4.3 | 2026-09-30 | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. |
CVE-2026-92871 | High | 7.5 | 2026-09-30 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. |
CVE-2026-92870 | High | 7.5 | 2026-09-30 | A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. |
CVE-2026-92869 | Medium | 6.5 | 2026-09-30 | An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. |
CVE-2026-92868 | Medium | 6.5 | 2026-09-30 | An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication. |
CVE-2026-92867 | High | 8.8 | 2026-09-30 | An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code ex… |
CVE-2026-88037 | Medium | 6.4 | 2026-09-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the `bt_bb_service` shortcode in all versi… |
CVE-2026-6806 | High | 7.5 | 2026-09-30 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' paramet… |
CVE-2026-6173 | Medium | 6.4 | 2026-09-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background_image' parameter of the plugin's bt_bb_section shor… |
CVE-2026-6172 | Medium | 6.4 | 2026-09-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter of the plugin's bt_bb_image shortcode in al… |
CVE-2026-6171 | Medium | 6.4 | 2026-09-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the plugin's bt_bb_icon shortcode in all… |
CVE-2026-6170 | Medium | 6.4 | 2026-09-30 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's bt_bb_css_image_grid shortco… |
CVE-2026-16596 | Medium | 6.5 | 2026-09-30 | The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'data_fields_list' parameter in all versions up to, and including, 1.5… |
CVE-2026-14876 | Medium | 6.4 | 2026-09-30 | The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and including, 3.5.1… |
CVE-2026-11895 | Medium | 6.4 | 2026-09-30 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'displ… |
CVE-2026-102508 | | 2026-09-30 | Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J) allows an attacker in a netwo… | |
CVE-2026-97196 | Critical | 9.1 | 2026-09-30 | Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: fro… |
CVE-2026-89294 | High | 7.5 | 2026-09-30 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa_locale… |
CVE-2026-97316 | Medium | 5.8 | 2026-09-30 | The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attack… |
CVE-2026-96886 | Medium | 5.3 | 2026-09-30 | The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, em… |
CVE-2026-94297 | Low | 2.7 | 2026-09-30 | The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before cr… |
CVE-2026-94274 | Medium | 5.3 | 2026-09-30 | The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still… |
CVE-2026-93580 | Medium | 5.3 | 2026-09-30 | The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and… |
CVE-2026-92994 | High | 8.8 | 2026-09-30 | The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serv… |
CVE-2026-92424 | Medium | 6.8 | 2026-09-30 | The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they se… |
CVE-2026-91832 | High | 7.1 | 2026-09-30 | The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu… |
CVE-2026-91072 | Medium | 4.4 | 2026-09-30 | The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, l… |
CVE-2026-91051 | Medium | 6.6 | 2026-09-30 | The EWWW Image Optimizer WordPress plugin before 8.8.0 does not prevent authenticated users with author-level permissions from storing a serialized value in a… |
CVE-2026-90953 | Medium | 4.3 | 2026-09-30 | The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticate… |
CVE-2026-89193 | High | 7.5 | 2026-09-30 | The Robin Image Optimizer WordPress plugin before 2.0.8 does not escape values that its bundled HTML parser re-emits into element attributes when a non-defaul… |
CVE-2026-89190 | Medium | 4.3 | 2026-09-30 | The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request… |
CVE-2026-88797 | High | 7.1 | 2026-09-30 | The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in u… |
CVE-2026-88791 | Low | 3.4 | 2026-09-30 | The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is… |
CVE-2026-87777 | Medium | 6.8 | 2026-09-30 | The Hostinger Reach WordPress plugin before 1.8.3 does not sanitize and escape a widget setting before outputting it in the editor preview, allowing users wit… |
CVE-2026-86789 | Medium | 5.3 | 2026-09-30 | The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read e… |
CVE-2026-85576 | Medium | 4.3 | 2026-09-30 | The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving… |
CVE-2026-85573 | High | 8.8 | 2026-09-30 | The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authe… |
CVE-2026-85415 | Medium | 6.8 | 2026-09-30 | The Audio Player Block WordPress plugin before 1.6.3 does not validate the scheme of a user-supplied URL before using it as a link target, allowing users with… |
CVE-2026-85001 | Medium | 6.8 | 2026-09-30 | The EmbedPress WordPress plugin before 4.6.7 does not sanitise and escape one of its Elementor widget settings before outputting it into an HTML attribute, wh… |
CVE-2026-83560 | Medium | 5.3 | 2026-09-30 | The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unc… |
CVE-2026-82127 | Low | 3.5 | 2026-09-30 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them w… |
CVE-2026-80333 | Medium | 5.3 | 2026-09-30 | The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticat… |
CVE-2026-75873 | Critical | 9.8 | 2026-09-30 | The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenti… |
CVE-2026-75824 | Medium | 5.3 | 2026-09-30 | The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated… |
CVE-2026-75823 | High | 7.4 | 2026-09-30 | The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to… |
CVE-2026-100143 | Medium | 6.5 | 2026-09-30 | The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the email address suppli… |
CVE-2026-103111 | High | 7.6 | 2026-09-30 | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data. |
CVE-2026-102913 | High | 7.3 | 2026-09-30 | A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php… |
CVE-2026-86134 | | 2026-09-30 | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management… | |
CVE-2026-103110 | Critical | 9.8 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unp… |
CVE-2026-102912 | Medium | 4.7 | 2026-09-30 | A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=report… |
CVE-2026-102911 | Critical | 9.9 | 2026-09-30 | A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP to… |
CVE-2026-102910 | High | 7.3 | 2026-09-30 | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_… |
CVE-2026-96649 | High | 7.2 | 2026-09-30 | The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via p… |
CVE-2026-86556 | Medium | 5.3 | 2026-09-30 | There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant… |
CVE-2026-103109 | High | 7.7 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to tri… |
CVE-2026-103108 | High | 7.5 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to tr… |
CVE-2026-103106 | High | 7.8 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attack… |
CVE-2026-103105 | High | 8.8 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local acce… |
CVE-2026-103104 | High | 7.5 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to tr… |
CVE-2026-103102 | High | 8.6 | 2026-09-30 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort… |
CVE-2026-103101 | High | 8.6 | 2026-09-30 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infi… |
CVE-2026-103100 | High | 7.5 | 2026-09-30 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abor… |
CVE-2026-103099 | High | 7.5 | 2026-09-30 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resul… |
CVE-2026-102909 | High | 7.3 | 2026-09-30 | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessme… |
CVE-2026-102908 | High | 7.3 | 2026-09-30 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admi… |
CVE-2026-102906 | Medium | 6.3 | 2026-09-30 | A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child_process.exec… |
CVE-2026-102874 | High | 7.3 | 2026-09-30 | A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component Execut… |
CVE-2026-81310 | Medium | 6.6 | 2026-09-30 | Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwri… |
CVE-2026-78229 | Medium | 6.7 | 2026-09-30 | Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is insta… |
CVE-2026-103088 | High | 7.5 | 2026-09-30 | Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates templat… |