CVE IDSeverityCVSSDescriptionDate
CVE-2026-124417MEDIUM4.3Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configu…2026-11-11
CVE-2026-124495NAN/AWhen workers run as the topology owner, the Logviewer serves files that a worker has placed in its own log dir…2026-11-11
CVE-2026-124496NAN/AThe DRPC HTTP endpoint lets an authenticated client act as another user without applying the configured impers…2026-11-11
CVE-2026-124744MEDIUM6.3A flaw was found in BusyBox. When extracting files using the cpio utility with path traversal protection enabl…2026-11-11
CVE-2026-124745MEDIUM6.3A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink…2026-11-11
CVE-2026-125045MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John-Mic…2026-11-11
CVE-2026-125046MEDIUM5.3Missing Authorization vulnerability in John-Michael L'Allier Create mediavine-create allows Exploiting Incorre…2026-11-11
CVE-2026-125431MEDIUM5.3Missing Authorization vulnerability in Mamunur Rashid Food Menu – Restaurant Menu & Online Ordering for WooCom…2026-11-11
CVE-2026-125433MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioW…2026-11-11
CVE-2026-125435MEDIUM5.3Insertion of Sensitive Information Into Sent Data vulnerability in IdeaBox Creations PowerPack Addons for Elem…2026-11-11
CVE-2026-125436MEDIUM4.3Missing Authorization vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Exploiting Incorrectl…2026-11-11
CVE-2026-125445MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cro…2026-11-11
CVE-2026-125446HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site R…2026-11-11
CVE-2026-125448MEDIUM5.3Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configure…2026-11-11
CVE-2026-125450MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto…2026-11-11
CVE-2026-125454MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill…2026-11-11
CVE-2026-125708MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes…2026-11-11
CVE-2026-125743MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes …2026-11-11
CVE-2026-125746MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ProPluginsLab B…2026-11-11
CVE-2026-125762MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx…2026-11-11
CVE-2026-125763MEDIUM5.3Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Conf…2026-11-11
CVE-2026-125766MEDIUM5.3Insertion of Sensitive Information Into Sent Data vulnerability in WPZOOM WPZOOM Social Feed Widget & Block in…2026-11-11
CVE-2026-125767MEDIUM5.3Insertion of Sensitive Information Into Sent Data vulnerability in NerdPress Hubbub Lite social-pug allows Ret…2026-11-11
CVE-2026-125776MEDIUM5.3Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectl…2026-11-11
CVE-2026-125778MEDIUM4.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred m…2026-11-11
CVE-2026-125782MEDIUM4.3Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting I…2026-11-11
CVE-2026-126537CRITICAL9.1The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary fi…2026-11-11
CVE-2026-126658MEDIUM5.4ByteStash 1.5.10 before 1.6.2 contains an insufficient session expiration vulnerability that allows holders of…2026-11-11
CVE-2026-126659HIGH7.5BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 contains a resource exhaustion vulnerability that allows un…2026-11-11
CVE-2026-126662HIGH7.1Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 contains an access control bypass vuln…2026-11-11
CVE-2026-126663MEDIUM4.3Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 contains a path traversal vulnerabilit…2026-11-11
CVE-2026-94125NAN/ANimbus returns the worker placement of every topology running on a supervisor, including the host, port, owner…2026-11-11
CVE-2026-0470NAN/ANull pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss…2026-11-11
CVE-2026-123040HIGH7.8An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions …2026-11-11
CVE-2026-125838HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.T…2026-11-11
CVE-2026-125839HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request For…2026-11-11
CVE-2026-125840HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This …2026-11-11
CVE-2026-125841HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.Thi…2026-11-11
CVE-2026-125842HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Si…2026-11-11
CVE-2026-125843HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery…2026-11-11
CVE-2026-125844HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This is…2026-11-11
CVE-2026-125845HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forge…2026-11-11
CVE-2026-125846HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.Thi…2026-11-11
CVE-2026-125847HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forge…2026-11-11
CVE-2026-125848HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issu…2026-11-11
CVE-2026-125849HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Reque…2026-11-11
CVE-2026-125850HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site…2026-11-11
CVE-2026-40853NAN/AA Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont. This issue affects Apache XML G…2026-11-11
CVE-2026-48479NAN/AUse of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of boun…2026-11-11
CVE-2026-49236NAN/AServer-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypa…2026-11-11
←30 / 8516→