Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-19798 | WP Map Block <= 3.0.0 - Missing Authorization to Authe… |
tusharimran |
WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters |
2026-10-16T06:41:05.739Z | 2026-10-16T14:22:54.237Z | |
| cve-2026-109382 | WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensiti… |
bilalnaseer |
WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents |
2026-10-16T06:41:05.349Z | 2026-10-16T15:09:38.121Z | |
| cve-2026-104755 | WP Compress <= 7.25.00 - Unauthenticated Privilege Esc… |
aresit |
WP Compress – Instant Performance & Speed Optimization |
2026-10-16T06:41:04.957Z | 2026-10-16T15:09:38.262Z | |
| cve-2026-107768 | TranslatePress <= 3.3.7 - Unauthenticated Stored Cross… |
cozmoslabs |
TranslatePress – Translate Multilingual sites with AI Translation |
2026-10-16T06:41:04.583Z | 2026-10-16T14:39:02.658Z | |
| cve-2026-109388 | HivePress <= 1.7.32 - Authenticated (Subscriber+) Stor… |
hivepress |
HivePress – Business Directory, Listings & Classified Ads Plugin |
2026-10-16T06:41:04.192Z | 2026-10-16T14:39:02.831Z | |
| cve-2026-110290 | WebberZone Top 10 <= 4.5.2 - Authenticated (Contributo… |
ajay |
WebberZone Top 10 — Popular Posts |
2026-10-16T06:41:03.815Z | 2026-10-16T14:39:03.035Z | |
| cve-2026-92553 | YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitra… |
yaycommerce |
YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports |
2026-10-16T06:41:03.415Z | 2026-10-16T15:09:38.412Z | |
| cve-2026-111069 | GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) … |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-16T06:41:02.462Z | 2026-10-16T14:39:03.255Z | |
| cve-2026-107770 | Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - … |
tigroumeow |
Photo Engine (Media Organizer & Lightroom) |
2026-10-16T06:41:01.346Z | 2026-10-16T14:23:26.406Z | |
| cve-2026-110664 | Premium Packages <= 7.2.8 - Authenticated (Subscriber+… |
codename065 |
Premium Packages – Sell Digital Products Securely |
2026-10-16T06:41:00.954Z | 2026-10-16T14:39:03.424Z | |
| cve-2026-110701 | CP Multi View Events Calendar <= 1.4.42 - Unauthentica… |
codepeople |
CP Multi View Events Calendar |
2026-10-16T06:41:00.578Z | 2026-10-16T14:26:52.924Z | |
| cve-2026-111178 | WP Booking System <= 2.1.0.1 - Authenticated (Administ… |
murgroland |
WP Booking System – Booking Calendar |
2026-10-16T06:41:00.178Z | 2026-10-16T15:09:38.559Z | |
| cve-2026-107646 | HUSKY <= 1.4.5 - Unauthenticated Sensitive Information… |
realmag777 |
HUSKY – Products Filter for WooCommerce Professional |
2026-10-16T06:40:59.675Z | 2026-10-16T14:52:03.331Z | |
| cve-2026-110191 | N/A | Product Delivery Date for WooCommerce – Lite < 3.3.2 -… |
Unknown |
Product Delivery Date for WooCommerce |
2026-10-16T06:00:15.743Z | 2026-10-16T14:49:19.792Z |
| cve-2026-110179 | N/A | affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via … |
Unknown |
affiliate-toolkit |
2026-10-16T06:00:15.410Z | 2026-10-16T14:49:19.976Z |
| cve-2026-110135 | N/A | OTP Login & Register Woocommerce < 2.7.3 - Unauthentic… |
Unknown |
OTP Login & Register Woocommerce |
2026-10-16T06:00:15.231Z | 2026-10-16T14:49:20.138Z |
| cve-2026-110039 | N/A | Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Up… |
Unknown |
Smush |
2026-10-16T06:00:15.049Z | 2026-10-16T14:49:20.298Z |
| cve-2026-110015 | N/A | Salon Booking System < 10.31.9 - Administrator Account… |
Unknown |
Salon Booking System |
2026-10-16T06:00:14.856Z | 2026-10-16T14:49:20.475Z |
| cve-2026-110014 | N/A | Salon Booking System < 10.31.9 - Unauthenticated Booki… |
Unknown |
Salon Booking System |
2026-10-16T06:00:14.661Z | 2026-10-16T14:49:20.626Z |
| cve-2026-110013 | N/A | Salon Booking System < 10.31.9 - Unauthenticated Salon… |
Unknown |
Salon Booking System |
2026-10-16T06:00:14.481Z | 2026-10-16T14:49:20.785Z |
| cve-2026-110012 | N/A | Salon Booking System < 10.31.3 - Subscriber+ Booking P… |
Unknown |
Salon Booking System |
2026-10-16T06:00:14.281Z | 2026-10-16T14:49:20.947Z |
| cve-2026-109982 | N/A | MB Custom Post Types & Custom Taxonomies < 2.12.2 - Su… |
Unknown |
MB Custom Post Types & Custom Taxonomies |
2026-10-16T06:00:14.108Z | 2026-10-16T14:49:21.095Z |
| cve-2026-105974 | N/A | Visual Form Builder <= 3.1 - Subscriber+ Sensitive Dat… |
Unknown |
Visual Form Builder |
2026-10-16T06:00:13.926Z | 2026-10-16T14:49:21.253Z |
| cve-2026-105973 | N/A | Visual Form Builder <= 3.1 - Subscriber+ Arbitrary For… |
Unknown |
Visual Form Builder |
2026-10-16T06:00:13.742Z | 2026-10-16T14:49:21.422Z |
| cve-2026-103696 | N/A | Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'de… |
Unknown |
Mobile builder |
2026-10-16T06:00:13.565Z | 2026-10-16T14:49:21.576Z |
| cve-2026-74923 | N/A | Document Gallery <= 5.1.1 - Unauthenticated Non-Public… |
Unknown |
Document Gallery |
2026-10-16T06:00:13.033Z | 2026-10-16T14:49:21.732Z |
| cve-2026-92427 | N/A | Coinsnap Bitcoin Crowdfunding <= 1.2.0 - Unauthenticat… |
Unknown |
Coinsnap Bitcoin Crowdfunding |
2026-10-16T06:00:12.491Z | 2026-10-16T14:49:21.897Z |
| cve-2026-91830 | N/A | Subscribe to Comments < 2.3.3 - Unauthenticated Subscr… |
Unknown |
Subscribe to Comments |
2026-10-16T06:00:11.688Z | 2026-10-16T14:49:22.052Z |
| cve-2026-91833 | N/A | WX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'atta… |
Unknown |
WX Subscribe 微信支付付费订阅 |
2026-10-16T06:00:11.471Z | 2026-10-16T14:49:22.203Z |
| cve-2026-100186 | User Profile Builder <= 4.0.3 - Unauthenticated Stored… |
cozmoslabs |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor |
2026-10-16T05:30:28.153Z | 2026-10-16T14:39:03.586Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-519 | Multiples vulnérabilités dans Microsoft Word et Microsoft Office Web Apps | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-518 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-517 | Multiples vulnérabilités dans Microsoft Exchange Server Could | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-516 | Vulnérabilité dans le composant graphique de Microsoft Windows | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-515 | Vulnérabilité dans Microsoft VBScript Scripting Engine | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-514 | Vulnérabilité dans Cisco Unified Communications Domain Manager | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-513 | Multiples vulnérabilités dans les produits IBM | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-512 | Multiples vulnérabilités dans plusieurs produits DNS | 2014-12-09T00:00:00.000000 | 2014-12-09T00:00:00.000000 |
| certfr-2014-avi-511 | Vulnérabilité dans Cisco Unified Computing System Manager | 2014-12-09T00:00:00.000000 | 2014-12-09T00:00:00.000000 |
| certfr-2014-avi-510 | Vulnérabilité dans Citrix CloudPlatform | 2014-12-09T00:00:00.000000 | 2014-12-09T00:00:00.000000 |
| certfr-2014-avi-509 | Multiples vulnérabilités dans les produits IBM | 2014-12-08T00:00:00.000000 | 2014-12-08T00:00:00.000000 |
| certfr-2014-avi-508 | Multiples vulnérabilités dans MediaWiki | 2014-12-08T00:00:00.000000 | 2014-12-08T00:00:00.000000 |
| certfr-2014-avi-507 | Multiples vulnérabilités dans VMware | 2014-12-08T00:00:00.000000 | 2014-12-08T00:00:00.000000 |
| certfr-2014-avi-506 | Multiples vulnérabilités dans phpMyAdmin | 2014-12-05T00:00:00.000000 | 2014-12-05T00:00:00.000000 |
| certfr-2014-avi-505 | Multiples vulnérabilités dans Apple Safari | 2014-12-05T00:00:00.000000 | 2014-12-05T00:00:00.000000 |
| certfr-2014-avi-504 | Multiples vulnérabilités dans Citrix XenServer | 2014-12-05T00:00:00.000000 | 2014-12-05T00:00:00.000000 |
| certfr-2014-avi-503 | Multiples vulnérabilités dans les produits Mozilla | 2014-12-02T00:00:00.000000 | 2014-12-02T00:00:00.000000 |
| certfr-2014-avi-502 | Multiples vulnérabilités dans les produits F5 | 2014-11-28T00:00:00.000000 | 2014-11-28T00:00:00.000000 |
| certfr-2014-avi-501 | Multiples vulnérabilités dans Wordpress | 2014-11-28T00:00:00.000000 | 2014-11-28T00:00:00.000000 |
| certfr-2014-avi-500 | Multiples vulnérabilités dans les systèmes SCADA Siemens | 2014-11-27T00:00:00.000000 | 2014-11-27T00:00:00.000000 |
| certfr-2014-avi-499 | Multiples vulnérabilités dans les produits F5 | 2014-11-27T00:00:00.000000 | 2014-11-27T00:00:00.000000 |
| certfr-2014-avi-498 | Multiples vulnérabilités dans Docker | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-497 | Vulnérabilité dans Google Chrome | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-496 | Vulnérabilité dans Adobe Flash Player | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-495 | Multiples vulnérabilités dans le noyau linux Ubuntu | 2014-11-25T00:00:00.000000 | 2014-11-25T00:00:00.000000 |
| certfr-2014-avi-494 | Multiples vulnérabilités dans phpMyAdmin | 2014-11-24T00:00:00.000000 | 2014-11-24T00:00:00.000000 |
| certfr-2014-avi-493 | Multiples vulnérabilités dans Asterisk | 2014-11-24T00:00:00.000000 | 2014-11-24T00:00:00.000000 |
| certfr-2014-avi-492 | Vulnérabilité dans Xen | 2014-11-21T00:00:00.000000 | 2014-11-21T00:00:00.000000 |
| certfr-2014-avi-491 | Vulnérabilité dans le smartphone P7 Huawei | 2014-11-20T00:00:00.000000 | 2014-11-20T00:00:00.000000 |
| certfr-2014-avi-490 | Multiples vulnérabilités dans Drupal | 2014-11-20T00:00:00.000000 | 2014-11-20T00:00:00.000000 |