| CVE-2026-110963 | NA | N/A | The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action availabl… | 2026-11-08 |
| CVE-2026-114432 | NA | N/A | The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded thr… | 2026-11-08 |
| CVE-2026-122060 | NA | N/A | The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is … | 2026-11-08 |
| CVE-2026-122062 | NA | N/A | The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1… | 2026-11-08 |
| CVE-2026-122085 | NA | N/A | The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a va… | 2026-11-08 |
| CVE-2026-85344 | NA | N/A | The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on… | 2026-11-08 |
| CVE-2026-96961 | NA | N/A | The Pie Register WordPress plugin through 3.8.4.15 does not perform any capability, nonce or authentication c… | 2026-11-08 |
| CVE-2026-96963 | NA | N/A | The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX… | 2026-11-08 |
| CVE-2026-97192 | NA | N/A | The Secure Custom Fields WordPress plugin before 6.9.8 does not re-apply its field-group location rules when p… | 2026-11-08 |
| CVE-2026-97193 | NA | N/A | The Secure Custom Fields WordPress plugin before 6.9.8 does not verify that a user is allowed to edit the targ… | 2026-11-08 |
| CVE-2026-97194 | NA | N/A | The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it render… | 2026-11-08 |
| CVE-2026-97195 | NA | N/A | The Secure Custom Fields WordPress plugin before 6.9.8 does not sanitize a persisted field definition before e… | 2026-11-08 |
| CVE-2026-124326 | MEDIUM | 5.4 | A flaw has been found in DataLinkDC Dinky up to 1.2.5. Impacted is the function file.getOriginalFilename of th… | 2026-11-08 |
| CVE-2026-124328 | HIGH | 7.4 | A vulnerability has been found in FlowCI flow-core-x up to 1.23.49. The affected element is the function Condi… | 2026-11-08 |
| CVE-2026-124329 | MEDIUM | 5.0 | A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper… | 2026-11-08 |
| CVE-2026-124330 | MEDIUM | 5.0 | A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. This affects the function exist/save/read/… | 2026-11-08 |
| CVE-2026-124331 | HIGH | 7.3 | A vulnerability was identified in Jinher OA C6. This impacts an unknown function of the file /C6/JHSoft.Web.Pr… | 2026-11-08 |
| CVE-2026-124424 | HIGH | 7.1 | WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of … | 2026-11-08 |
| CVE-2026-124425 | LOW | 3.1 | Parse Server 8.6.109 before 8.6.116 and 9.10.6-alpha.1 before 9.10.7-alpha.2 contains an information disclosur… | 2026-11-08 |
| CVE-2026-124426 | MEDIUM | 5.3 | Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows unauthenticated … | 2026-11-08 |
| CVE-2026-124427 | CRITICAL | 9.8 | Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQ… | 2026-11-08 |
| CVE-2026-124428 | MEDIUM | 6.5 | Craft CMS from 5.7.0 before 5.11.2 contains an arbitrary file read vulnerability that allows authenticated con… | 2026-11-08 |
| CVE-2026-124429 | HIGH | 7.5 | Craft CMS from 5.0.0 before 5.11.2 contains a privilege escalation vulnerability that allows unauthenticated p… | 2026-11-08 |
| CVE-2026-124430 | HIGH | 8.8 | Craft CMS from 5.10.0 before 5.11.2 contains a remote code execution vulnerability that allows non-administrat… | 2026-11-08 |
| CVE-2026-124431 | MEDIUM | 4.3 | Craft CMS from 5.10.0 before 5.11.2 contains an authorization bypass vulnerability that allows authenticated l… | 2026-11-08 |
| CVE-2026-124432 | HIGH | 7.3 | phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 contain an account enumeration vulnera… | 2026-11-08 |
| CVE-2026-124433 | MEDIUM | 6.5 | phpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrato… | 2026-11-08 |
| CVE-2026-124434 | HIGH | 7.1 | Grav Lightbox Gallery plugin 1.1.0 before 1.3.2 on Grav 2.x calls any medium method named in image, thumb or t… | 2026-11-08 |
| CVE-2026-124435 | MEDIUM | 4.8 | OpenRemote before 1.32.2 contains a stored cross-site scripting vulnerability that allows authenticated users … | 2026-11-08 |
| CVE-2026-124436 | HIGH | 8.0 | OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to … | 2026-11-08 |
| CVE-2026-124437 | HIGH | 7.5 | Scriban before 7.5.3 contains a resource exhaustion vulnerability that allows untrusted template authors to ex… | 2026-11-08 |
| CVE-2026-124438 | HIGH | 7.4 | Scriban before 7.5.2 contains an information disclosure and object manipulation vulnerability that allows temp… | 2026-11-08 |
| CVE-2026-124439 | HIGH | 7.5 | Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer,… | 2026-11-08 |
| CVE-2026-124440 | CRITICAL | 9.9 | Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clam… | 2026-11-08 |
| CVE-2026-124441 | HIGH | 8.8 | Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generat… | 2026-11-08 |
| CVE-2026-124442 | MEDIUM | 6.5 | AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows users with station We… | 2026-11-08 |
| CVE-2026-124443 | MEDIUM | 4.3 | Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in Fil… | 2026-11-08 |
| CVE-2026-124444 | HIGH | 7.1 | OpenEMR before 8.4.0 contains a mass assignment vulnerability in the patient portal OnsiteDocument query API t… | 2026-11-08 |
| CVE-2026-124445 | CRITICAL | 9.8 | OpenEMR from 7.0.1 before 8.4.0 contains a flaw in src/Common/Auth/OneTimeAuth.php that ignores the enforce_on… | 2026-11-08 |
| CVE-2026-124446 | HIGH | 8.8 | OpenEMR before 8.3.0 contains a path traversal vulnerability in the FaxSMS module's RCFaxClient and SignalWire… | 2026-11-08 |
| CVE-2026-124447 | HIGH | 8.1 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsitePortalActivityControl… | 2026-11-08 |
| CVE-2026-124448 | HIGH | 7.6 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the CCDA/CCD preview stylesheets,… | 2026-11-08 |
| CVE-2026-124449 | MEDIUM | 6.5 | OpenEMR before 8.4.0 contains a missing authorization vulnerability in FHIR Media/:uuid and QuestionnaireRespo… | 2026-11-08 |
| CVE-2026-124450 | CRITICAL | 9.9 | OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module d… | 2026-11-08 |
| CVE-2026-124451 | MEDIUM | 5.3 | OpenEMR before 8.4.0 contains an authorization bypass vulnerability in its SMART on FHIR implementation becaus… | 2026-11-08 |
| CVE-2026-124452 | MEDIUM | 5.4 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in interface/forms/eye_mag/report.ph… | 2026-11-08 |
| CVE-2026-124453 | HIGH | 7.1 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that… | 2026-11-08 |
| CVE-2026-124455 | MEDIUM | 6.5 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteDocumentController::Q… | 2026-11-08 |
| CVE-2026-124456 | HIGH | 7.1 | OpenEMR before 8.3.0 contains missing authorization and insecure direct object reference vulnerabilities in th… | 2026-11-08 |
| CVE-2026-124457 | HIGH | 7.6 | OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allo… | 2026-11-08 |