Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81777 | 5.3 (v3.1) | WordPress Essential Addons for Elementor plugin <= 6.8… |
WPDeveloper |
Essential Addons for Elementor |
2026-08-28T09:42:11.752Z | 2026-08-28T15:28:16.134Z |
| cve-2026-54084 | Wazuh agent enrollment NULL pointer dereference via ma… |
wazuh |
wazuh |
2026-08-27T23:12:20.239Z | 2026-08-28T15:27:56.072Z | |
| cve-2026-82249 | 2.3 (v4.0) 3.1 (v3.1) | gitoxide before 0.38.2 Credential Helper Protocol Fiel… |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:34.825Z | 2026-08-28T15:26:02.245Z |
| cve-2026-76581 | WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to… |
wpmudev |
WPMU DEV Dashboard |
2026-08-28T06:39:49.567Z | 2026-08-28T15:24:54.022Z | |
| cve-2026-38821 | 7.1 (v3.1) | A heap-based buffer overflow vulnerability exists… |
openNDS |
openNDS |
2026-08-28T00:10:10.769Z | 2026-08-28T15:24:14.987Z |
| cve-2026-76053 | TranslatePress <= 3.3.3 - Unauthenticated Stored Cross… |
cozmoslabs |
TranslatePress – Translate Multilingual sites with AI Translation |
2026-08-28T02:26:56.181Z | 2026-08-28T15:23:52.929Z | |
| cve-2026-38822 | 7.6 (v3.1) | In openNDS before 11.0.0, the client_params.sh sc… |
openNDS |
openNDS |
2026-08-28T00:12:08.428Z | 2026-08-28T15:23:29.402Z |
| cve-2026-16759 | Tutor LMS <= 4.0.5 - Unauthenticated Remote Code Execu… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-08-28T03:39:35.072Z | 2026-08-28T15:22:17.595Z | |
| cve-2026-80200 | 5.3 (v4.0) 4.7 (v3.1) | Kimai before 2.53.0 Open Redirect via RelayState |
kimai |
kimai |
2026-08-25T23:19:05.809Z | 2026-08-28T15:18:32.829Z |
| cve-2026-79773 | 6.9 (v4.0) 4.9 (v3.1) | Winter CMS before 1.2.13 Local File Inclusion via JavaScript |
wintercms |
winter |
2026-08-25T15:16:05.053Z | 2026-08-28T15:18:32.149Z |
| cve-2026-76843 | 8.4 (v4.0) 7.8 (v3.1) | Flair 0.15.0 and 0.15.1 Deserialization of Untrusted D… |
flairNLP |
flair |
2026-08-24T13:12:00.470Z | 2026-08-28T15:18:31.470Z |
| cve-2026-72831 | 8.7 (v4.0) 8.8 (v3.1) | Grav through 2.0.11 Authentication Bypass via Flex Objects |
getgrav |
grav |
2026-08-14T11:35:37.801Z | 2026-08-28T15:18:30.795Z |
| cve-2026-65897 | 8.7 (v4.0) 8.8 (v3.1) | Grav API Plugin 1.0.9 Privilege Escalation via Invitat… |
getgrav |
grav |
2026-07-23T11:42:17.453Z | 2026-08-28T15:18:30.122Z |
| cve-2026-65896 | 7.1 (v4.0) 7.1 (v3.1) | Grav API Plugin before 1.0.10 Path Traversal via move |
getgrav |
grav |
2026-07-23T11:42:16.817Z | 2026-08-28T15:18:29.460Z |
| cve-2026-65895 | 8.2 (v4.0) 8.5 (v3.1) | Grav API Plugin before 1.0.10 Broken Access Control |
getgrav |
grav |
2026-07-23T11:42:16.163Z | 2026-08-28T15:18:28.805Z |
| cve-2026-58652 | 7.7 (v4.0) 7.5 (v3.1) | luci-app-travelmate - Arbitrary Command Execution via … |
openwrt |
luci-app-travelmate |
2026-07-02T12:28:34.022Z | 2026-08-28T15:18:28.142Z |
| cve-2025-2610 | 7.6 (v3.1) | MagnusBilling Stored Cross-Site Scripting in Alarm Module |
MagnusSolution |
MagnusBilling |
2025-03-21T22:35:17.724Z | 2026-08-28T15:18:26.844Z |
| cve-2025-2609 | 8.2 (v3.1) | MagnusBilling Stored Cross-Site Scripting in Login Logs |
MagnusSolution |
MagnusBilling |
2025-03-21T22:41:13.784Z | 2026-08-28T15:18:26.179Z |
| cve-2023-54354 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.14.3 Null Pointer Dereference via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:55.858Z | 2026-08-28T15:18:24.047Z |
| cve-2022-51000 | 9.3 (v4.0) 9.8 (v3.1) | Nokogiri before 1.13.2 Multiple Vulnerabilities via li… |
sparklemotion |
nokogiri |
2026-08-25T15:15:55.205Z | 2026-08-28T15:18:22.982Z |
| cve-2022-50999 | 8.8 (v4.0) 8.6 (v3.1) | Nokogiri before 1.13.5 Integer Overflow via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:54.519Z | 2026-08-28T15:18:22.151Z |
| cve-2022-50998 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:53.830Z | 2026-08-28T15:18:21.490Z |
| cve-2021-47996 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:53.158Z | 2026-08-28T15:18:20.801Z |
| cve-2026-77365 | Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site… |
optimole |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization |
2026-08-28T02:26:56.688Z | 2026-08-28T15:17:13.576Z | |
| cve-2026-82081 | 6.4 (v3.1) | wallabag 2 through 2.6.14 allows SSRF because a c… |
wallabag |
wallabag |
2026-08-28T02:40:33.844Z | 2026-08-28T15:16:08.971Z |
| cve-2026-18324 | Forminator Forms <= 1.57.0.1 - Unauthenticated Stored … |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-08-28T03:39:34.725Z | 2026-08-28T15:14:18.901Z | |
| cve-2026-13598 | N/A | RestrictMate < 1.3.0 - Unauthenticated Privilege Escal… |
Unknown |
RestrictMate |
2026-08-23T06:00:17.682Z | 2026-08-28T15:13:47.841Z |
| cve-2026-75628 | N/A | Punk::OAuth2 versions before 0.03 for Perl allow an at… |
|
|
2026-08-20T00:40:08.220Z | 2026-08-28T15:11:53.961Z |
| cve-2026-5510 | GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored… |
stellarwp |
GiveWP – Donation Plugin and Fundraising Platform |
2026-08-28T07:40:17.075Z | 2026-08-28T15:11:37.616Z | |
| cve-2026-64773 | N/A | An attacker that can reach a container's publishe… |
Apple |
container |
2026-08-20T21:16:08.187Z | 2026-08-28T15:10:14.714Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-557 | Multiples vulnérabilités dans Microsoft Windows | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-556 | Multiples vulnérabilités dans Microsoft Office | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-555 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-554 | Multiples vulnérabilités dans Xen | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-553 | Multiples vulnérabilités dans Citrix ADM | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-552 | Multiples vulnérabilités dans les produits Intel | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-550 | Multiples vulnérabilités dans VMware ESXi | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-549 | Multiples vulnérabilités dans TYPO3 | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-548 | Multiples vulnérabilités dans les produits Splunk | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-547 | Multiples vulnérabilités dans les produits Siemens | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-545 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-14T00:00:00.000000 | 2022-06-14T00:00:00.000000 |
| certfr-2022-avi-544 | Multiples vulnérabilités dans IBM Netcool Operations Insight | 2022-06-14T00:00:00.000000 | 2022-06-14T00:00:00.000000 |
| certfr-2022-avi-543 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-14T00:00:00.000000 | 2022-06-14T00:00:00.000000 |
| certfr-2022-avi-542 | Multiples vulnérabilités dans le noyau Linux de Debian | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-541 | Multiples vulnérabilités dans Drupal Core | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-540 | Vulnérabilité dans Ruby on Rails | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-539 | Multiples vulnérabilités dans IBM DB2 | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-538 | Multiples vulnérabilités dans Moxa NPort | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-537 | Vulnérabilité dans Microsoft Edge | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-536 | Multiples vulnérabilités dans Google Chrome | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-535 | Multiples vulnérabilités dans Xen | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-534 | Multiples vulnérabilités dans PHP | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-533 | Vulnérabilité dans IBM DB2 | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-532 | Vulnérabilité dans ownCloud Server | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-531 | Multiples vulnérabilités dans Apache HTTP Server | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-530 | Vulnérabilité dans les produits Mitel | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-529 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-528 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-527 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |
| certfr-2022-avi-526 | Multiples vulnérabilités dans les produits IBM | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |