| CVE-2026-88942 | MEDIUM | 6.1 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting… | 2026-10-31 |
| CVE-2026-89270 | CRITICAL | 9.1 | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulner… | 2026-10-31 |
| CVE-2026-90960 | MEDIUM | 5.3 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versio… | 2026-10-31 |
| CVE-2025-11455 | MEDIUM | 4.3 | The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca… | 2026-10-31 |
| CVE-2025-9462 | MEDIUM | 6.5 | The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all v… | 2026-10-31 |
| CVE-2026-103898 | HIGH | 8.1 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in… | 2026-10-31 |
| CVE-2026-103962 | MEDIUM | 6.1 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Fro… | 2026-10-31 |
| CVE-2026-103997 | MEDIUM | 6.5 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl… | 2026-10-31 |
| CVE-2026-104012 | HIGH | 8.8 | The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Pr… | 2026-10-31 |
| CVE-2026-107759 | HIGH | 7.2 | The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … | 2026-10-31 |
| CVE-2026-110023 | MEDIUM | 5.9 | The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerab… | 2026-10-31 |
| CVE-2026-111070 | MEDIUM | 5.4 | The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cros… | 2026-10-31 |
| CVE-2026-111592 | MEDIUM | 6.4 | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordP… | 2026-10-31 |
| CVE-2026-116512 | CRITICAL | 9.8 | The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for W… | 2026-10-31 |
| CVE-2026-116535 | MEDIUM | 6.4 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2026-10-31 |
| CVE-2026-118057 | HIGH | 7.2 | The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is… | 2026-10-31 |
| CVE-2026-119096 | CRITICAL | 9.8 | The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up t… | 2026-10-31 |
| CVE-2026-120070 | HIGH | 8.8 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Fro… | 2026-10-31 |
| CVE-2026-101325 | MEDIUM | 5.3 | The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all v… | 2026-10-31 |
| CVE-2026-103882 | CRITICAL | 9.1 | The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable … | 2026-10-31 |
| CVE-2026-103915 | MEDIUM | 5.3 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Info… | 2026-10-31 |
| CVE-2026-109367 | MEDIUM | 5.3 | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)… | 2026-10-31 |
| CVE-2026-110530 | HIGH | 7.2 | The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and inc… | 2026-10-31 |
| CVE-2026-114217 | HIGH | 8.6 | A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access t… | 2026-10-31 |
| CVE-2026-116086 | HIGH | 8.8 | A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an in… | 2026-10-31 |
| CVE-2026-116964 | HIGH | 8.4 | A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution … | 2026-10-31 |
| CVE-2026-117681 | HIGH | 8.0 | A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy a… | 2026-10-31 |
| CVE-2026-118235 | CRITICAL | 9.8 | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is … | 2026-10-31 |
| CVE-2026-119160 | MEDIUM | 6.4 | The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress i… | 2026-10-31 |
| CVE-2026-120075 | HIGH | 7.2 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, a… | 2026-10-31 |
| CVE-2026-100151 | MEDIUM | 6.1 | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for Word… | 2026-10-31 |
| CVE-2026-104926 | MEDIUM | 6.1 | The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting… | 2026-10-31 |
| CVE-2026-107711 | MEDIUM | 6.4 | The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to St… | 2026-10-31 |
| CVE-2026-109197 | HIGH | 7.5 | The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter i… | 2026-10-31 |
| CVE-2026-109231 | MEDIUM | 4.3 | The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via A… | 2026-10-31 |
| CVE-2026-116752 | MEDIUM | 6.4 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vuln… | 2026-10-31 |
| CVE-2026-118598 | MEDIUM | 6.5 | A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when… | 2026-10-31 |
| CVE-2026-118599 | MEDIUM | 5.5 | A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files.
In s… | 2026-10-31 |
| CVE-2026-120114 | HIGH | 7.2 | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored C… | 2026-10-31 |
| CVE-2026-120194 | HIGH | 7.5 | A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite lo… | 2026-10-31 |
| CVE-2026-76010 | HIGH | 8.8 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote… | 2026-10-31 |
| CVE-2026-96554 | MEDIUM | 6.4 | The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all… | 2026-10-31 |
| CVE-2026-15272 | MEDIUM | 6.5 | The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filte… | 2026-10-31 |
| CVE-2026-78188 | NA | N/A | WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameS… | 2026-10-31 |
| CVE-2026-78189 | NA | N/A | WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traver… | 2026-10-31 |
| CVE-2026-78190 | NA | N/A | WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values,… | 2026-10-31 |
| CVE-2026-78191 | NA | N/A | WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages.
… | 2026-10-31 |
| CVE-2026-78192 | NA | N/A | WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via t… | 2026-10-31 |
| CVE-2026-102212 | NA | N/A | Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on co… | 2026-10-31 |
| CVE-2026-120199 | MEDIUM | 4.3 | LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authe… | 2026-10-31 |