2026 CVEs (page 54)
Page 54 of 662 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-5400 | Medium | 6.4 | 2026-09-19 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values in versions up to, and including, 4.5.1… |
CVE-2026-4792 | Medium | 5.3 | 2026-09-19 | The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due to the lack of authentication and auth… |
CVE-2026-4327 | High | 8.8 | 2026-09-19 | The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1. This is due to missing authorization… |
CVE-2026-2422 | Medium | 6.4 | 2026-09-19 | The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pbwp_raw_shortcode' shortcode in all vers… |
CVE-2026-2278 | Medium | 4.3 | 2026-09-19 | The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vw_writer_blog_reset_all_se… |
CVE-2026-1984 | Medium | 5.3 | 2026-09-19 | The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a missing capability check on the 'iepa_… |
CVE-2026-1641 | Medium | 6.5 | 2026-09-19 | The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is d… |
CVE-2026-1242 | Medium | 4.3 | 2026-09-19 | The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and includin… |
CVE-2026-15947 | Medium | 4.3 | 2026-09-19 | The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_instant_indexing_settings()… |
CVE-2026-15946 | Medium | 4.3 | 2026-09-19 | The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass i… |
CVE-2026-15664 | High | 7.2 | 2026-09-19 | The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple Choice 'Oth… |
CVE-2026-15463 | Medium | 6.1 | 2026-09-19 | The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'host' parameter in all… |
CVE-2026-15098 | Medium | 6.4 | 2026-09-19 | The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lightboxtext' shortcode attribute (and other unsanitized at… |
CVE-2026-13770 | Medium | 6.4 | 2026-09-19 | The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vulnerable to Stored Cross-Site Scripting… |
CVE-2026-13200 | Medium | 6.5 | 2026-09-19 | The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficien… |
CVE-2026-13191 | Medium | 6.5 | 2026-09-19 | The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 2.5.3 due to insuffic… |
CVE-2026-12402 | Medium | 4.4 | 2026-09-19 | The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' Setting in all versions up to, and inclu… |
CVE-2026-11899 | Medium | 4.3 | 2026-09-19 | The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i… |
CVE-2026-11608 | Medium | 6.1 | 2026-09-19 | The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' parameter in all versions up to, and includi… |
CVE-2026-92435 | Medium | 5.3 | 2026-09-19 | The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback f… |
CVE-2026-92430 | Medium | 5.3 | 2026-09-19 | The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the authenticity of its PIX payment webhook be… |
CVE-2026-92425 | Medium | 5.5 | 2026-09-19 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not perform object-level authorisation checks on several of it… |
CVE-2026-92421 | Medium | 4.7 | 2026-09-19 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the host record being modified belongs to the… |
CVE-2026-92420 | Low | 3.8 | 2026-09-19 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does not verify that a booking belongs to the requesting user befor… |
CVE-2026-92404 | High | 7.5 | 2026-09-19 | The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowing unauthenticated users to retrieve th… |
CVE-2026-92403 | Low | 3.7 | 2026-09-19 | The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresponds to the form that was rendered to t… |
CVE-2026-92099 | Medium | 6.5 | 2026-09-19 | The WPGraphQL Smart Cache WordPress plugin before 2.3.2 does not require authorisation or validate a caller-supplied query identifier before storing a persiste… |
CVE-2026-91847 | Medium | 4.8 | 2026-09-19 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversatio… |
CVE-2026-88926 | High | 8.6 | 2026-09-19 | The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL s… |
CVE-2026-88824 | High | 8.8 | 2026-09-19 | The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings… |
CVE-2026-86814 | High | 8.1 | 2026-09-19 | The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve… |
CVE-2026-86591 | Critical | 9.8 | 2026-09-19 | The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowing unauthenticated users to update arbi… |
CVE-2026-85680 | High | 8.8 | 2026-09-19 | The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, an… |
CVE-2026-85574 | High | 8.0 | 2026-09-19 | The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on… |
CVE-2026-84750 | Medium | 6.5 | 2026-09-19 | The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, an… |
CVE-2026-76790 | High | 7.1 | 2026-09-19 | The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a request parameter before reflecting the… |
CVE-2026-76554 | High | 7.2 | 2026-09-19 | The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and ass… |
CVE-2026-19860 | Medium | 5.5 | 2026-09-19 | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP functions can be used as a custom fie… |
CVE-2026-16557 | Medium | 4.3 | 2026-09-19 | The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJA… |
CVE-2026-93741 | Critical | 10.0 | 2026-09-19 | A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlW… |
CVE-2026-92967 | Medium | 6.1 | 2026-09-19 | The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is… |
CVE-2026-92807 | High | 8.8 | 2026-09-19 | The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions up to, and including, 4.6.1 via the `pdf… |
CVE-2026-92229 | Critical | 9.1 | 2026-09-19 | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions… |
CVE-2026-89334 | Medium | 6.5 | 2026-09-19 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to… |
CVE-2026-89333 | Medium | 6.5 | 2026-09-19 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin… |
CVE-2026-89274 | Critical | 9.1 | 2026-09-19 | The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists… |
CVE-2026-89093 | Medium | 5.3 | 2026-09-19 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Information Exposure by Spoofing in all ver… |
CVE-2026-89081 | Medium | 6.1 | 2026-09-19 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all ver… |
CVE-2026-88944 | Medium | 4.3 | 2026-09-19 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.8. Th… |
CVE-2026-87909 | High | 7.5 | 2026-09-19 | The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_magick function. This is due to insuffic… |
CVE-2026-84434 | Critical | 9.8 | 2026-09-19 | The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the upload_file function. This… |
CVE-2026-15760 | Medium | 6.5 | 2026-09-19 | The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxte_get_database_tabl… |
CVE-2026-15660 | Medium | 4.3 | 2026-09-19 | The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. This is due to a missing capability check… |
CVE-2026-13354 | High | 7.2 | 2026-09-19 | The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and includin… |
CVE-2026-12042 | Medium | 4.4 | 2026-09-19 | The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.12 du… |
CVE-2026-77820 | Medium | 6.4 | 2026-09-19 | The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all versions up to, and including, 2.9.9.0… |
CVE-2026-93923 | High | 8.8 | 2026-09-19 | SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers ca… |
CVE-2026-93922 | High | 8.8 | 2026-09-19 | SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron… |
CVE-2026-93921 | Medium | 4.3 | 2026-09-19 | SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only token holders to access document metada… |
CVE-2026-77875 | | 2026-09-19 | The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor wh… | |
CVE-2026-93740 | Critical | 10.0 | 2026-09-18 | A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulatio… |
CVE-2026-93739 | Critical | 9.9 | 2026-09-18 | A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation… |
CVE-2026-75885 | Critical | 9.3 | 2026-09-18 | A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send… |
CVE-2026-93894 | | 2026-09-18 | In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a r… | |
CVE-2026-93738 | Critical | 9.9 | 2026-09-18 | A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipula… |
CVE-2026-93574 | Medium | 6.5 | 2026-09-18 | A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size… |
CVE-2026-93562 | Medium | 6.5 | 2026-09-18 | A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smugg… |
CVE-2026-88097 | High | 8.1 | 2026-09-18 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-85272 | Medium | 4.3 | 2026-09-18 | Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extract_archive… |
CVE-2026-85271 | Medium | 6.1 | 2026-09-18 | Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the add_additional_attributes_to_… |
CVE-2026-71855 | Medium | 5.9 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, src/flow-hash… |
CVE-2026-71418 | High | 7.5 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 p… |
CVE-2026-68928 | High | 8.6 | 2026-09-18 | Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported… |
CVE-2026-63452 | High | 7.5 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser… |
CVE-2026-63451 | Low | 3.3 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplie… |
CVE-2026-63450 | Low | 3.7 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app… |
CVE-2026-63449 | Low | 3.7 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in… |
CVE-2026-63448 | Medium | 5.9 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser… |
CVE-2026-63447 | High | 7.5 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in… |
CVE-2026-63446 | High | 7.5 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSet… |
CVE-2026-61670 | Medium | 6.5 | 2026-09-18 | microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values i… |
CVE-2026-57229 | Medium | 5.3 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME par… |
CVE-2026-57228 | High | 8.2 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME q… |
CVE-2026-57227 | High | 7.5 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQ… |
CVE-2026-57225 | Low | 3.3 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-cont… |
CVE-2026-57223 | High | 7.0 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows se… |
CVE-2026-93873 | Medium | 4.3 | 2026-09-18 | Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-sub… |
CVE-2026-93872 | High | 7.5 | 2026-09-18 | Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restriction in the comments plugin EditAction. Registered users w… |
CVE-2026-93871 | Medium | 5.4 | 2026-09-18 | Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticated users with page creation or edit perm… |
CVE-2026-93870 | Medium | 4.3 | 2026-09-18 | Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated use… |
CVE-2026-93869 | Medium | 6.1 | 2026-09-18 | Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect destinations using a regular expression l… |
CVE-2026-93868 | High | 8.1 | 2026-09-18 | Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creating a predictable token space of approxi… |
CVE-2026-93841 | Low | 3.7 | 2026-09-18 | vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset w… |
CVE-2026-93840 | Low | 3.7 | 2026-09-18 | vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_allowed_token_ids(). A… |
CVE-2026-93839 | Critical | 9.8 | 2026-09-18 | LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register… |
CVE-2026-93838 | Medium | 5.9 | 2026-09-18 | SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_R… |
CVE-2026-93031 | High | 8.8 | 2026-09-18 | The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all version… |
CVE-2026-92708 | High | 7.5 | 2026-09-18 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In versions 5.1.0 through 5.9.2, s… |
CVE-2026-91205 | Medium | 6.0 | 2026-09-18 | A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a… |
CVE-2026-91203 | Medium | 6.0 | 2026-09-18 | A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged f… |