Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111068 | DesignSetGo <= 2.11.0 - Authenticated (Contributor+) S… |
justinnealey |
DesignSetGo |
2026-10-28T06:45:08.113Z | 2026-10-29T01:41:54.160Z | |
| cve-2026-109590 | Travelly <= 2.3.6 - Authenticated (Contributor+) Store… |
magepeopleteam |
Travelly – Tour & Travel Booking Manager for WooCommerce |
2026-10-28T06:45:07.717Z | 2026-10-29T01:41:54.301Z | |
| cve-2026-109385 | UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored… |
posimyththemes |
UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks |
2026-10-28T06:45:07.291Z | 2026-10-29T01:41:54.439Z | |
| cve-2026-103996 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:06.903Z | 2026-10-28T16:10:28.642Z | |
| cve-2026-110662 | MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cr… |
mxchat |
MxChat – AI Chatbot & Content Generation for WordPress |
2026-10-28T06:45:06.494Z | 2026-10-29T01:41:54.592Z | |
| cve-2026-109381 | Event Booking Manager for WooCommerce <= 5.7.8 - Authe… |
magepeopleteam |
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar |
2026-10-28T06:45:05.954Z | 2026-10-28T16:10:34.580Z | |
| cve-2026-103370 | Awesome Support <= 6.4.1 - Authenticated (Custom+) Sto… |
awesomesupport |
Awesome Support – WordPress HelpDesk & Support Plugin |
2026-10-28T06:45:05.565Z | 2026-10-29T01:41:54.736Z | |
| cve-2026-116609 | WP Visitor Statistics (Real Time Traffic) <= 8.8 - Aut… |
osamaesh |
WP Visitor Statistics (Real Time Traffic) |
2026-10-28T06:45:04.986Z | 2026-10-29T01:41:54.871Z | |
| cve-2026-115281 | N/A | Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi v… |
Unknown |
Recipe Card Blocks Lite |
2026-10-28T06:00:27.397Z | 2026-10-28T17:58:03.936Z |
| cve-2026-115255 | N/A | WP Roster < 2.35 - Unauthenticated Roster Member Deletion |
Unknown |
WP Roster |
2026-10-28T06:00:27.222Z | 2026-10-28T17:58:04.092Z |
| cve-2026-115225 | N/A | Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSR… |
Unknown |
Customer Engagement System |
2026-10-28T06:00:27.049Z | 2026-10-28T17:58:04.260Z |
| cve-2026-115224 | N/A | Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Pop… |
Unknown |
Customer Engagement System |
2026-10-28T06:00:26.878Z | 2026-10-28T17:58:04.411Z |
| cve-2026-113813 | N/A | PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticate… |
Unknown |
PayPlug for WooCommerce (Official) |
2026-10-28T06:00:26.467Z | 2026-10-28T17:58:04.601Z |
| cve-2026-113494 | N/A | GeoDirectory < 2.8.195 - Contributor+ Non-Public Listi… |
Unknown |
GeoDirectory |
2026-10-28T06:00:26.281Z | 2026-10-28T17:58:04.748Z |
| cve-2026-113488 | N/A | GeoDirectory < 2.8.196 - Contributor+ Stored XSS via g… |
Unknown |
GeoDirectory |
2026-10-28T06:00:26.104Z | 2026-10-28T17:58:04.973Z |
| cve-2026-113487 | N/A | GeoDirectory < 2.8.196 - Contributor+ Stored XSS via g… |
Unknown |
GeoDirectory |
2026-10-28T06:00:25.932Z | 2026-10-28T17:58:05.133Z |
| cve-2026-113486 | N/A | Media Library Assistant < 3.42 - Trashed Attachment De… |
Unknown |
Media Library Assistant |
2026-10-28T06:00:25.753Z | 2026-10-28T17:58:05.308Z |
| cve-2026-113485 | N/A | Media Library Assistant < 3.42 - Bulk Attachment Delet… |
Unknown |
Media Library Assistant |
2026-10-28T06:00:25.578Z | 2026-10-28T17:58:05.466Z |
| cve-2026-111967 | N/A | MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ S… |
Unknown |
MP3 Audio Player |
2026-10-28T06:00:25.402Z | 2026-10-28T17:58:05.640Z |
| cve-2026-111961 | N/A | Royal MCP < 1.5.10 - Contributor+ Private and Draft Co… |
Unknown |
Royal MCP |
2026-10-28T06:00:25.225Z | 2026-10-28T17:58:05.821Z |
| cve-2026-111960 | N/A | Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post… |
Unknown |
Royal MCP |
2026-10-28T06:00:25.046Z | 2026-10-28T17:58:06.002Z |
| cve-2026-111577 | N/A | GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalatio… |
Unknown |
GoSMTP |
2026-10-28T06:00:24.868Z | 2026-10-28T17:58:06.169Z |
| cve-2026-111032 | N/A | Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Produc… |
Unknown |
Welcart e-Commerce |
2026-10-28T06:00:24.660Z | 2026-10-28T17:58:06.341Z |
| cve-2026-111031 | N/A | Welcart e-Commerce < 2.12.6 - Unauthenticated Open Red… |
Unknown |
Welcart e-Commerce |
2026-10-28T06:00:24.488Z | 2026-10-28T17:58:06.485Z |
| cve-2026-111027 | N/A | Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id… |
Unknown |
Welcart e-Commerce |
2026-10-28T06:00:24.314Z | 2026-10-28T17:58:06.628Z |
| cve-2026-111021 | N/A | Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS … |
Unknown |
افزونه پیامک ووکامرس | Persian WooCommerce SMS |
2026-10-28T06:00:24.132Z | 2026-10-28T17:58:06.765Z |
| cve-2026-110691 | N/A | WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update |
Unknown |
WPOrLogin |
2026-10-28T06:00:23.955Z | 2026-10-28T17:58:06.900Z |
| cve-2026-110524 | N/A | Copy Anything to Clipboard < 5.5.5 - Contributor+ Stor… |
Unknown |
Copy Anything to Clipboard for WordPress |
2026-10-28T06:00:23.783Z | 2026-10-28T17:58:07.037Z |
| cve-2026-110509 | N/A | Essential Addons for Elementor < 6.8.7 - Unauthenticat… |
Unknown |
Essential Addons for Elementor |
2026-10-28T06:00:23.607Z | 2026-10-28T17:58:07.202Z |
| cve-2026-110507 | N/A | Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sen… |
Unknown |
Page Builder by SiteOrigin |
2026-10-28T06:00:23.185Z | 2026-10-28T17:58:07.345Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000021 | Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security" | 2022-03-16T14:46+09:00 | 2022-03-16T14:46+09:00 |
| jvndb-2022-000020 | Multiple vulnerabilities in pfSense | 2022-03-15T14:58+09:00 | 2024-06-21T11:59+09:00 |
| jvndb-2021-008345 | Installer of Trend Micro Portable Security may insecurely load Dynamic Link Libraries | 2022-03-14T16:43+09:00 | 2022-03-14T16:43+09:00 |
| jvndb-2022-001404 | Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2022-03-11T15:55+09:00 | 2022-03-11T15:55+09:00 |
| jvndb-2022-000016 | UNIVERGE WA Series vulnerable to OS command injection | 2022-03-10T14:31+09:00 | 2022-03-10T14:31+09:00 |
| jvndb-2022-001387 | Installer of WPS Office for Windows misconfigures the ACL for the installation directory | 2022-03-09T12:30+09:00 | 2024-06-21T11:37+09:00 |
| jvndb-2022-001384 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-03-08T15:56+09:00 | 2024-06-21T11:32+09:00 |
| jvndb-2022-001383 | Directory Permission Vulnerability in Hitachi Ops Center Viewpoint | 2022-03-07T15:45+09:00 | 2022-03-07T15:45+09:00 |
| jvndb-2022-001382 | File Permission Vulnerability in Hitachi Command Suite | 2022-03-07T15:35+09:00 | 2022-03-07T15:35+09:00 |
| jvndb-2022-000008 | i-FILTER vulnerable to improper check for certificate revocation | 2022-03-04T14:12+09:00 | 2022-03-04T14:12+09:00 |
| jvndb-2022-000019 | pfSense-pkg-WireGuard vulnerable to directory traversal | 2022-03-03T15:08+09:00 | 2024-06-20T16:51+09:00 |
| jvndb-2022-001381 | Multiple vulnerabilities in Trend Micro ServerProtect | 2022-03-03T14:42+09:00 | 2024-06-21T17:58+09:00 |
| jvndb-2022-000018 | MarkText vulnerable to cross-site scripting | 2022-03-03T14:40+09:00 | 2024-06-20T16:46+09:00 |
| jvndb-2022-000017 | Norton Security for Mac improperly processes ICMP packets | 2022-03-03T14:32+09:00 | 2022-03-03T14:32+09:00 |
| jvndb-2022-001380 | Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022) | 2022-03-02T17:07+09:00 | 2022-03-02T17:07+09:00 |
| jvndb-2022-000015 | EC-CUBE improperly handles HTTP Host header values | 2022-02-22T14:22+09:00 | 2024-06-21T17:39+09:00 |
| jvndb-2022-000013 | EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery | 2022-02-22T14:09+09:00 | 2024-06-21T14:05+09:00 |
| jvndb-2022-000014 | Multiple vulnerabilities in a-blog cms | 2022-02-18T15:55+09:00 | 2022-02-18T15:55+09:00 |
| jvndb-2022-001372 | Trend Micro Antivirus for MAC vulnerable to privilege escalation | 2022-02-18T14:55+09:00 | 2024-06-21T18:04+09:00 |
| jvndb-2022-000012 | Multiple vulnerabilities in phpUploader | 2022-02-17T15:20+09:00 | 2022-02-17T15:20+09:00 |
| jvndb-2022-000011 | HPE Agentless Management registers unquoted service paths | 2022-02-09T15:49+09:00 | 2022-02-09T15:49+09:00 |
| jvndb-2022-001299 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management 2 | 2022-02-08T17:15+09:00 | 2022-02-08T17:15+09:00 |
| jvndb-2022-000009 | CSV+ vulnerable to cross-site scripting | 2022-02-08T16:33+09:00 | 2022-02-08T16:33+09:00 |
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0447 | Multiples vulnérabilités dans Drupal | 2026-04-16T00:00:00.000000 | 2026-04-16T00:00:00.000000 |
| certfr-2026-avi-0446 | Multiples vulnérabilités dans Mattermost Server | 2026-04-16T00:00:00.000000 | 2026-04-17T00:00:00.000000 |
| certfr-2026-avi-0445 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0444 | Multiples vulnérabilités dans Microsoft Azure | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0443 | Multiples vulnérabilités dans Microsoft .Net | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0442 | Multiples vulnérabilités dans Microsoft Windows | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0441 | Multiples vulnérabilités dans Microsoft Office | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0440 | Multiples vulnérabilités dans les produits Fortinet | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0439 | Multiples vulnérabilités dans Ivanti Neurons | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0438 | Multiples vulnérabilités dans les produits Adobe | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0437 | Vulnérabilité dans Python | 2026-04-15T00:00:00.000000 | 2026-04-15T00:00:00.000000 |
| certfr-2026-avi-0436 | Multiples vulnérabilités dans Tenable Identity Exposure | 2026-04-15T00:00:00.000000 | 2026-04-16T00:00:00.000000 |
| certfr-2026-avi-0435 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-14T00:00:00.000000 | 2026-04-14T00:00:00.000000 |
| certfr-2026-avi-0434 | Multiples vulnérabilités dans les produits SAP | 2026-04-14T00:00:00.000000 | 2026-04-14T00:00:00.000000 |
| certfr-2026-avi-0433 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-04-14T00:00:00.000000 | 2026-04-14T00:00:00.000000 |
| certfr-2026-avi-0432 | Multiples vulnérabilités dans les produits Siemens | 2026-04-14T00:00:00.000000 | 2026-04-14T00:00:00.000000 |
| certfr-2026-avi-0431 | Multiples vulnérabilités dans Synology SSL VPN Client | 2026-04-14T00:00:00.000000 | 2026-04-14T00:00:00.000000 |
| certfr-2026-avi-0430 | Multiples vulnérabilités dans Python | 2026-04-14T00:00:00.000000 | 2026-04-14T00:00:00.000000 |
| certfr-2026-avi-0429 | Vulnérabilité dans Adobe Acrobat | 2026-04-13T00:00:00.000000 | 2026-04-13T00:00:00.000000 |
| certfr-2026-avi-0428 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-13T00:00:00.000000 | 2026-04-13T00:00:00.000000 |
| certfr-2026-avi-0427 | Multiples vulnérabilités dans Microsoft Edge | 2026-04-13T00:00:00.000000 | 2026-04-13T00:00:00.000000 |
| certfr-2026-avi-0426 | Multiples vulnérabilités dans Python | 2026-04-13T00:00:00.000000 | 2026-04-13T00:00:00.000000 |
| certfr-2026-avi-0425 | Vulnérabilité dans Foxit PDF Services API | 2026-04-13T00:00:00.000000 | 2026-04-13T00:00:00.000000 |
| certfr-2026-avi-0424 | Multiples vulnérabilités dans les produits IBM | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |
| certfr-2026-avi-0423 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |
| certfr-2026-avi-0422 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |
| certfr-2026-avi-0421 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |
| certfr-2026-avi-0420 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |
| certfr-2026-avi-0419 | Multiples vulnérabilités dans Mattermost Desktop App | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |
| certfr-2026-avi-0418 | Multiples vulnérabilités dans Apache Tomcat | 2026-04-10T00:00:00.000000 | 2026-04-10T00:00:00.000000 |