| CVE-2026-107524 | HIGH | 8.8 | Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this v… | 2026-11-13 |
| CVE-2026-109092 | HIGH | 7.8 | Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.… | 2026-11-13 |
| CVE-2026-109093 | NA | N/A | A stack buffer overflow in ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X … | 2026-11-13 |
| CVE-2026-109094 | NA | N/A | A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org x… | 2026-11-13 |
| CVE-2026-109445 | CRITICAL | 9.8 | PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buf… | 2026-11-13 |
| CVE-2026-111547 | HIGH | 8.1 | Dell PowerStore contains an out-of-bounds read vulnerability. An attacker could exploit this vulnerability, po… | 2026-11-13 |
| CVE-2026-118976 | HIGH | 7.5 | In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integrati… | 2026-11-13 |
| CVE-2026-119102 | MEDIUM | 6.5 | In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, … | 2026-11-13 |
| CVE-2026-119512 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Obje… | 2026-11-13 |
| CVE-2026-119517 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaThe… | 2026-11-13 |
| CVE-2026-120835 | HIGH | 8.8 | Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-… | 2026-11-13 |
| CVE-2026-121776 | MEDIUM | 6.5 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Confi… | 2026-11-13 |
| CVE-2026-123975 | HIGH | 7.5 | Grid Community Toolkit before 6.2.20261111 (globus-gss-assist before 12.9) contains a heap out-of-bounds write… | 2026-11-13 |
| CVE-2026-124260 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N.… | 2026-11-13 |
| CVE-2026-124265 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulan… | 2026-11-13 |
| CVE-2026-124267 | HIGH | 7.5 | Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configure… | 2026-11-13 |
| CVE-2026-124272 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri … | 2026-11-13 |
| CVE-2026-124409 | MEDIUM | 5.3 | Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Confi… | 2026-11-13 |
| CVE-2026-124410 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua… | 2026-11-13 |
| CVE-2026-124412 | MEDIUM | 4.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in eLightUp Slim S… | 2026-11-13 |
| CVE-2026-124414 | MEDIUM | 5.3 | Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integra… | 2026-11-13 |
| CVE-2026-124415 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandr… | 2026-11-13 |
| CVE-2026-124418 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP… | 2026-11-13 |
| CVE-2026-124420 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisl… | 2026-11-13 |
| CVE-2026-124965 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp I… | 2026-11-13 |
| CVE-2026-124970 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE … | 2026-11-13 |
| CVE-2026-125432 | MEDIUM | 5.3 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce reca… | 2026-11-13 |
| CVE-2026-125440 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaqu… | 2026-11-13 |
| CVE-2026-125452 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Denishua… | 2026-11-13 |
| CVE-2026-125783 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.… | 2026-11-13 |
| CVE-2026-125792 | MEDIUM | 5.3 | Missing Authorization vulnerability in Andy Moyle Church Admin church-admin allows Exploiting Incorrectly Conf… | 2026-11-13 |
| CVE-2026-125794 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 E… | 2026-11-13 |
| CVE-2026-125802 | MEDIUM | 5.3 | Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force Spectra ultimate-addons-fo… | 2026-11-13 |
| CVE-2026-125807 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega H… | 2026-11-13 |
| CVE-2026-125808 | MEDIUM | 5.3 | Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Conf… | 2026-11-13 |
| CVE-2026-125809 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred m… | 2026-11-13 |
| CVE-2026-125810 | MEDIUM | 4.3 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co… | 2026-11-13 |
| CVE-2026-125811 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in myCred m… | 2026-11-13 |
| CVE-2026-125819 | MEDIUM | 5.3 | Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Inco… | 2026-11-13 |
| CVE-2026-125821 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PT Norther Ligh… | 2026-11-13 |
| CVE-2026-125824 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Go Ma… | 2026-11-13 |
| CVE-2026-125825 | MEDIUM | 5.3 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Inc… | 2026-11-13 |
| CVE-2026-125827 | MEDIUM | 5.3 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting In… | 2026-11-13 |
| CVE-2026-125831 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox … | 2026-11-13 |
| CVE-2026-125834 | MEDIUM | 4.3 | Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Acces… | 2026-11-13 |
| CVE-2026-125835 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblo… | 2026-11-13 |
| CVE-2026-125837 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thetheme… | 2026-11-13 |
| CVE-2026-125851 | CRITICAL | 9.9 | Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Hotel Booking Lite hotel-booki… | 2026-11-13 |
| CVE-2026-125852 | HIGH | 7.7 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realt… | 2026-11-13 |
| CVE-2026-125853 | MEDIUM | 6.5 | Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrect… | 2026-11-13 |