Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-110185 | Bit Flows: AI Agent Automation & Integrations for Form… |
bitpressadmin |
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More |
2026-10-28T06:45:20.364Z | 2026-10-28T16:09:28.549Z | |
| cve-2026-116750 | VikRentCar Car Rental Management System <= 1.4.10 - Au… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:19.953Z | 2026-10-29T01:41:51.112Z | |
| cve-2026-109218 | Contact Manager <= 9.1.2 - Unauthenticated Arbitrary F… |
kleor |
Contact Manager |
2026-10-28T06:45:19.576Z | 2026-10-29T01:41:51.263Z | |
| cve-2026-109370 | Document Embedder <= 2.4.0 - Authenticated (Contributo… |
bplugins |
Document Embedder – let visitors read files without downloading |
2026-10-28T06:45:19.156Z | 2026-10-29T01:41:51.425Z | |
| cve-2026-77871 | Post Snippets <= 4.2.4 - Authenticated (Contributor+) … |
saadiqbal |
Post Snippets – Custom WordPress Code Snippets Customizer |
2026-10-28T06:45:18.731Z | 2026-10-29T01:41:51.567Z | |
| cve-2026-107710 | Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stor… |
wpmudev |
Hustle – Email Marketing, Lead Generation, Optins, Popups |
2026-10-28T06:45:18.336Z | 2026-10-28T16:09:34.692Z | |
| cve-2026-109988 | Product Addons for Woocommerce <= 3.1.8 - Authenticate… |
acowebs |
Product Addons for Woocommerce – Product Options with Custom Fields |
2026-10-28T06:45:17.956Z | 2026-10-29T01:41:51.709Z | |
| cve-2026-2839 | Advanced Custom Fields: Extended <= 0.9.2.7 - Missing … |
hwk-fr |
Advanced Custom Fields: Extended |
2026-10-28T06:45:17.566Z | 2026-10-29T01:41:51.846Z | |
| cve-2026-116761 | CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scr… |
jtsternberg |
CMB2 |
2026-10-28T06:45:17.138Z | 2026-10-29T01:41:51.992Z | |
| cve-2026-108366 | easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stor… |
wpdevteam |
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution |
2026-10-28T06:45:16.742Z | 2026-10-29T01:41:52.136Z | |
| cve-2026-110071 | Mang Board <= 2.4.5 - Authenticated (Contributor+) Sto… |
kitae-park |
Mang Board |
2026-10-28T06:45:16.337Z | 2026-10-29T01:41:52.280Z | |
| cve-2026-111111 | Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-S… |
bdthemes |
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons |
2026-10-28T06:45:15.943Z | 2026-10-29T01:41:52.430Z | |
| cve-2026-111213 | Travelly <= 2.3.6 - Missing Authorization to Authentic… |
magepeopleteam |
Travelly – Tour & Travel Booking Manager for WooCommerce |
2026-10-28T06:45:15.536Z | 2026-10-29T01:41:52.570Z | |
| cve-2026-116610 | Clean Login <= 1.20.1 - Missing Authorization to Authe… |
hornero |
Clean Login |
2026-10-28T06:45:15.107Z | 2026-10-28T16:09:40.610Z | |
| cve-2026-116749 | VikRentCar Car Rental Management System <= 1.4.10 - Au… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:14.677Z | 2026-10-29T01:41:52.709Z | |
| cve-2026-92098 | Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.… |
webheadllc |
Webheadcoder Multi-Step Forms for Contact Form 7 |
2026-10-28T06:45:14.277Z | 2026-10-28T16:09:47.127Z | |
| cve-2026-109980 | Related Posts for WordPress <= 3.0.0 - Missing Authori… |
barrykooij |
Related Posts for WordPress |
2026-10-28T06:45:13.840Z | 2026-10-28T16:09:53.821Z | |
| cve-2026-104729 | Avada (Fusion) Builder <= 3.16.2 - Authenticated (Cont… |
themefusion |
Avada (Fusion) Builder |
2026-10-28T06:45:13.360Z | 2026-10-29T01:41:52.852Z | |
| cve-2026-118164 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:12.978Z | 2026-10-28T16:09:59.980Z | |
| cve-2026-100175 | Postie <= 1.9.87 - Unauthenticated Stored Cross-Site S… |
wayneallen-1 |
Postie |
2026-10-28T06:45:12.519Z | 2026-10-29T01:41:52.993Z | |
| cve-2026-109384 | The Innovative Form Builder <= 1.5.1 - Authenticated (… |
melograno |
The Innovative Form Builder – IvyForms |
2026-10-28T06:45:12.110Z | 2026-10-29T01:41:53.142Z | |
| cve-2026-77188 | Waitlist Woocommerce ( Back in stock notifier ) <= 2.9… |
xootix |
Waitlist Woocommerce ( Back in stock notifier ) |
2026-10-28T06:45:11.697Z | 2026-10-29T01:41:53.282Z | |
| cve-2026-110020 | Rich Showcase for Google Reviews <= 7.1.6 - Missing Au… |
widgetpack |
Rich Showcase for Google Reviews |
2026-10-28T06:45:11.326Z | 2026-10-29T01:41:53.443Z | |
| cve-2026-109979 | Related Posts for WordPress <= 3.0.0 - Missing Authori… |
barrykooij |
Related Posts for WordPress |
2026-10-28T06:45:10.920Z | 2026-10-29T01:41:53.590Z | |
| cve-2026-111120 | VikRentCar Car Rental Management System <= 1.4.8 - Cro… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:10.550Z | 2026-10-28T16:10:10.199Z | |
| cve-2026-104740 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:10.177Z | 2026-10-29T01:41:53.729Z | |
| cve-2026-111372 | AI ChatBot for WooCommerce <= 5.0.0 - Missing Authoriz… |
quantumcloud |
AI ChatBot for WooCommerce – WoowBot |
2026-10-28T06:45:09.788Z | 2026-10-29T01:41:53.869Z | |
| cve-2026-109978 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) S… |
cozythemes |
Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox |
2026-10-28T06:45:09.376Z | 2026-10-29T01:41:54.013Z | |
| cve-2026-76058 | PayPal Brasil para WooCommerce <= 1.7.8 - Missing Auth… |
odefranca |
PayPal Brasil para WooCommerce |
2026-10-28T06:45:08.964Z | 2026-10-28T16:10:15.959Z | |
| cve-2026-109972 | s2Member <= 261011 - Authenticated (Contributor+) Stor… |
clavaque |
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions |
2026-10-28T06:45:08.551Z | 2026-10-28T16:10:21.905Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-001948 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-06-03T12:17+09:00 | 2024-06-18T16:30+09:00 |
| jvndb-2022-000042 | T&D Data Server and THERMO RECORDER DATA SERVER contain a directory traversal vulnerability. | 2022-06-01T16:12+09:00 | 2024-06-18T10:34+09:00 |
| jvndb-2022-000041 | WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting | 2022-06-01T13:39+09:00 | 2024-06-18T10:42+09:00 |
| jvndb-2022-000039 | RevoWorks incomplete filtering of MS Office v4 macros | 2022-05-27T16:09+09:00 | 2024-06-18T16:31+09:00 |
| jvndb-2022-000040 | Mobaoku-Auction & Flea Market App for iOS vulnerable to improper server certificate verification | 2022-05-27T15:48+09:00 | 2024-06-18T11:06+09:00 |
| jvndb-2022-001929 | Multiple vulnerabilities in Fuji Electric V-SFT | 2022-05-27T15:39+09:00 | 2024-06-18T13:44+09:00 |
| jvndb-2022-001931 | Multiple vulnerabilities in Fuji Electric V-SFT, V-Server and V-Server Lite | 2022-05-27T15:37+09:00 | 2024-06-18T16:28+09:00 |
| jvndb-2022-001923 | Multiple vulnerabilities in CONTEC SolarView Compact | 2022-05-27T15:28+09:00 | 2024-06-20T11:34+09:00 |
| jvndb-2022-001809 | Trend Micro Password Manager vulnerable to privilege escalation | 2022-05-24T15:27+09:00 | 2024-06-18T17:52+09:00 |
| jvndb-2022-000038 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2022-05-24T15:00+09:00 | 2024-06-18T15:41+09:00 |
| jvndb-2022-000037 | Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS) | 2022-05-20T17:04+09:00 | 2024-06-20T12:09+09:00 |
| jvndb-2022-000036 | Multiple vulnerabilities in Rakuten Casa | 2022-05-19T15:13+09:00 | 2024-06-18T12:09+09:00 |
| jvndb-2022-000035 | Multiple vulnerabilities in Cybozu Garoon | 2022-05-16T14:25+09:00 | 2024-06-17T16:34+09:00 |
| jvndb-2022-000033 | Strapi vulnerable to cross-site scripting | 2022-05-13T16:45+09:00 | 2024-06-18T11:17+09:00 |
| jvndb-2022-000034 | EC-CUBE plugin "Easy Blog for EC-CUBE4" vulnerable to cross-site request forgery | 2022-05-13T16:31+09:00 | 2024-06-18T12:13+09:00 |
| jvndb-2022-001800 | Installer of Trend Micro HouseCall for Home Networks may insecurely load Dynamic Link Libraries | 2022-05-13T16:24+09:00 | 2022-05-13T16:24+09:00 |
| jvndb-2022-001795 | Command injection vulnerability in QNAP VioStar series NVR | 2022-05-12T18:07+09:00 | 2024-06-20T11:31+09:00 |
| jvndb-2022-000032 | Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2022-05-11T15:21+09:00 | 2024-06-18T17:46+09:00 |
| jvndb-2022-000031 | GENEREX RCCMD vulnerable to directory traversal | 2022-05-10T15:47+09:00 | 2024-06-18T15:35+09:00 |
| jvndb-2022-000030 | Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM | 2022-05-09T15:02+09:00 | 2024-07-18T16:30+09:00 |
| jvndb-2022-000029 | KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass | 2022-05-09T14:43+09:00 | 2024-06-19T16:03+09:00 |
| jvndb-2022-000028 | Multiple vulnerabilities in multiple MEIKYO ELECTRIC products | 2022-05-09T14:31+09:00 | 2024-06-19T15:55+09:00 |
| jvndb-2022-000027 | Hammock AssetView missing authentication for critical functions | 2022-04-22T13:53+09:00 | 2024-06-20T12:15+09:00 |
| jvndb-2022-000026 | WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery | 2022-04-15T13:15+09:00 | 2024-06-25T18:04+09:00 |
| jvndb-2022-001526 | Trend Micro Antivirus for Mac vulnerable to privilege escalation | 2022-04-07T16:58+09:00 | 2022-04-07T16:58+09:00 |
| jvndb-2022-001494 | Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents | 2022-03-31T17:25+09:00 | 2022-03-31T17:25+09:00 |
| jvndb-2022-000024 | Zero-channel BBS Plus vulnerable to cross-site scripting | 2022-03-30T15:36+09:00 | 2024-06-20T17:34+09:00 |
| jvndb-2022-000023 | WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization | 2022-03-30T15:23+09:00 | 2024-06-21T12:25+09:00 |
| jvndb-2022-000022 | AttacheCase may insecurely load Dynamic Link Libraries | 2022-03-30T14:00+09:00 | 2024-06-21T11:42+09:00 |
| jvndb-2022-001477 | Netcommunity OG410X and OG810X VoIP gateway/Hikari VoIP adapter for business offices vulnerable to OS command injection | 2022-03-23T12:08+09:00 | 2022-03-23T12:08+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0477 | Multiples vulnérabilités dans les produits Spring | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0476 | Multiples vulnérabilités dans les produits NetApp | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0475 | Multiples vulnérabilités dans GitLab | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0474 | Vulnérabilité dans Python | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0473 | Multiples vulnérabilités dans Oracle Weblogic | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0472 | Multiples vulnérabilités dans Oracle Virtualization | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0471 | Multiples vulnérabilités dans Oracle Systems | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0470 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0469 | Multiples vulnérabilités dans Oracle MySQL | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0468 | Multiples vulnérabilités dans Oracle Java SE | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0467 | Multiples vulnérabilités dans Oracle Database Server | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0466 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-21T00:00:00.000000 | 2026-04-21T00:00:00.000000 |
| certfr-2026-avi-0465 | Vulnérabilité dans Mattermost Server | 2026-04-21T00:00:00.000000 | 2026-04-21T00:00:00.000000 |
| certfr-2026-avi-0464 | Vulnérabilité dans Typo3 | 2026-04-21T00:00:00.000000 | 2026-04-21T00:00:00.000000 |
| certfr-2026-avi-0463 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0462 | Multiples vulnérabilités dans Microsoft Edge | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0461 | Multiples vulnérabilités dans Apache Kafka | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0460 | Vulnérabilité dans Xen | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0459 | Vulnérabilité dans Mattermost Server | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0458 | Vulnérabilité dans les produits Moxa | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0457 | Multiples vulnérabilités dans Spring Framework | 2026-04-20T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0456 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-17T00:00:00.000000 | 2026-04-17T00:00:00.000000 |
| certfr-2026-avi-0455 | Multiples vulnérabilités dans IBM QRadar | 2026-04-17T00:00:00.000000 | 2026-04-17T00:00:00.000000 |
| certfr-2026-avi-0454 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-04-17T00:00:00.000000 | 2026-04-17T00:00:00.000000 |
| certfr-2026-avi-0453 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-04-17T00:00:00.000000 | 2026-04-17T00:00:00.000000 |
| certfr-2026-avi-0452 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-04-17T00:00:00.000000 | 2026-04-17T00:00:00.000000 |
| certfr-2026-avi-0451 | Multiples vulnérabilités dans les produits Cisco | 2026-04-16T00:00:00.000000 | 2026-04-16T00:00:00.000000 |
| certfr-2026-avi-0450 | Multiples vulnérabilités dans les produits Splunk | 2026-04-16T00:00:00.000000 | 2026-04-16T00:00:00.000000 |
| certfr-2026-avi-0449 | Vulnérabilité dans Apache Kafka | 2026-04-16T00:00:00.000000 | 2026-04-16T00:00:00.000000 |
| certfr-2026-avi-0448 | Multiples vulnérabilités dans Google Chrome | 2026-04-16T00:00:00.000000 | 2026-04-16T00:00:00.000000 |