| CVE-2026-17395 | MEDIUM | 6.4 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17396 | CRITICAL | 9.6 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17397 | HIGH | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17398 | HIGH | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17399 | CRITICAL | 9.9 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17400 | HIGH | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17401 | HIGH | 7.2 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17402 | CRITICAL | 9.9 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17403 | CRITICAL | 9.0 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain… | 2026-11-07 |
| CVE-2026-17404 | HIGH | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17405 | HIGH | 8.8 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17406 | HIGH | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17407 | HIGH | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17408 | CRITICAL | 9.8 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to exec… | 2026-11-07 |
| CVE-2026-17409 | CRITICAL | 9.4 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to exec… | 2026-11-07 |
| CVE-2026-17410 | CRITICAL | 9.9 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-17411 | HIGH | 7.6 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker… | 2026-11-07 |
| CVE-2026-17428 | MEDIUM | 5.0 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated at… | 2026-11-07 |
| CVE-2026-18535 | CRITICAL | 9.6 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expressio… | 2026-11-07 |
| CVE-2026-18689 | MEDIUM | 4.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to … | 2026-11-07 |
| CVE-2026-18836 | CRITICAL | 9.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obta… | 2026-11-07 |
| CVE-2026-18838 | CRITICAL | 9.4 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and mo… | 2026-11-07 |
| CVE-2026-19121 | HIGH | 8.3 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access du… | 2026-11-07 |
| CVE-2026-19122 | LOW | 3.8 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorize… | 2026-11-07 |
| CVE-2026-19124 | MEDIUM | 6.8 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensi… | 2026-11-07 |
| CVE-2026-19126 | MEDIUM | 5.9 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptograph… | 2026-11-07 |
| CVE-2026-19128 | HIGH | 7.5 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests … | 2026-11-07 |
| CVE-2026-19129 | MEDIUM | 6.8 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a network-positioned atta… | 2026-11-07 |
| CVE-2026-19131 | MEDIUM | 6.5 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read… | 2026-11-07 |
| CVE-2026-75590 | HIGH | 7.2 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources a… | 2026-11-07 |
| CVE-2026-93779 | MEDIUM | 6.5 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Obj… | 2026-11-07 |
| CVE-2026-93902 | MEDIUM | 6.4 | The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via Social Profile Fields in all … | 2026-11-07 |
| CVE-2026-9601 | MEDIUM | 6.4 | The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… | 2026-11-07 |
| CVE-2025-15708 | NA | N/A | The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type sl… | 2026-11-07 |
| CVE-2026-117525 | NA | N/A | The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortcode attribute values … | 2026-11-07 |
| CVE-2026-117588 | NA | N/A | The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its … | 2026-11-07 |
| CVE-2026-118528 | NA | N/A | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does no… | 2026-11-07 |
| CVE-2026-118529 | NA | N/A | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does no… | 2026-11-07 |
| CVE-2026-118530 | NA | N/A | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does no… | 2026-11-07 |
| CVE-2026-118532 | NA | N/A | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does no… | 2026-11-07 |
| CVE-2026-118533 | NA | N/A | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does no… | 2026-11-07 |
| CVE-2026-118534 | NA | N/A | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does no… | 2026-11-07 |
| CVE-2026-119073 | NA | N/A | The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its po… | 2026-11-07 |
| CVE-2026-121379 | NA | N/A | The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored pr… | 2026-11-07 |
| CVE-2026-121380 | NA | N/A | The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowin… | 2026-11-07 |
| CVE-2026-121491 | NA | N/A | The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it i… | 2026-11-07 |
| CVE-2026-121492 | NA | N/A | The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, … | 2026-11-07 |
| CVE-2026-121796 | NA | N/A | The Add From Server Lite WordPress plugin before 6.0.0 does not restrict SVG uploads to users allowed to post … | 2026-11-07 |
| CVE-2026-121848 | NA | N/A | The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authoris… | 2026-11-07 |
| CVE-2026-121857 | NA | N/A | The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage Woo… | 2026-11-07 |