CVE IDSeverityCVSSDescriptionDate
CVE-2026-111962NAN/AThe WP Remote Users Sync WordPress plugin before 2.2.0 does not adequately restrict access to the user export …2026-11-04
CVE-2026-112243NAN/AThe Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not sanitise …2026-11-04
CVE-2026-112244NAN/AThe Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent d…2026-11-04
CVE-2026-114431NAN/AThe Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPre…2026-11-04
CVE-2026-115241NAN/AThe WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a submitted sna…2026-11-04
CVE-2026-115242NAN/AThe WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the staging destin…2026-11-04
CVE-2026-115243NAN/AThe WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of t…2026-11-04
CVE-2026-115250NAN/AThe Text Typing WordPress plugin before 2.2.2 does not properly sanitize and escape a block attribute before …2026-11-04
CVE-2026-115257NAN/AThe WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its …2026-11-04
CVE-2026-115262NAN/AThe Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict …2026-11-04
CVE-2026-115426NAN/AThe WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly validate a backup …2026-11-04
CVE-2026-118403NAN/AThe Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order befo…2026-11-04
CVE-2026-118404NAN/AThe Premium Packages WordPress plugin before 7.3.1 does not verify ownership or session binding when loading …2026-11-04
CVE-2026-118407NAN/AThe Premium Packages WordPress plugin before 7.3.1 does not verify that a user claiming a guest order is the …2026-11-04
CVE-2026-118422NAN/AThe Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its sa…2026-11-04
CVE-2026-118523NAN/AThe EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-publ…2026-11-04
CVE-2026-118637NAN/AThe Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the conten…2026-11-04
CVE-2026-118783NAN/AThe All-in-One Video Gallery WordPress plugin before 5.0.0 does not validate and escape some of its shortcode…2026-11-04
CVE-2026-118983NAN/AThe VikWidgetsLoader WordPress plugin before 1.12.3 does not sanitise or escape several block attributes befo…2026-11-04
CVE-2026-11749NAN/AA vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced …2026-11-04
CVE-2026-11753NAN/AA vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayS…2026-11-04
CVE-2026-16511HIGH8.8Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0), did no…2026-11-04
CVE-2026-77690HIGH8.8ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerabili…2026-11-04
CVE-2026-77779HIGH7.7ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability…2026-11-04
CVE-2026-85036MEDIUM5.7The Bluetooth Classic AVDTP layer defers releasing a session's stream endpoints: bt_avdtp_l2cap_disconnected()…2026-11-04
CVE-2026-87038HIGH7.0The user-mode verification handler for the i3c_transfer() system call, z_vrfy_i3c_transfer() in drivers/i3c/i3…2026-11-04
CVE-2026-87039HIGH7.8The user-mode syscall verifier z_vrfy_i2s_configure() in drivers/i2s/i2s_handlers.c copies the caller's struct…2026-11-04
CVE-2026-87040HIGH8.3The nRF link-layer receive paths of the open-source Bluetooth LE Controller did not validate the on-air LENGTH…2026-11-04
CVE-2026-87041HIGH7.8The RTIO submission-queue verifier rtio_vrfy_sqe() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c…2026-11-04
CVE-2026-87043MEDIUM4.8The entropy-device random number generator in subsys/random/random_entropy_device.c returned early with -ENODE…2026-11-04
CVE-2026-87044MEDIUM6.5The Mbed TLS crypto shim driver in drivers/crypto/crypto_mbedtls_shim.c drives PSA multipart cipher and AEAD o…2026-11-04
CVE-2026-121816HIGH8.8Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticate…2026-11-04
CVE-2026-121817HIGH7.5Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability.…2026-11-04
CVE-2026-121818HIGH7.8Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local at…2026-11-04
CVE-2026-54851HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesomem…2026-11-04
CVE-2026-62000HIGH7.5Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting…2026-11-04
CVE-2026-110944NAN/AResource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server.…2026-11-04
CVE-2026-119366HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Advanced…2026-11-04
CVE-2026-119477HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N.…2026-11-04
CVE-2026-54861HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila T…2026-11-04
CVE-2026-56065HIGH7.5Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doo…2026-11-04
CVE-2026-57639HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roland M…2026-11-04
CVE-2026-57666HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila T…2026-11-04
CVE-2026-57775MEDIUM5.3Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile s…2026-11-04
CVE-2026-62007HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimite…2026-11-04
CVE-2026-62126HIGH7.5Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On minior…2026-11-04
CVE-2026-114420NAN/ASEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated acco…2026-11-04
CVE-2026-114421NAN/ASEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA acco…2026-11-04
CVE-2026-114424NAN/ASEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in …2026-11-04
CVE-2026-114425NAN/ASEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Tran…2026-11-04
←132 / 8516→