Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75903 | Vulnity Security <= 1.4.3 - Unauthenticated Authentica… |
manuelgalan |
Vulnity Security |
2026-10-16T07:44:02.515Z | 2026-10-16T15:09:36.465Z | |
| cve-2026-87111 | User Registration PRO <= 6.2.9 - Unauthenticated Store… |
WPEverest |
User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin |
2026-10-16T07:44:01.961Z | 2026-10-16T14:39:01.949Z | |
| cve-2026-18799 | 4.3 (v3.1) | Mattermost Server fails to restrict Slack import accou… |
Mattermost |
Mattermost |
2026-10-16T07:16:19.062Z | 2026-10-16T11:28:45.200Z |
| cve-2026-16251 | 6.5 (v3.1) | Mattermost local image proxy allows server memory exha… |
Mattermost |
Mattermost |
2026-10-16T07:14:59.296Z | 2026-10-16T11:57:33.968Z |
| cve-2026-18256 | 4.3 (v3.1) | Private team metadata disclosure via the team search API |
Mattermost |
Mattermost |
2026-10-16T07:13:43.684Z | 2026-10-16T11:58:08.912Z |
| cve-2026-18223 | 5 (v3.1) | Mattermost invitation tokens not bound to invited emai… |
Mattermost |
Mattermost |
2026-10-16T07:12:39.911Z | 2026-10-16T14:16:33.994Z |
| cve-2026-19076 | 4.4 (v3.1) | Mattermost fails to reject OAuth application sessions … |
Mattermost |
Mattermost |
2026-10-16T07:11:29.552Z | 2026-10-16T14:06:23.946Z |
| cve-2026-18560 | 4.3 (v3.1) | Improper order of authorisations in Mattermost GetFile… |
Mattermost |
Mattermost |
2026-10-16T07:10:12.870Z | 2026-10-16T14:17:24.943Z |
| cve-2026-16453 | 7.1 (v3.1) | Mattermost SAML RelayState forgery allows unauthorized… |
Mattermost |
Mattermost |
2026-10-16T07:08:48.627Z | 2026-10-16T14:18:12.181Z |
| cve-2026-19600 | 4.5 (v3.1) | Mattermost logs plaintext authentication tokens in deb… |
Mattermost |
Mattermost |
2026-10-16T07:07:17.899Z | 2026-10-16T12:02:51.761Z |
| cve-2026-19621 | 6.5 (v3.1) | Mattermost leaks interactive-message integration secre… |
Mattermost |
Mattermost |
2026-10-16T07:06:00.580Z | 2026-10-16T11:58:36.743Z |
| cve-2026-19603 | 4.3 (v3.1) | Private channel ID disclosure via user status endpoints |
Mattermost |
Mattermost |
2026-10-16T07:02:38.486Z | 2026-10-16T11:59:09.985Z |
| cve-2026-18795 | 6.4 (v3.1) | Missing server side validation allowed user to quarant… |
Mattermost |
Mattermost |
2026-10-16T07:01:22.549Z | 2026-10-16T11:59:42.771Z |
| cve-2026-94169 | 10 (v3.1) | WordPress The Grid plugin <= 2.8.1 - Remote Code Execu… |
Theme-one |
The Grid |
2026-10-16T07:00:38.023Z | 2026-10-16T18:38:00.753Z |
| cve-2026-94388 | 9.3 (v3.1) | WordPress Green Popups plugin < 7.6.3 - SQL Injection … |
halfdata |
Green Popups |
2026-10-16T07:00:37.973Z | 2026-10-16T15:09:36.628Z |
| cve-2026-97296 | 8.1 (v3.1) | WordPress Gravity Forms plugin < 3.1.1 - PHP Object In… |
Rocketgenius, Inc |
Gravity Forms |
2026-10-16T07:00:37.595Z | 2026-10-16T15:09:37.442Z |
| cve-2026-96339 | 7.1 (v3.1) | WordPress Houzez theme <= 4.4.0 - Cross Site Scripting… |
Houzez.co |
Houzez |
2026-10-16T07:00:37.525Z | 2026-10-16T10:36:08.361Z |
| cve-2026-19867 | 4.3 (v3.1) | Uncapped mention keys in user notification properties … |
Mattermost |
Mattermost |
2026-10-16T07:00:12.550Z | 2026-10-16T12:00:11.330Z |
| cve-2026-19601 | 4.9 (v3.1) | Disclosure of AD/LDAP bind password via Test Connection |
Mattermost |
Mattermost |
2026-10-16T06:58:33.116Z | 2026-10-16T12:00:43.806Z |
| cve-2026-18551 | 6.5 (v3.1) | Mattermost guest account privilege escalation via memb… |
Mattermost |
Mattermost |
2026-10-16T06:56:51.996Z | 2026-10-20T13:11:28.823Z |
| cve-2026-19541 | 6.5 (v3.1) | Outgoing OAuth connection client secret exposure durin… |
Mattermost |
Mattermost |
2026-10-16T06:54:57.403Z | 2026-10-16T12:03:18.956Z |
| cve-2026-110366 | 5.3 (v3.1) | WordPress Site Reviews plugin <= 8.3.4 - Broken Access… |
Gemini Labs |
Site Reviews |
2026-10-16T06:54:11.866Z | 2026-10-16T15:09:37.698Z |
| cve-2026-104715 | 7.8 (v3.1) | Cifs-utils: mount.cifs credential-file option injectio… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T06:47:10.481Z | 2026-11-04T21:41:06.386Z |
| cve-2026-92115 | WP Photo Album Plus <= 9.3.02.002 - Authenticated (Cus… |
opajaap |
WP Photo Album Plus |
2026-10-16T06:41:08.509Z | 2026-10-16T15:09:37.836Z | |
| cve-2026-15222 | User Registration & Membership <= 5.2.8 - Authenticate… |
wpeverest |
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder |
2026-10-16T06:41:08.118Z | 2026-10-16T15:09:37.979Z | |
| cve-2026-109401 | WP Mail Logging <= 1.17.0 - Authenticated (Administrat… |
smub |
WP Mail Logging |
2026-10-16T06:41:07.717Z | 2026-10-16T14:21:19.789Z | |
| cve-2026-97640 | WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site… |
smub |
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) |
2026-10-16T06:41:07.314Z | 2026-10-16T14:39:02.103Z | |
| cve-2026-110252 | WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated St… |
etruel |
WPeMatico RSS Feed Fetcher |
2026-10-16T06:41:06.918Z | 2026-10-16T14:39:02.268Z | |
| cve-2026-109193 | HivePress <= 1.7.32 - Unauthenticated Stored Cross-Sit… |
hivepress |
HivePress – Business Directory, Listings & Classified Ads Plugin |
2026-10-16T06:41:06.532Z | 2026-10-16T14:39:02.457Z | |
| cve-2026-104730 | Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Obj… |
sunshinephotocart |
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers |
2026-10-16T06:41:06.131Z | 2026-10-16T14:21:49.208Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-005 | Vulnérabilité dans strongSwan | 2015-01-06T00:00:00.000000 | 2015-01-06T00:00:00.000000 |
| certfr-2015-avi-004 | Multiples vulnérabilités dans IBM Infosphere BigInsights | 2015-01-05T00:00:00.000000 | 2015-01-05T00:00:00.000000 |
| certfr-2015-avi-003 | Vulnérabilité dans F5 BIG-IP ASM | 2015-01-05T00:00:00.000000 | 2015-01-05T00:00:00.000000 |
| certfr-2015-avi-002 | Vulnérabilité dans Noyau Linux | 2015-01-02T00:00:00.000000 | 2015-01-02T00:00:00.000000 |
| certfr-2015-avi-001 | Vulnérabilité dans IBM Sterling Connect:Direct for UNIX | 2015-01-02T00:00:00.000000 | 2015-01-02T00:00:00.000000 |
| certfr-2014-avi-544 | Multiples vulnérabilités dans GNU project GnuPG | 2014-12-31T00:00:00.000000 | 2014-12-31T00:00:00.000000 |
| certfr-2014-avi-543 | Vulnérabilité dans IBM i | 2014-12-30T00:00:00.000000 | 2014-12-30T00:00:00.000000 |
| certfr-2014-avi-542 | Multiples vulnérabilités dans IBM Security Network Intrusion Prevention System | 2014-12-30T00:00:00.000000 | 2014-12-30T00:00:00.000000 |
| certfr-2014-avi-541 | Multiples vulnérabilités dans Huawei | 2014-12-24T00:00:00.000000 | 2014-12-24T00:00:00.000000 |
| certfr-2014-avi-540 | Vulnérabilité dans PHP | 2014-12-24T00:00:00.000000 | 2014-12-24T00:00:00.000000 |
| certfr-2014-avi-539 | Multiples vulnérabilités dans Apple OS X | 2014-12-23T00:00:00.000000 | 2014-12-23T00:00:00.000000 |
| certfr-2014-avi-538 | Multiples vulnérabilités dans les produits Cisco | 2014-12-23T00:00:00.000000 | 2014-12-23T00:00:00.000000 |
| certfr-2014-avi-537 | Multiples vulnérabilités dans NTP ntpd | 2014-12-22T00:00:00.000000 | 2014-12-22T00:00:00.000000 |
| certfr-2014-avi-536 | Multiples vulnérabilités dans Huawei RomPager | 2014-12-19T00:00:00.000000 | 2014-12-19T00:00:00.000000 |
| certfr-2014-avi-535 | Vulnérabilité dans Apple Xcode | 2014-12-19T00:00:00.000000 | 2014-12-19T00:00:00.000000 |
| certfr-2014-avi-534 | Multiples vulnérabilités dans Huawei eSpace Desktop | 2014-12-18T00:00:00.000000 | 2014-12-18T00:00:00.000000 |
| certfr-2014-avi-533 | Vulnérabilité dans les produits F5 | 2014-12-18T00:00:00.000000 | 2014-12-18T00:00:00.000000 |
| certfr-2014-avi-532 | Multiples vulnérabilités dans le noyau linux RedHat | 2014-12-17T00:00:00.000000 | 2014-12-17T00:00:00.000000 |
| certfr-2014-avi-531 | Vulnérabilité dans Struts | 2014-12-17T00:00:00.000000 | 2014-12-17T00:00:00.000000 |
| certfr-2014-avi-530 | Vulnérabilité dans les produits Huawei | 2014-12-15T00:00:00.000000 | 2014-12-15T00:00:00.000000 |
| certfr-2014-avi-529 | Multiples vulnérabilités dans les produits F5 | 2014-12-15T00:00:00.000000 | 2014-12-15T00:00:00.000000 |
| certfr-2014-avi-528 | Multiples vulnérabilités dans le noyau Linux | 2014-12-12T00:00:00.000000 | 2014-12-12T00:00:00.000000 |
| certfr-2014-avi-527 | Vulnérabilité dans TYPO3 | 2014-12-12T00:00:00.000000 | 2014-12-12T00:00:00.000000 |
| certfr-2014-avi-526 | Vulnérabilité dans les produits Cisco | 2014-12-12T00:00:00.000000 | 2014-12-12T00:00:00.000000 |
| certfr-2014-avi-525 | Multiples vulnérabilités dans les produits IBM | 2014-12-11T00:00:00.000000 | 2014-12-11T00:00:00.000000 |
| certfr-2014-avi-524 | Vulnérabilité dans VMware vCloud Automation Center | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-523 | Multiples vulnérabilités dans Adobe Reader | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-522 | Multiples vulnérabilités dans Adobe Flash | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-521 | Multiples vulnérabilités dans Microsoft Excel | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-520 | Vulnérabilité dans Microsoft Office | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |