2026 CVEs (page 118)
Page 118 of 665 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14989 | High | 7.2 | 2026-09-09 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' paramet… |
CVE-2026-14359 | High | 8.8 | 2026-09-09 | The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the a… |
CVE-2026-12858 | | 2026-09-09 | Improper Privilege Management vulnerability in ESET AV Remover (standalone) allows Privilege Escalation via especially crafted RPC. | |
CVE-2026-80177 | Medium | 6.5 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E… |
CVE-2026-80124 | Medium | 5.5 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information i… |
CVE-2026-80123 | High | 7.3 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vu… |
CVE-2026-80055 | Medium | 4.4 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E… |
CVE-2026-79636 | High | 7.0 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate w… |
CVE-2026-75927 | High | 7.2 | 2026-09-09 | The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation… |
CVE-2026-19778 | Medium | 6.5 | 2026-09-09 | The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the… |
CVE-2026-19729 | Medium | 4.9 | 2026-09-09 | A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs b… |
CVE-2026-17149 | Medium | 6.4 | 2026-09-09 | The Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred plugin for WordPress is vulnerable to Stored Cross-Site Scri… |
CVE-2026-15398 | Medium | 4.3 | 2026-09-09 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass in all versions up… |
CVE-2026-87747 | Medium | 4.9 | 2026-09-09 | The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to d… |
CVE-2026-85117 | Medium | 6.5 | 2026-09-09 | The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor… |
CVE-2026-83537 | Medium | 5.3 | 2026-09-09 | The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually completed before marking an order as paid, allowi… |
CVE-2026-80440 | Medium | 4.8 | 2026-09-09 | The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the… |
CVE-2026-19855 | Medium | 6.5 | 2026-09-09 | The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, a… |
CVE-2026-19802 | Medium | 4.3 | 2026-09-09 | The Checkout Custom Fields Builder for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.5. This… |
CVE-2026-8615 | Medium | 4.3 | 2026-09-09 | The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce… |
CVE-2026-85418 | Medium | 5.4 | 2026-09-09 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML… |
CVE-2026-85133 | Medium | 5.4 | 2026-09-09 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authen… |
CVE-2026-85132 | Medium | 4.3 | 2026-09-09 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any auth… |
CVE-2026-85037 | Medium | 5.3 | 2026-09-09 | The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is a… |
CVE-2026-84908 | Medium | 5.3 | 2026-09-09 | The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the… |
CVE-2026-84222 | Medium | 5.3 | 2026-09-09 | The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowi… |
CVE-2026-84113 | Medium | 4.1 | 2026-09-09 | The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users s… |
CVE-2026-84068 | High | 8.6 | 2026-09-09 | The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticate… |
CVE-2026-83593 | High | 7.2 | 2026-09-09 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation'… |
CVE-2026-83541 | Medium | 6.8 | 2026-09-09 | The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute… |
CVE-2026-82848 | Medium | 5.3 | 2026-09-09 | The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowin… |
CVE-2026-82185 | Medium | 4.3 | 2026-09-09 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated… |
CVE-2026-82184 | Medium | 5.3 | 2026-09-09 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that doe… |
CVE-2026-81741 | Medium | 4.7 | 2026-09-09 | The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirm… |
CVE-2026-81022 | Medium | 5.3 | 2026-09-09 | The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, a… |
CVE-2026-81021 | Medium | 5.3 | 2026-09-09 | The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauth… |
CVE-2026-80341 | Medium | 5.9 | 2026-09-09 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowi… |
CVE-2026-80340 | Medium | 5.3 | 2026-09-09 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configurat… |
CVE-2026-80339 | Medium | 5.3 | 2026-09-09 | The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configurat… |
CVE-2026-76009 | High | 8.1 | 2026-09-09 | The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the `N… |
CVE-2026-75905 | Medium | 4.3 | 2026-09-09 | The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not prop… |
CVE-2026-75861 | Medium | 6.5 | 2026-09-09 | The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing… |
CVE-2026-19946 | Medium | 4.3 | 2026-09-09 | The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability ch… |
CVE-2026-18042 | Medium | 5.3 | 2026-09-09 | The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-m… |
CVE-2026-16960 | High | 7.5 | 2026-09-09 | The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthent… |
CVE-2026-14962 | High | 8.6 | 2026-09-09 | The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing u… |
CVE-2026-13146 | Low | 3.7 | 2026-09-09 | The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by its bank-deposit slip submission, allowi… |
CVE-2026-13144 | Low | 3.7 | 2026-09-09 | The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its ban… |
CVE-2026-87737 | Medium | 5.9 | 2026-09-09 | An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: t… |
CVE-2026-87736 | Medium | 4.3 | 2026-09-09 | An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. |
CVE-2026-87735 | Medium | 4.3 | 2026-09-09 | An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or… |
CVE-2026-87734 | High | 7.5 | 2026-09-09 | An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service. |
CVE-2026-87733 | Medium | 6.2 | 2026-09-09 | An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encodi… |
CVE-2026-87732 | Medium | 6.2 | 2026-09-09 | An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into funct… |
CVE-2026-21113 | Medium | 5.5 | 2026-09-09 | Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permis… |
CVE-2026-21112 | Medium | 5.5 | 2026-09-09 | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction… |
CVE-2026-21111 | | 2026-09-09 | Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory. | |
CVE-2026-21110 | | 2026-09-09 | Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code. | |
CVE-2026-21109 | | 2026-09-09 | Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information. | |
CVE-2026-21108 | Medium | 5.5 | 2026-09-09 | Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information. |
CVE-2026-21107 | Medium | 5.5 | 2026-09-09 | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory. |
CVE-2026-21106 | | 2026-09-09 | Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protect… | |
CVE-2026-21105 | Medium | 5.5 | 2026-09-09 | Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information. |
CVE-2026-21104 | Medium | 6.7 | 2026-09-09 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2026-21103 | Medium | 6.1 | 2026-09-09 | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege. |
CVE-2026-21102 | Medium | 6.7 | 2026-09-09 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. |
CVE-2026-21101 | Medium | 6.7 | 2026-09-09 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root p… |
CVE-2026-21100 | High | 7.1 | 2026-09-09 | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity. |
CVE-2026-21099 | Medium | 5.5 | 2026-09-09 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information. |
CVE-2026-21098 | Medium | 6.1 | 2026-09-09 | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user int… |
CVE-2026-21097 | Medium | 6.7 | 2026-09-09 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity. |
CVE-2026-21096 | Critical | 9.8 | 2026-09-09 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. |
CVE-2026-21095 | Critical | 9.8 | 2026-09-09 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. |
CVE-2026-21094 | High | 8.8 | 2026-09-09 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. |
CVE-2026-21093 | Medium | 6.7 | 2026-09-09 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. |
CVE-2026-21092 | Medium | 5.3 | 2026-09-09 | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. |
CVE-2026-21091 | High | 7.8 | 2026-09-09 | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2026-21090 | High | 7.8 | 2026-09-09 | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2026-21089 | High | 7.8 | 2026-09-09 | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2026-21088 | High | 7.8 | 2026-09-09 | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memor… |
CVE-2026-21087 | High | 7.8 | 2026-09-09 | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege. |
CVE-2026-21086 | High | 7.8 | 2026-09-09 | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration. |
CVE-2026-21085 | Medium | 6.7 | 2026-09-09 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. |
CVE-2026-19945 | Medium | 6.4 | 2026-09-09 | The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 2.2… |
CVE-2026-11821 | Medium | 5.4 | 2026-09-09 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass in all versions up… |
CVE-2026-84293 | High | 7.2 | 2026-09-09 | The Repeater Fields for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values in all versio… |
CVE-2026-81647 | Medium | 5.3 | 2026-09-09 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-81646 | Medium | 5.9 | 2026-09-09 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-81644 | Medium | 4.3 | 2026-09-09 | DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-7804 | Medium | 6.1 | 2026-09-09 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpf_fid' parameter in all versions up t… |
CVE-2026-77187 | Medium | 6.4 | 2026-09-09 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes in a… |
CVE-2026-77186 | Medium | 6.4 | 2026-09-09 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions… |
CVE-2026-75966 | Medium | 6.4 | 2026-09-09 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter in all ver… |
CVE-2026-6485 | High | 8.2 | 2026-09-09 | UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts. |
CVE-2026-57825 | Medium | 5.7 | 2026-09-09 | In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files. |
CVE-2026-49315 | High | 7.1 | 2026-09-09 | DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-49314 | High | 7.3 | 2026-09-09 | OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-49313 | Medium | 5.5 | 2026-09-09 | Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-49312 | Medium | 4.0 | 2026-09-09 | Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-49311 | Medium | 6.2 | 2026-09-09 | Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability. |