2026 CVEs (page 26)
Page 26 of 661 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-96533 | Medium | 5.8 | 2026-09-26 | The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-side and storing the response as a publi… |
CVE-2026-96532 | High | 7.5 | 2026-09-26 | The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form… |
CVE-2026-96531 | Medium | 6.8 | 2026-09-26 | The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-player block before rendering them onto the block's wrapper e… |
CVE-2026-96526 | Low | 2.7 | 2026-09-26 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing u… |
CVE-2026-96525 | Low | 2.7 | 2026-09-26 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on its workflow create, update and del… |
CVE-2026-96524 | High | 8.8 | 2026-09-26 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated requests when a con… |
CVE-2026-92411 | Medium | 6.8 | 2026-09-26 | The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name taken from user-supplied recipe block data before rendering it o… |
CVE-2026-89237 | Medium | 6.8 | 2026-09-26 | The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated… |
CVE-2026-85081 | High | 7.5 | 2026-09-26 | The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly… |
CVE-2026-84097 | Medium | 6.5 | 2026-09-26 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, bef… |
CVE-2026-84096 | High | 8.0 | 2026-09-26 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and th… |
CVE-2026-84095 | High | 8.0 | 2026-09-26 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is genera… |
CVE-2026-19708 | Medium | 5.9 | 2026-09-26 | The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes t… |
CVE-2026-18143 | Critical | 9.8 | 2026-09-26 | The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the `afrfq_subm… |
CVE-2026-16591 | High | 7.2 | 2026-09-26 | The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields before outputting them in page attribu… |
CVE-2026-11871 | Medium | 5.3 | 2026-09-26 | The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team me… |
CVE-2026-15273 | Medium | 6.4 | 2026-09-26 | The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient input sanitization… |
CVE-2026-100599 | High | 8.8 | 2026-09-26 | OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts… |
CVE-2026-100598 | High | 7.1 | 2026-09-26 | OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured… |
CVE-2026-100597 | High | 7.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation ope… |
CVE-2026-100596 | High | 8.8 | 2026-09-26 | OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Atta… |
CVE-2026-100595 | Medium | 6.5 | 2026-09-26 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to acce… |
CVE-2026-100594 | Medium | 6.5 | 2026-09-26 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and… |
CVE-2026-100593 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/activation` policy changes in group c… |
CVE-2026-100592 | Medium | 6.3 | 2026-09-26 | OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. A… |
CVE-2026-100591 | Medium | 6.3 | 2026-09-26 | OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non… |
CVE-2026-100590 | Medium | 4.3 | 2026-09-26 | OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gat… |
CVE-2026-100589 | High | 8.3 | 2026-09-26 | OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actio… |
CVE-2026-100588 | High | 8.3 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.i… |
CVE-2026-100587 | High | 8.8 | 2026-09-26 | OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can i… |
CVE-2026-100586 | High | 8.8 | 2026-09-26 | OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command… |
CVE-2026-100585 | High | 8.0 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered throug… |
CVE-2026-100584 | Medium | 6.7 | 2026-09-26 | OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist m… |
CVE-2026-100583 | Medium | 4.3 | 2026-09-26 | OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retri… |
CVE-2026-100582 | Medium | 6.5 | 2026-09-26 | OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channe… |
CVE-2026-100581 | Medium | 5.5 | 2026-09-26 | OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access… |
CVE-2026-100580 | High | 8.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the age… |
CVE-2026-100579 | High | 7.6 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action. In identity-bearing Gateway deployments (authentic… |
CVE-2026-100578 | High | 7.6 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure tools exposed through the chat.send endpoint. In Gateway deployme… |
CVE-2026-100577 | Medium | 6.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious o… |
CVE-2026-100576 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protectio… |
CVE-2026-100575 | High | 8.8 | 2026-09-26 | OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack a… |
CVE-2026-100574 | Medium | 5.9 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. For fetches that use the… |
CVE-2026-100573 | Low | 3.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to in… |
CVE-2026-100572 | Medium | 5.3 | 2026-09-26 | OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw p… |
CVE-2026-100571 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and… |
CVE-2026-100570 | High | 7.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDK_PYTHON_ARGS environment varia… |
CVE-2026-100569 | Medium | 5.5 | 2026-09-26 | OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable filter did not block variables ending i… |
CVE-2026-100568 | High | 8.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute owne… |
CVE-2026-100567 | High | 8.2 | 2026-09-26 | OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and < 2026.8.1, the Gateway validated a single DNS resolution r… |
CVE-2026-100566 | Medium | 6.5 | 2026-09-26 | OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllow… |
CVE-2026-100564 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can i… |
CVE-2026-100563 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control U… |
CVE-2026-100562 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write callers to modify se… |
CVE-2026-100561 | High | 8.0 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a co… |
CVE-2026-100560 | High | 7.5 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on… |
CVE-2026-100559 | High | 8.0 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to exe… |
CVE-2026-100558 | High | 7.5 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response so… |
CVE-2026-100557 | High | 8.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner… |
CVE-2026-100556 | Medium | 6.3 | 2026-09-26 | OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender… |
CVE-2026-100555 | High | 7.1 | 2026-09-26 | OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gatew… |
CVE-2026-100554 | Medium | 4.2 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. N… |
CVE-2026-100553 | Medium | 4.3 | 2026-09-26 | OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can… |
CVE-2026-100552 | High | 8.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level to… |
CVE-2026-100551 | High | 8.3 | 2026-09-26 | OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enforced the saved Gate… |
CVE-2026-100550 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a… |
CVE-2026-100549 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded… |
CVE-2026-100548 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding… |
CVE-2026-100547 | Medium | 5.5 | 2026-09-26 | OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid `file:` URL spellin… |
CVE-2026-100546 | Medium | 6.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent contro… |
CVE-2026-100545 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, fi… |
CVE-2026-100544 | High | 8.8 | 2026-09-26 | openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity… |
CVE-2026-100543 | High | 7.5 | 2026-09-26 | OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configurati… |
CVE-2026-100542 | Low | 3.1 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffix… |
CVE-2026-100541 | High | 7.5 | 2026-09-26 | OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix user IDs — including historical loca… |
CVE-2026-100540 | Medium | 6.8 | 2026-09-26 | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can… |
CVE-2026-100539 | Low | 2.6 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search… |
CVE-2026-100538 | Medium | 6.5 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attac… |
CVE-2026-100537 | Low | 3.1 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In de… |
CVE-2026-100536 | Medium | 6.5 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behin… |
CVE-2026-100535 | High | 7.5 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-d… |
CVE-2026-100534 | Low | 3.1 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sess… |
CVE-2026-100533 | Medium | 5.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize va… |
CVE-2026-100532 | High | 8.1 | 2026-09-26 | @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owne… |
CVE-2026-100531 | Medium | 6.5 | 2026-09-26 | The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to… |
CVE-2026-100530 | High | 7.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directo… |
CVE-2026-100529 | Medium | 6.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse… |
CVE-2026-100528 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party p… |
CVE-2026-100527 | Medium | 5.3 | 2026-09-26 | OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pendi… |
CVE-2026-100526 | Medium | 5.3 | 2026-09-26 | OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker uploa… |
CVE-2026-100525 | Medium | 4.3 | 2026-09-26 | The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authentic… |
CVE-2026-100524 | Medium | 5.4 | 2026-09-26 | Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attackers to perform state-changing actions wit… |
CVE-2026-100523 | Medium | 6.1 | 2026-09-26 | Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter without domain validation. Unauthentica… |
CVE-2026-100522 | Medium | 6.1 | 2026-09-26 | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is not properly escaped before output in t… |
CVE-2026-100521 | Medium | 6.1 | 2026-09-26 | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript esca… |
CVE-2026-100520 | High | 8.8 | 2026-09-26 | Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write ar… |
CVE-2026-100505 | Medium | 4.4 | 2026-09-26 | Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UT… |
CVE-2026-100504 | High | 7.0 | 2026-09-26 | Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift… |
CVE-2026-100503 | Low | 3.3 | 2026-09-26 | Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect… |
CVE-2026-96795 | High | 8.8 | 2026-09-25 | Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns PO… |