2026 CVEs (page 632)
Page 632 of 663 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1843 | High | 7.2 | 2026-02-14 | The Super Page Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Activity Log in all versions up to, and including, 5.2.2 due to… |
CVE-2026-1258 | Medium | 4.9 | 2026-02-14 | The Mail Mint plugin for WordPress is vulnerable to blind SQL Injection via the 'forms', 'automation', 'email/templates', and 'contacts/import/tutorlms/map' AP… |
CVE-2026-1254 | Medium | 4.3 | 2026-02-14 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6… |
CVE-2026-1249 | Medium | 5.0 | 2026-02-14 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery in versions 5.3 to 5.10… |
CVE-2026-0550 | Medium | 6.4 | 2026-02-14 | The myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mycred_load_coupon' shortcode in all versions up to, and includi… |
CVE-2026-2024 | High | 7.5 | 2026-02-14 | The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 0.4.1 due to insuff… |
CVE-2026-2022 | Medium | 4.3 | 2026-02-14 | The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'rednao_smart_forms_get_campaigns' A… |
CVE-2026-1988 | High | 7.5 | 2026-02-14 | The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.5 via th… |
CVE-2026-1987 | Medium | 5.4 | 2026-02-14 | The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.1.6. This is due to the `sc… |
CVE-2026-1985 | Medium | 6.4 | 2026-02-14 | The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gutenberg block in all versions up to, and including, 1.0.2. Thi… |
CVE-2026-1944 | Medium | 5.3 | 2026-02-14 | The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cbk_save() f… |
CVE-2026-1939 | Medium | 6.4 | 2026-02-14 | The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `percent_to_graph` shortcode in all versions up to, and incl… |
CVE-2026-1915 | Medium | 6.4 | 2026-02-14 | The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' parameter in the 'plyr' shortcode in all versions up to, and… |
CVE-2026-1910 | Medium | 6.4 | 2026-02-14 | The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lang' attribute of the 'upmenu-menu' sh… |
CVE-2026-1905 | Medium | 6.4 | 2026-02-14 | The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in the 'show_sphere_image' shortcode in all vers… |
CVE-2026-1903 | Medium | 6.4 | 2026-02-14 | The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout' attribute of the 'sb_ravelry_designs' shortcode i… |
CVE-2026-1901 | Medium | 6.4 | 2026-02-14 | The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'questionpro' shortcode in all versions up to, and including… |
CVE-2026-1796 | Medium | 6.1 | 2026-02-14 | The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 1.0.0 due to insuffi… |
CVE-2026-1795 | Medium | 6.1 | 2026-02-14 | The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL Path in all versions up to, and including, 1.0.0 due to in… |
CVE-2026-1792 | Medium | 6.1 | 2026-02-14 | The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path in all versions up to, and including, 1.0 due to insufficient… |
CVE-2026-1394 | Medium | 4.3 | 2026-02-14 | The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonc… |
CVE-2026-1306 | Critical | 9.8 | 2026-02-14 | The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action… |
CVE-2026-1303 | Medium | 5.3 | 2026-02-14 | The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capabil… |
CVE-2026-1187 | Medium | 6.4 | 2026-02-14 | The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filename' parameter of the 'zoomify' shortcode in all versions up… |
CVE-2026-1096 | Medium | 6.4 | 2026-02-14 | The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google_map_vi… |
CVE-2026-0753 | High | 7.2 | 2026-02-14 | The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and inc… |
CVE-2026-0751 | Medium | 6.4 | 2026-02-14 | The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricing_plan_select_text_font_family' par… |
CVE-2026-0745 | Medium | 5.5 | 2026-02-14 | The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL vali… |
CVE-2026-0736 | Medium | 6.4 | 2026-02-14 | The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_inpost_head_script[synth_header_script]'… |
CVE-2026-0735 | Medium | 4.4 | 2026-02-14 | The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_language_switch' parameter in all versions… |
CVE-2026-0727 | Medium | 5.4 | 2026-02-14 | The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the p… |
CVE-2026-0693 | Medium | 4.4 | 2026-02-14 | The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category descriptions in all versions up to, and… |
CVE-2026-0559 | Medium | 6.4 | 2026-02-14 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stm… |
CVE-2026-0557 | Medium | 6.4 | 2026-02-14 | The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpda_app' shortcode in all versions up to, and including… |
CVE-2026-1932 | Medium | 5.3 | 2026-02-14 | The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th… |
CVE-2026-2469 | High | 7.6 | 2026-02-14 | Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Com… |
CVE-2026-2144 | High | 8.1 | 2026-02-14 | The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugi… |
CVE-2026-2027 | Medium | 4.4 | 2026-02-14 | The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AMP Custom CSS setting in all… |
CVE-2026-1983 | Medium | 4.3 | 2026-02-14 | The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to… |
CVE-2026-1912 | Medium | 6.4 | 2026-02-14 | The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in the 'ctdoi' shortcode in all versions up to… |
CVE-2026-1904 | Medium | 6.4 | 2026-02-14 | The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'accordion' shortcode in a… |
CVE-2026-1754 | Medium | 6.1 | 2026-02-14 | The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.3 d… |
CVE-2026-1164 | Medium | 6.1 | 2026-02-14 | The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2.5 d… |
CVE-2026-0692 | High | 7.5 | 2026-02-14 | The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is d… |
CVE-2026-24853 | High | 8.1 | 2026-02-13 | Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not al… |
CVE-2026-26273 | Critical | 9.8 | 2026-02-13 | Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks… |
CVE-2026-1844 | High | 7.2 | 2026-02-13 | The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' paramet… |
CVE-2026-1841 | High | 7.2 | 2026-02-13 | The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter… |
CVE-2026-26335 | Critical | 9.8 | 2026-02-13 | Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program File… |
CVE-2026-26334 | High | 7.8 | 2026-02-13 | Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys… |
CVE-2026-26333 | Critical | 9.8 | 2026-02-13 | Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs (inc… |
CVE-2026-26269 | Medium | 5.4 | 2026-02-13 | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing… |
CVE-2026-2441 | High | 8.8 | 2026-02-13 | Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2026-26264 | High | 8.1 | 2026-02-13 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigg… |
CVE-2026-26208 | High | 7.8 | 2026-02-13 | ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Executio… |
CVE-2026-26190 | Critical | 9.8 | 2026-02-13 | Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enabl… |
CVE-2026-26187 | High | 8.1 | 2026-02-13 | lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local block adapter (pkg/block/local/adapter.go… |
CVE-2026-25991 | High | 7.7 | 2026-02-13 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Request Forge… |
CVE-2026-25964 | Medium | 4.9 | 2026-02-13 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a Path Traversal vulnerability in the Reci… |
CVE-2026-21878 | High | 7.5 | 2026-02-13 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's f… |
CVE-2026-21870 | Medium | 5.5 | 2026-02-13 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. In 1.4.2, 1.5.0.rc2, and… |
CVE-2026-2026 | Medium | 6.1 | 2026-02-13 | A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially per… |
CVE-2026-26268 | High | 8.0 | 2026-02-13 | Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (… |
CVE-2026-26226 | | 2026-02-13 | beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controll… | |
CVE-2026-26221 | Critical | 9.8 | 2026-02-13 | Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can… |
CVE-2026-25531 | Medium | 4.3 | 2026-02-13 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::d… |
CVE-2026-1578 | | 2026-02-13 | HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the application via mobile devices. HP is releasin… | |
CVE-2026-23112 | Critical | 9.8 | 2026-02-13 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() cou… |
CVE-2026-23111 | High | 7.8 | 2026-02-13 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_c… |
CVE-2026-1619 | High | 8.3 | 2026-02-13 | Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issu… |
CVE-2026-1618 | High | 8.8 | 2026-02-13 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affec… |
CVE-2026-2443 | Medium | 5.3 | 2026-02-13 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may impr… |
CVE-2026-22892 | Medium | 4.3 | 2026-02-13 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, w… |
CVE-2026-20796 | Low | 3.1 | 2026-02-13 | Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team… |
CVE-2026-0872 | | 2026-02-13 | Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation. This issu… | |
CVE-2026-25108 | High | 8.8 | 2026-02-13 | FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP requ… |
CVE-2026-1721 | | 2026-02-13 | Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handler. The `error_description` query param… | |
CVE-2026-26188 | Medium | 5.4 | 2026-02-12 | Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject… |
CVE-2026-26225 | | 2026-02-12 | Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation… | |
CVE-2026-26224 | | 2026-02-12 | Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains… | |
CVE-2026-26185 | Medium | 5.3 | 2026-02-12 | Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enumeration vulnerability exists in the pa… |
CVE-2026-26076 | High | 7.5 | 2026-02-12 | ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases (2-4 times above nor… |
CVE-2026-26075 | Medium | 5.4 | 2026-02-12 | FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisition request… |
CVE-2026-26069 | High | 7.5 | 2026-02-12 | Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the expo… |
CVE-2026-26068 | Critical | 9.9 | 2026-02-12 | emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted dur… |
CVE-2026-26056 | High | 8.8 | 2026-02-12 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) compon… |
CVE-2026-26055 | High | 7.5 | 2026-02-12 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) compon… |
CVE-2026-25828 | Medium | 5.4 | 2026-02-12 | grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root paramet… |
CVE-2026-1358 | Critical | 9.8 | 2026-02-12 | Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges. This could allow an una… |
CVE-2026-26020 | High | 8.8 | 2026-02-12 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.4… |
CVE-2026-26011 | Critical | 9.8 | 2026-02-12 | navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulnerability exists in Nav2 AMCL's particle… |
CVE-2026-26005 | Medium | 5.0 | 2026-02-12 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Play allows creating video entries that reference e… |
CVE-2026-26000 | Medium | 6.1 | 2026-02-12 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible u… |
CVE-2026-25996 | Critical | 9.8 | 2026-02-12 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields fro… |
CVE-2026-0619 | | 2026-02-12 | A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to trigger a denial of service. A hard rese… | |
CVE-2026-25949 | High | 7.5 | 2026-02-12 | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticate… |
CVE-2026-25933 | Medium | 6.8 | 2026-02-12 | Arduino App Lab is a cross-platform IDE for developing Arduino Apps. Prior to 0.4.0, a vulnerability was identified in the Terminal component of the arduino-ap… |
CVE-2026-25922 | High | 8.8 | 2026-02-12 | authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source that has the option Verify Assertion Signa… |
CVE-2026-25768 | Medium | 6.5 | 2026-02-12 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have ac… |
CVE-2026-25767 | High | 8.1 | 2026-02-12 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.8, an authenticated user, with the “Policymaker” tag, could create shovels bypassing… |