Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-39565 | 4.3 (v3.1) | WordPress WpTravelly plugin <= 2.1.7 - Broken Access C… |
magepeopleteam |
WpTravelly |
2026-04-08T08:30:19.049Z | 2026-04-29T09:52:02.130Z |
| cve-2026-39564 | 5.3 (v3.1) | WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensiti… |
sunshinephotocart |
Sunshine Photo Cart |
2026-04-08T08:30:18.874Z | 2026-04-29T09:52:02.141Z |
| cve-2026-39563 | 5.3 (v3.1) | WordPress Share This Image plugin <= 2.12 - Broken Acc… |
ILLID |
Share This Image |
2026-04-08T08:30:18.659Z | 2026-04-29T09:52:02.266Z |
| cve-2026-39562 | 5.3 (v3.1) | WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2026-04-08T08:30:18.463Z | 2026-04-29T09:52:02.114Z |
| cve-2026-39561 | 5.3 (v3.1) | WordPress Revive.so plugin <= 2.0.7 - Broken Access Co… |
WP Chill |
Revive.so |
2026-04-08T08:30:18.238Z | 2026-04-29T09:52:02.099Z |
| cve-2026-39544 | 7.5 (v3.1) | WordPress LabtechCO theme <= 8.3 - Local File Inclusio… |
themeStek |
LabtechCO |
2026-04-08T08:30:17.993Z | 2026-04-29T09:52:02.136Z |
| cve-2026-39543 | 5.3 (v3.1) | WordPress Tourfic plugin <= 2.21.4 - Broken Access Con… |
Themefic |
Tourfic |
2026-04-08T08:30:17.808Z | 2026-04-29T09:52:02.060Z |
| cve-2026-39542 | 5.3 (v3.1) | WordPress Doofinder for WooCommerce plugin <= 2.10.13 … |
Doofinder |
Doofinder for WooCommerce |
2026-04-08T08:30:17.588Z | 2026-04-29T09:52:02.103Z |
| cve-2026-39541 | 5.9 (v3.1) | WordPress Hydra Booking plugin <= 1.1.38 - Cross Site … |
Themefic |
Hydra Booking |
2026-04-08T08:30:17.312Z | 2026-04-29T09:52:02.050Z |
| cve-2026-39538 | 7.5 (v3.1) | WordPress Mikado Core plugin <= 1.6 - Local File Inclu… |
Mikado-Themes |
Mikado Core |
2026-04-08T08:30:17.109Z | 2026-04-29T09:52:02.066Z |
| cve-2026-39536 | 5.3 (v3.1) | WordPress RSVP and Event Management plugin <= 2.7.16 -… |
WP Chill |
RSVP and Event Management |
2026-04-08T08:30:16.908Z | 2026-04-29T09:52:02.098Z |
| cve-2026-39535 | 5.3 (v3.1) | WordPress Display Eventbrite Events plugin <= 6.5.6 - … |
fullworks |
Display Eventbrite Events |
2026-04-08T08:30:16.732Z | 2026-04-29T09:52:02.221Z |
| cve-2026-39528 | 5.3 (v3.1) | WordPress WP Delicious plugin <= 1.9.5 - Broken Access… |
WP Delicious |
WP Delicious |
2026-04-08T08:30:16.548Z | 2026-04-29T09:52:02.208Z |
| cve-2026-39526 | 5.4 (v3.1) | WordPress WpStream plugin < 4.11.2 - Insecure Direct O… |
wpstream |
WpStream |
2026-04-08T08:30:16.335Z | 2026-04-29T09:52:01.932Z |
| cve-2026-39521 | 4.9 (v3.1) | WordPress Nelio Content plugin <= 4.3.1 - Server Side … |
Nelio Software |
Nelio Content |
2026-04-08T08:30:16.011Z | 2026-04-29T09:52:02.065Z |
| cve-2026-39520 | 5.3 (v3.1) | WordPress weDocs plugin <= 2.1.18 - Broken Access Cont… |
weDevs |
weDocs |
2026-04-08T08:30:15.736Z | 2026-04-29T09:52:01.951Z |
| cve-2026-39517 | 6.5 (v3.1) | WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scr… |
A WP Life |
Blog Filter |
2026-04-08T08:30:15.367Z | 2026-04-29T09:52:01.930Z |
| cve-2026-39516 | 5.3 (v3.1) | WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Da… |
POSIMYTH |
Nexter Blocks |
2026-04-08T08:30:14.904Z | 2026-04-29T09:52:01.912Z |
| cve-2026-39510 | 2.7 (v3.1) | WordPress Image Photo Gallery Final Tiles Grid plugin … |
WP Chill |
Image Photo Gallery Final Tiles Grid |
2026-04-08T08:30:14.471Z | 2026-04-29T09:52:01.890Z |
| cve-2026-39509 | 5.3 (v3.1) | WordPress Directorist plugin <= 8.5.10 - Broken Access… |
wpWax |
Directorist |
2026-04-08T08:30:14.240Z | 2026-04-29T09:52:02.099Z |
| cve-2026-39508 | 6.5 (v3.1) | WordPress Advanced Coupons for WooCommerce Coupons plu… |
Josh Kohlbach |
Advanced Coupons for WooCommerce Coupons |
2026-04-08T08:30:14.055Z | 2026-04-29T09:52:01.963Z |
| cve-2026-39506 | 4.3 (v3.1) | WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Acce… |
Jordy Meow |
AI Engine (Pro) |
2026-04-08T08:30:13.840Z | 2026-04-29T09:52:01.954Z |
| cve-2026-39505 | 5.3 (v3.1) | WordPress Seriously Simple Podcasting plugin <= 3.14.2… |
Craig Hewitt |
Seriously Simple Podcasting |
2026-04-08T08:30:13.629Z | 2026-04-29T09:52:01.953Z |
| cve-2026-39504 | 5.4 (v3.1) | WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken A… |
InstaWP |
InstaWP Connect |
2026-04-08T08:30:13.405Z | 2026-04-29T09:52:01.914Z |
| cve-2026-39501 | 5.3 (v3.1) | WordPress FOX plugin <= 1.4.5 - Broken Access Control … |
RealMag777 |
FOX |
2026-04-08T08:30:13.172Z | 2026-04-29T09:52:01.916Z |
| cve-2026-39500 | 6.5 (v3.1) | WordPress themesflat-addons-for-elementor plugin <= 2.… |
Themesflat |
themesflat-addons-for-elementor |
2026-04-08T08:30:12.864Z | 2026-04-29T09:52:01.969Z |
| cve-2026-39497 | 7.6 (v3.1) | WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability |
RealMag777 |
FOX |
2026-04-08T08:30:12.597Z | 2026-04-29T09:52:01.939Z |
| cve-2026-39496 | 7.6 (v3.1) | WordPress YayMail plugin <= 4.3.3 - SQL Injection vuln… |
YayCommerce |
YayMail |
2026-04-08T08:30:12.339Z | 2026-04-29T09:52:01.932Z |
| cve-2026-39495 | 8.5 (v3.1) | WordPress Simply Schedule Appointments plugin <= 1.6.9… |
NSquared |
Simply Schedule Appointments |
2026-04-08T08:30:12.091Z | 2026-04-29T09:52:01.948Z |
| cve-2026-39488 | 6.5 (v3.1) | WordPress SureCart plugin <= 4.0.2 - Broken Access Con… |
SureCart |
SureCart |
2026-04-08T08:30:11.861Z | 2026-04-29T09:52:01.930Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-399 | Multiples vulnérabilités dans les produits Cisco | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-398 | Vulnérabilité dans les produits Sophos | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-397 | Multiples vulnérabilités dans Liferay Portal | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-396 | Multiples vulnérabilités dans les produits SonicWall | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-395 | Multiples vulnérabilités dans les produits Nextcloud | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-394 | Multiples vulnérabilités dans MISP | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-393 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-392 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-391 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-390 | Multiples vulnérabilités dans Google Chrome | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-389 | Multiples vulnérabilités dans Ruby on Rails | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-388 | Vulnérabilité dans SolarWinds DPA | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-387 | Vulnérabilité dans Nextcloud Server | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-386 | Multiples vulnérabilités dans IBM QRadar SIEM | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-385 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-25T00:00:00.000000 | 2022-04-25T00:00:00.000000 |
| certfr-2022-avi-384 | Multiples vulnérabilités dans FreeRADIUS Server | 2022-04-25T00:00:00.000000 | 2022-04-25T00:00:00.000000 |
| certfr-2022-avi-383 | Vulnérabilité dans Liferay Portal | 2022-04-25T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-382 | Vulnérabilité dans Atlassian Jira | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-381 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-380 | Vulnérabilité dans MongoDB Server | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-379 | Multiples vulnérabilités dans Stormshield Network VPN Client | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-378 | Vulnérabilité dans Grafana Enterprise | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-377 | Vulnérabilité dans VMware Spring Security OAuth | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-376 | Multiples vulnérabilités dans Fortinet FortiSOAR | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-375 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-374 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-373 | Vulnérabilité dans les produits Palo Alto Networks | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-372 | Multiples vulnérabilités dans Drupal core | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-371 | Multiples vulnérabilités dans les produits Cisco | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-370 | Multiples vulnérabilités dans Tenable.sc | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |