2026 CVEs (page 248)
Page 248 of 691 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19967 | Medium | 6.3 | 2026-08-17 | A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code… |
CVE-2026-19966 | Medium | 5.4 | 2026-08-17 | A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_conta… |
CVE-2026-19965 | Low | 3.7 | 2026-08-17 | A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server… |
CVE-2026-19964 | Medium | 5.5 | 2026-08-17 | A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_chec… |
CVE-2026-19963 | High | 7.4 | 2026-08-17 | A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the a… |
CVE-2026-19962 | High | 7.4 | 2026-08-17 | A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of… |
CVE-2026-19961 | Critical | 9.9 | 2026-08-16 | A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulati… |
CVE-2026-19960 | High | 7.4 | 2026-08-16 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation… |
CVE-2026-19959 | Critical | 9.9 | 2026-08-16 | A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation… |
CVE-2026-19958 | Medium | 6.3 | 2026-08-16 | A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the com… |
CVE-2026-19957 | Medium | 6.3 | 2026-08-16 | A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpo… |
CVE-2026-19956 | Medium | 6.3 | 2026-08-16 | A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. S… |
CVE-2026-19955 | Low | 3.5 | 2026-08-16 | A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results… |
CVE-2026-74797 | Low | 3.1 | 2026-08-16 | OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provid… |
CVE-2026-74796 | Medium | 6.1 | 2026-08-16 | OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a… |
CVE-2026-74795 | High | 7.5 | 2026-08-16 | Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth l… |
CVE-2026-74794 | High | 7.5 | 2026-08-16 | Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers c… |
CVE-2026-74792 | High | 7.5 | 2026-08-16 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers… |
CVE-2026-74791 | High | 8.6 | 2026-08-16 | Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused c… |
CVE-2026-74790 | Critical | 9.1 | 2026-08-16 | Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose memb… |
CVE-2026-74789 | High | 7.5 | 2026-08-16 | Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-… |
CVE-2026-74788 | High | 7.5 | 2026-08-16 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string.pad_left and string.pad_right template… |
CVE-2026-74787 | High | 7.5 | 2026-08-16 | Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference det… |
CVE-2026-74786 | Medium | 6.5 | 2026-08-16 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString safety limit (default 1MB) can be bypas… |
CVE-2026-74785 | Medium | 6.5 | 2026-08-16 | Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded… |
CVE-2026-74784 | | 2026-08-16 | Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLi… | |
CVE-2026-74783 | High | 7.5 | 2026-08-16 | Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressio… |
CVE-2026-73062 | High | 7.5 | 2026-08-16 | Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing Loo… |
CVE-2026-73061 | Critical | 9.8 | 2026-08-16 | Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without s… |
CVE-2026-73060 | High | 7.5 | 2026-08-16 | Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator that bypasses LoopLimit when the left… |
CVE-2026-73059 | Medium | 6.5 | 2026-08-16 | stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChannel permission instead of requiring Read… |
CVE-2026-73058 | Medium | 5.8 | 2026-08-16 | stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protection… |
CVE-2026-73057 | High | 7.5 | 2026-08-16 | stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Att… |
CVE-2026-73056 | Critical | 9.8 | 2026-08-16 | SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middl… |
CVE-2026-72888 | Medium | 6.5 | 2026-08-16 | Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_require. smart_require stores results i… |
CVE-2026-72887 | Critical | 9.8 | 2026-08-16 | Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token. Passing a call… |
CVE-2026-19349 | Critical | 9.8 | 2026-08-16 | Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth… |
CVE-2026-74251 | | 2026-08-16 | Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET a… | |
CVE-2026-74578 | High | 7.1 | 2026-08-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processing on trees without ctx->state The AIO… |
CVE-2026-2497 | High | 7.2 | 2026-08-16 | The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, a… |
CVE-2026-2357 | Medium | 6.4 | 2026-08-16 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcode' shortcode in all versions up to, and… |
CVE-2026-18347 | Medium | 4.3 | 2026-08-16 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… |
CVE-2026-17608 | Medium | 6.5 | 2026-08-16 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin… |
CVE-2026-17604 | Medium | 4.9 | 2026-08-16 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including… |
CVE-2026-17087 | High | 7.5 | 2026-08-16 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inclu… |
CVE-2026-13424 | High | 7.2 | 2026-08-16 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via bookly_speed_up_update_addo… |
CVE-2026-12998 | Medium | 5.3 | 2026-08-16 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… |
CVE-2026-10734 | High | 7.2 | 2026-08-16 | The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in all versions up to, and including, 2.15.2… |
CVE-2026-9767 | Medium | 6.5 | 2026-08-16 | The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions… |
CVE-2026-2283 | Medium | 4.9 | 2026-08-16 | The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions up to, and including, 2.1.7. This is due… |
CVE-2026-19934 | Medium | 6.3 | 2026-08-16 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of… |
CVE-2026-19728 | High | 7.5 | 2026-08-16 | The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file be… |
CVE-2026-19726 | Medium | 6.5 | 2026-08-16 | The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role a… |
CVE-2026-19725 | Critical | 9.1 | 2026-08-16 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to bu… |
CVE-2026-19717 | High | 7.5 | 2026-08-16 | The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unau… |
CVE-2026-19714 | Critical | 9.1 | 2026-08-16 | The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to… |
CVE-2026-19712 | Medium | 6.1 | 2026-08-16 | The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role… |
CVE-2026-19711 | Medium | 6.5 | 2026-08-16 | The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any au… |
CVE-2026-19613 | Medium | 6.5 | 2026-08-16 | The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field value… |
CVE-2026-18653 | High | 7.2 | 2026-08-16 | The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perf… |
CVE-2026-18402 | Medium | 6.4 | 2026-08-16 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortc… |
CVE-2026-18316 | Critical | 9.1 | 2026-08-16 | The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() functio… |
CVE-2026-17582 | Medium | 4.9 | 2026-08-16 | The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate() fu… |
CVE-2026-17581 | High | 7.2 | 2026-08-16 | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions u… |
CVE-2026-17533 | High | 7.2 | 2026-08-16 | The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisit… |
CVE-2026-16775 | Medium | 6.4 | 2026-08-16 | The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Att… |
CVE-2026-16758 | Medium | 6.4 | 2026-08-16 | The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 5.2.0 d… |
CVE-2026-15790 | Medium | 6.4 | 2026-08-16 | The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.4 via the 'emd_mb_meta' shortcode… |
CVE-2026-15604 | Medium | 6.4 | 2026-08-16 | The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.10 via the 'series_bg_color' post… |
CVE-2026-15384 | Medium | 5.7 | 2026-08-16 | The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the authenticated AJAX action that crops atta… |
CVE-2026-15351 | Medium | 4.9 | 2026-08-16 | The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to generic SQL Injection via the 'status'… |
CVE-2026-15345 | Medium | 4.3 | 2026-08-16 | The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl… |
CVE-2026-15056 | Medium | 6.5 | 2026-08-16 | The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin for WordPress is vulnerable to Directory Traversal in all v… |
CVE-2026-13712 | Medium | 5.4 | 2026-08-16 | The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allow… |
CVE-2026-10035 | Medium | 6.6 | 2026-08-16 | The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.1 via deserialization o… |
CVE-2026-19933 | Medium | 6.3 | 2026-08-16 | A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Sea… |
CVE-2026-19932 | Medium | 6.3 | 2026-08-16 | A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of… |
CVE-2026-18432 | Critical | 9.8 | 2026-08-16 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exi… |
CVE-2026-18385 | Medium | 5.4 | 2026-08-16 | The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerabl… |
CVE-2026-17123 | High | 8.8 | 2026-08-16 | The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder wi… |
CVE-2026-16779 | Medium | 4.3 | 2026-08-16 | The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not… |
CVE-2026-16099 | High | 8.8 | 2026-08-16 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_link_item fu… |
CVE-2026-16098 | Critical | 9.8 | 2026-08-16 | The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpl… |
CVE-2026-16079 | Medium | 6.5 | 2026-08-16 | The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content in all versions up to, and including… |
CVE-2026-15963 | Medium | 6.5 | 2026-08-16 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randon_category' Quiz Option in… |
CVE-2026-15726 | Medium | 6.4 | 2026-08-16 | The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in all versions up to, and including, 1.4… |
CVE-2026-15602 | Medium | 4.9 | 2026-08-16 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all ve… |
CVE-2026-15441 | Medium | 5.3 | 2026-08-16 | The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptop_scroll_offset' shortcode… |
CVE-2026-15066 | Medium | 6.4 | 2026-08-16 | The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File Extracted Comments in all versions up to, and including, 2.8.7… |
CVE-2026-15009 | Medium | 6.1 | 2026-08-16 | The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting… |
CVE-2026-15002 | High | 7.2 | 2026-08-16 | The Platnosci Online Blue Media (Autopay) plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.0 via the 'bm… |
CVE-2026-14524 | Critical | 9.1 | 2026-08-16 | The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProces… |
CVE-2026-14498 | High | 8.8 | 2026-08-16 | The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter paramet… |
CVE-2026-13358 | Medium | 6.5 | 2026-08-16 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ve… |
CVE-2026-13167 | Medium | 4.3 | 2026-08-16 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all ve… |
CVE-2026-12905 | Medium | 4.3 | 2026-08-16 | The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment() method of the Mo… |
CVE-2026-12477 | Medium | 4.4 | 2026-08-16 | The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions u… |
CVE-2026-11780 | Medium | 6.4 | 2026-08-16 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'question_title' parame… |
CVE-2026-2487 | Medium | 4.4 | 2026-08-16 | The Admin Custom Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.6.4 due to… |
CVE-2026-19930 | Medium | 6.3 | 2026-08-16 | A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. T… |