| CVE-2026-123473 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs H… | 2026-11-11 |
| CVE-2026-124255 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Franky Events M… | 2026-11-11 |
| CVE-2026-124271 | MEDIUM | 5.3 | Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restr… | 2026-11-11 |
| CVE-2026-124408 | MEDIUM | 5.4 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Acces… | 2026-11-11 |
| CVE-2026-124413 | MEDIUM | 5.3 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incor… | 2026-11-11 |
| CVE-2026-124421 | MEDIUM | 5.3 | Missing Authorization vulnerability in BdThemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured… | 2026-11-11 |
| CVE-2026-124738 | MEDIUM | 5.3 | A flaw was found in BusyBox. When the HTTP daemon (httpd) has pre-compressed file support enabled, authenticat… | 2026-11-11 |
| CVE-2026-124740 | MEDIUM | 4.3 | A flaw was found in BusyBox's udhcpc6 DHCPv6 client. A malicious server on the local network can trigger a use… | 2026-11-11 |
| CVE-2026-124742 | MEDIUM | 5.5 | A flaw was found in BusyBox. The volume identification component fails to properly validate cluster parameters… | 2026-11-11 |
| CVE-2026-124743 | MEDIUM | 5.5 | A flaw was found in BusyBox. When processing filesystem metadata, the volume identification component does not… | 2026-11-11 |
| CVE-2026-124752 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes… | 2026-11-11 |
| CVE-2026-124753 | MEDIUM | 4.3 | Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configu… | 2026-11-11 |
| CVE-2026-125434 | MEDIUM | 5.4 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Inc… | 2026-11-11 |
| CVE-2026-125437 | MEDIUM | 5.3 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allo… | 2026-11-11 |
| CVE-2026-125438 | MEDIUM | 5.3 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Inc… | 2026-11-11 |
| CVE-2026-125439 | MEDIUM | 5.3 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly … | 2026-11-11 |
| CVE-2026-125444 | MEDIUM | 5.3 | Missing Authorization vulnerability in King Addons King Addons for Elementor king-addons allows Exploiting Inc… | 2026-11-11 |
| CVE-2026-125451 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins… | 2026-11-11 |
| CVE-2026-125455 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold The… | 2026-11-11 |
| CVE-2026-125680 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold The… | 2026-11-11 |
| CVE-2026-125761 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YIT… | 2026-11-11 |
| CVE-2026-125777 | MEDIUM | 5.3 | Insertion of Sensitive Information Into Sent Data vulnerability in Cozmoslabs Profile Builder profile-builder … | 2026-11-11 |
| CVE-2026-125781 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NOUS Ouv… | 2026-11-11 |
| CVE-2026-125784 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in Magnigenie RestroPress restropress allows Cross Site Reques… | 2026-11-11 |
| CVE-2026-126627 | NA | N/A | Creation of Temporary File With Insecure Permissions vulnerability in Apache XML Graphics FOP.
This issue a… | 2026-11-11 |
| CVE-2026-105152 | MEDIUM | 4.3 | Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 4.0 through 6.1.6 allows a weblog … | 2026-11-11 |
| CVE-2026-105153 | HIGH | 7.7 | Improper Restriction of XML External Entity Reference in Apache Roller 4.0 through 6.1.6 allows an authenticat… | 2026-11-11 |
| CVE-2026-105154 | MEDIUM | 6.1 | Cross-Site Request Forgery (CSRF) in the Planet feed aggregator administration of Apache Roller 4.0 through 6.… | 2026-11-11 |
| CVE-2026-108338 | NA | N/A | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 5.0.1 th… | 2026-11-11 |
| CVE-2026-111824 | NA | N/A | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.6 al… | 2026-11-11 |
| CVE-2026-112201 | MEDIUM | 4.8 | A flaw was found in the login-failure storage component of Keycloak, the identity and access management soluti… | 2026-11-11 |
| CVE-2026-118405 | MEDIUM | 4.3 | Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 4.0 through 6.1.6 allows any logge… | 2026-11-11 |
| CVE-2026-118408 | LOW | 3.1 | Missing Authorization in Apache Roller 4.0 through 6.1.6 allows any logged-in user to read unpublished entries… | 2026-11-11 |
| CVE-2026-118409 | MEDIUM | 5.3 | Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 4.0 through 6.1.6 allows an unauth… | 2026-11-11 |
| CVE-2026-118410 | LOW | 3.7 | Exposure of Resource to Wrong Sphere in Apache Roller 4.0 through 6.1.6 allows an unauthenticated visitor to r… | 2026-11-11 |
| CVE-2026-118411 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to c… | 2026-11-11 |
| CVE-2026-118412 | LOW | 3.1 | Improper Authentication in Apache Roller 5.1.0 through 6.1.6 allows a user whose account an administrator has … | 2026-11-11 |
| CVE-2026-118413 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 4.0 thro… | 2026-11-11 |
| CVE-2026-118414 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.2 th… | 2026-11-11 |
| CVE-2026-122096 | NA | N/A | Uncontrolled Resource Consumption vulnerability in the sketch deserialization of Apache DataSketches Java.
… | 2026-11-11 |
| CVE-2026-122300 | NA | N/A | Missing Authorization vulnerability in Apache Roller 4.0 through 6.1.6 allows a weblog member with the Limited… | 2026-11-11 |
| CVE-2026-123374 | NA | N/A | Deserialization of Untrusted Data vulnerability in Apache Roller. When Roller sends a weblog update ping, its … | 2026-11-11 |
| CVE-2026-123480 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fullwork… | 2026-11-11 |
| CVE-2026-123481 | MEDIUM | 4.3 | Missing Authorization vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended wpextended all… | 2026-11-11 |
| CVE-2026-124261 | MEDIUM | 5.3 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-… | 2026-11-11 |
| CVE-2026-124262 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Igor Funa Ad In… | 2026-11-11 |
| CVE-2026-124263 | MEDIUM | 5.4 | Cross-Site Request Forgery (CSRF) vulnerability in plainware Locatoraid Store Locator locatoraid allows Cross … | 2026-11-11 |
| CVE-2026-124269 | MEDIUM | 4.3 | Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploit… | 2026-11-11 |
| CVE-2026-124411 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto… | 2026-11-11 |
| CVE-2026-124416 | MEDIUM | 4.3 | Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configu… | 2026-11-11 |