Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114191 | 7.5 (v3.1) | WordPress UPI QR Code Payment Gateway for WooCommerce … |
Knit Pay |
UPI QR Code Payment Gateway for WooCommerce |
2026-10-24T14:00:09.573Z | 2026-10-24T14:46:58.028Z |
| cve-2026-114704 | 7.2 (v3.1) | WordPress Relevanssi plugin <= 4.28.4 - PHP Object In… |
Christoph Vielgrader |
Relevanssi |
2026-10-24T14:00:09.045Z | 2026-10-24T14:46:58.175Z |
| cve-2026-114192 | 6.5 (v3.1) | WordPress WpEvently plugin <= 5.7.8 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-10-24T14:00:09.029Z | 2026-10-24T14:46:58.324Z |
| cve-2026-114629 | N/A | Web::Simple versions before 0.035 for Perl allocate a … |
|
|
2026-10-24T13:50:47.616Z | 2026-11-02T14:09:38.670Z |
| cve-2026-115932 | 9.6 (v3.1) | Path traversal in post media lets any registered user … |
GitroomHQ |
postiz-app |
2026-10-24T12:28:36.033Z | 2026-11-02T14:07:12.305Z |
| cve-2026-116020 | 5.3 (v4.0) 5.4 (v3.1) | BookStack before 26.09.2 Incorrect Authorization via A… |
BookStackApp |
BookStack |
2026-10-24T11:40:36.328Z | 2026-10-24T11:40:36.328Z |
| cve-2026-116019 | 8.7 (v4.0) 8.8 (v3.1) | Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Fo… |
getgrav |
grav |
2026-10-24T11:40:35.632Z | 2026-10-26T17:39:42.999Z |
| cve-2026-116018 | 5.3 (v4.0) 4.3 (v3.1) | ONEARMY community-platform before 2.165.2 IDOR via not… |
ONEARMY |
community-platform |
2026-10-24T11:40:34.948Z | 2026-10-29T15:23:13.164Z |
| cve-2026-116017 | 5.3 (v4.0) 4.3 (v3.1) | Xiaozhi-esp32-server before 0.9.8 IDOR via device addr… |
xinnan-tech |
xiaozhi-esp32-server |
2026-10-24T11:40:34.247Z | 2026-10-29T18:24:38.990Z |
| cve-2026-116016 | 7.1 (v4.0) 7.1 (v3.1) | yudao-cloud through 2026.09 Data Permission Bypass via… |
YunaiV |
yudao-cloud |
2026-10-24T11:40:33.600Z | 2026-11-03T16:17:34.062Z |
| cve-2026-116015 | 5.3 (v4.0) 4.3 (v3.1) | yudao-cloud through 2026.09 IDOR via after-sale-log li… |
YunaiV |
yudao-cloud |
2026-10-24T11:40:32.903Z | 2026-10-26T17:40:10.123Z |
| cve-2026-116014 | 9.2 (v4.0) 8.1 (v3.1) | open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buf… |
open62541 |
open62541 |
2026-10-24T11:40:32.200Z | 2026-10-29T16:08:24.942Z |
| cve-2026-116013 | 6.3 (v4.0) 3.7 (v3.1) | OpenResty lua-resty-dns before 0.24 Denial of Service … |
openresty |
lua-resty-dns |
2026-10-24T11:40:31.527Z | 2026-10-29T18:23:41.998Z |
| cve-2026-116012 | 2 (v4.0) 3.6 (v3.1) | Ghidra before 12.2 Integer Truncation in PackedDecode:… |
NationalSecurityAgency |
ghidra |
2026-10-24T11:40:30.825Z | 2026-10-24T11:40:30.825Z |
| cve-2026-116011 | 8.7 (v4.0) 7.5 (v3.1) | Crow before 1.3.4 Denial of Service via Deeply Nested … |
CrowCpp |
Crow |
2026-10-24T11:40:30.179Z | 2026-10-26T17:40:34.096Z |
| cve-2026-116010 | 5.3 (v4.0) 4.3 (v3.1) | RosarioSIS before 12.9.1 Missing Authorization in Teac… |
francoisjacquet |
RosarioSIS |
2026-10-24T11:40:29.488Z | 2026-10-29T14:46:14.817Z |
| cve-2026-116009 | 8.7 (v4.0) 8.8 (v3.1) | Camaleon CMS before 2.9.3 Path Traversal RCE via Media… |
owen2345 |
camaleon-cms |
2026-10-24T11:40:28.810Z | 2026-10-29T18:22:04.998Z |
| cve-2026-116008 | 5.3 (v4.0) 4.3 (v3.1) | DaybydayCRM through 2.2.1 Missing Authorization via Pr… |
Bottelet |
DaybydayCRM |
2026-10-24T11:40:28.129Z | 2026-10-24T11:40:28.129Z |
| cve-2026-110018 | aBlocks <= 2.17.0 - Authenticated (Contributor+) Privi… |
kodezen |
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder |
2026-10-24T11:30:30.545Z | 2026-10-26T17:40:59.505Z | |
| cve-2026-114705 | 6.5 (v3.1) | WordPress WP Social Feed Gallery plugin <= 5.0.13 - Br… |
quadlayers |
WP Social Feed Gallery |
2026-10-24T10:00:11.514Z | 2026-10-24T14:46:58.465Z |
| cve-2026-115998 | 4.3 (v3.1) | IDOR: User reads and modifies findings from other peop… |
CervantesSec |
cervantes |
2026-10-24T09:28:05.849Z | 2026-11-02T14:05:02.842Z |
| cve-2026-114194 | 6.5 (v3.1) | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Sc… |
Igor Funa |
Ad Inserter |
2026-10-24T09:08:50.102Z | 2026-10-24T14:46:56.574Z |
| cve-2026-115994 | 5.4 (v3.1) | BOLA Allows Cross-Project Target Tampering |
CervantesSec |
cervantes |
2026-10-24T09:04:02.750Z | 2026-11-02T14:03:51.629Z |
| cve-2026-115993 | 6.8 (v3.1) | Stored XSS in the “Notes” field of project checklists |
CervantesSec |
cervantes |
2026-10-24T08:32:46.940Z | 2026-11-02T14:02:56.947Z |
| cve-2026-114196 | 9.8 (v3.1) | WordPress Paytium plugin <= 5.0.5 - PHP Object Injecti… |
paytiumsupport |
Paytium |
2026-10-24T08:00:13.761Z | 2026-10-24T14:46:58.606Z |
| cve-2026-114695 | 7.1 (v3.1) | WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site… |
Infomaniak Network |
VOD Infomaniak |
2026-10-24T08:00:13.590Z | 2026-10-24T14:46:56.713Z |
| cve-2026-114694 | 7.1 (v3.1) | WordPress Events Manager plugin <= 7.4.8 - Cross Site … |
Pixelite |
Events Manager |
2026-10-24T08:00:13.325Z | 2026-10-24T14:46:56.850Z |
| cve-2026-114693 | 6.5 (v3.1) | WordPress All-in-One Video Gallery plugin <= 4.9.7 - C… |
Plugins360 Labs |
All-in-One Video Gallery |
2026-10-24T08:00:12.874Z | 2026-10-27T15:06:40.501Z |
| cve-2026-110892 | 6.5 (v3.1) | WordPress SureDash plugin <= 1.12.2 - Broken Access Co… |
Brainstorm Force |
SureDash |
2026-10-24T08:00:12.427Z | 2026-10-24T14:46:58.746Z |
| cve-2026-114697 | 7.1 (v3.1) | WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site … |
QuarkA |
QA Analytics |
2026-10-24T08:00:12.424Z | 2026-10-24T14:46:57.138Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-585 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2022-06-28T00:00:00.000000 | 2022-06-28T00:00:00.000000 |
| certfr-2022-avi-584 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-583 | Multiples vulnérabilités dans Synology Router Manager (SRM) | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-582 | Multiples vulnérabilités dans les produits Citrix | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-581 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-580 | Multiples vulnérabilités dans IBM Db2 | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-579 | Vulnérabilité dans Apache Tomcat | 2022-06-23T00:00:00.000000 | 2022-06-23T00:00:00.000000 |
| certfr-2022-avi-578 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-577 | Vulnérabilité dans les produits QNAP | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-576 | Multiples vulnérabilités dans Google Chrome | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-575 | Vulnérabilité dans OpenSSL c_rehash | 2022-06-22T00:00:00.000000 | 2022-06-28T00:00:00.000000 |
| certfr-2022-avi-574 | Vulnérabilité dans Siemens SIMATIC WinCC OA | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-573 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-21T00:00:00.000000 | 2022-06-21T00:00:00.000000 |
| certfr-2022-avi-572 | Vulnérabilité dans les produits IBM | 2022-06-21T00:00:00.000000 | 2022-06-21T00:00:00.000000 |
| certfr-2022-avi-571 | Vulnérabilité dans VMware Spring Data MongoDB | 2022-06-21T00:00:00.000000 | 2022-06-21T00:00:00.000000 |
| certfr-2022-avi-570 | Multiples vulnérabilités dans les produits IBM | 2022-06-20T00:00:00.000000 | 2022-06-20T00:00:00.000000 |
| certfr-2022-avi-569 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-20T00:00:00.000000 | 2022-06-20T00:00:00.000000 |
| certfr-2022-avi-568 | Multiples vulnérabilités dans les produits IBM | 2022-06-17T00:00:00.000000 | 2022-06-17T00:00:00.000000 |
| certfr-2022-avi-567 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-17T00:00:00.000000 | 2022-06-17T00:00:00.000000 |
| certfr-2022-avi-566 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2022-06-17T00:00:00.000000 | 2022-06-17T00:00:00.000000 |
| certfr-2022-avi-565 | Multiples vulnérabilités dans Google ChromeOS | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-564 | Multiples vulnérabilités dans Tenable Nessus Agent | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-563 | Vulnérabilité dans VMware Spring Cloud Function | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-562 | Vulnérabilité dans VMware HCX | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-561 | Multiples vulnérabilités dans IBM HTTP Server | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-560 | Multiples vulnérabilités dans les produits Cisco | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-559 | Multiples vulnérabilités dans les produits Microsoft | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-558 | Vulnérabilité dans Microsoft .Net | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-557 | Multiples vulnérabilités dans Microsoft Windows | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-556 | Multiples vulnérabilités dans Microsoft Office | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |