Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-88963 | Tutor LMS <= 4.0.8 - Authenticated (Subscriber+) Refle… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-10-16T05:30:27.816Z | 2026-10-16T14:39:03.737Z | |
| cve-2026-85659 | PilotPress <= 2.0.43 - Authenticated (Subscriber+) Pri… |
ontraport |
PilotPress |
2026-10-16T05:30:27.472Z | 2026-10-16T14:28:39.370Z | |
| cve-2026-104932 | Search Regex 3.5 - Authenticated (Subscriber+) Remote … |
johnny5 |
Search Regex |
2026-10-16T05:30:27.126Z | 2026-10-16T14:53:13.234Z | |
| cve-2026-109513 | NotificationX <= 3.3.3 - Unauthenticated Stored Cross-… |
wpdevteam |
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar |
2026-10-16T05:30:26.784Z | 2026-10-16T14:29:18.061Z | |
| cve-2026-109414 | Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injecti… |
appsbd |
Vitepos – Point of Sale (POS) for WooCommerce |
2026-10-16T05:30:26.454Z | 2026-10-16T15:09:38.699Z | |
| cve-2026-107764 | SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-B… |
gpriday |
SiteOrigin CSS |
2026-10-16T05:30:26.095Z | 2026-10-16T14:30:23.414Z | |
| cve-2026-111122 | SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-B… |
gpriday |
SiteOrigin CSS |
2026-10-16T05:30:25.740Z | 2026-10-16T14:39:03.885Z | |
| cve-2026-89051 | Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cr… |
johndarrel |
Hide My WP Ghost – Security & Firewall |
2026-10-16T05:30:25.377Z | 2026-10-16T14:39:04.042Z | |
| cve-2026-103768 | ELEX WordPress HelpDesk & Customer Ticketing System <=… |
elextensions |
ELEX WordPress HelpDesk & Customer Ticketing System |
2026-10-16T05:30:25.043Z | 2026-10-16T15:09:38.837Z | |
| cve-2026-109447 | User Profile Builder <= 4.0.3 - Unauthenticated Privil… |
cozmoslabs |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor |
2026-10-16T05:30:24.704Z | 2026-10-16T15:09:38.993Z | |
| cve-2026-103896 | 10Web Booster <= 2.34.5 - Unauthenticated Limited File… |
10web |
10Web Booster – Website speed optimization, Cache & Page Speed optimizer |
2026-10-16T05:30:24.365Z | 2026-10-16T15:09:39.142Z | |
| cve-2026-109232 | Salon Booking System <= 10.31.9 - Unauthenticated Stor… |
wordpresschef |
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas |
2026-10-16T05:30:24.038Z | 2026-10-16T14:39:04.204Z | |
| cve-2026-104001 | Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbit… |
rilwis |
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated |
2026-10-16T05:30:23.705Z | 2026-10-16T15:09:39.289Z | |
| cve-2026-95809 | Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-… |
optiuser |
Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights |
2026-10-16T05:30:23.365Z | 2026-10-16T14:39:04.367Z | |
| cve-2026-12272 | Lightweight Cookie Notice <= 1.19 - Sensitive Informat… |
daext |
Lightweight Cookie Notice – Cookie Banner for Cookie Consent |
2026-10-16T05:30:22.999Z | 2026-10-16T17:06:46.117Z | |
| cve-2026-89079 | Theme My Login <= 7.2.1 - Unauthenticated Privilege Es… |
jfarthing84 |
Theme My Login |
2026-10-16T05:30:22.643Z | 2026-10-16T17:06:54.311Z | |
| cve-2026-93767 | Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path T… |
tainacan |
Tainacan |
2026-10-16T05:30:22.312Z | 2026-10-16T15:44:36.511Z | |
| cve-2026-95686 | Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-… |
optiuser |
Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights |
2026-10-16T05:30:21.426Z | 2026-10-16T14:39:04.505Z | |
| cve-2026-104000 | Simply Schedule Appointments <= 1.6.12.35 - Unauthenti… |
croixhaug |
Simply Schedule Appointments |
2026-10-16T05:30:21.082Z | 2026-10-16T15:45:05.671Z | |
| cve-2026-103480 | Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored… |
themefic |
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental |
2026-10-16T05:30:20.709Z | 2026-10-16T15:48:35.785Z | |
| cve-2026-107748 | User Profile Builder <= 4.0.3 - Authenticated (Subscri… |
cozmoslabs |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor |
2026-10-16T05:30:20.376Z | 2026-10-16T14:39:04.655Z | |
| cve-2026-103999 | Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenti… |
themefic |
Ultra Addons for Contact Form 7 |
2026-10-16T05:30:20.027Z | 2026-10-16T14:39:04.802Z | |
| cve-2026-110017 | Quick PayPal Payments: Payment Button & Form <= 6.0.4 … |
fullworks |
Quick PayPal Payments: Payment Button & Form |
2026-10-16T05:30:19.662Z | 2026-10-16T14:39:04.958Z | |
| cve-2026-100158 | SQL Chart Builder <= 3.0.6 - Authenticated (Subscriber… |
elvinhaci |
SQL Chart Builder |
2026-10-16T05:30:19.302Z | 2026-10-16T14:39:05.141Z | |
| cve-2026-96570 | Schema & Structured Data for WP & AMP <= 1.67 - Unauth… |
magazine3 |
Schema & Structured Data for WP & AMP |
2026-10-16T05:30:18.814Z | 2026-10-16T14:39:05.295Z | |
| cve-2026-111458 | 6.8 (v4.0) | ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprin… |
adulau |
ssldump |
2026-10-16T05:24:43.178Z | 2026-10-16T12:30:53.251Z |
| cve-2026-109221 | Groundhogg <= 4.9.3 - Authenticated (Sales Representat… |
trainingbusinesspros |
Groundhogg — CRM, Newsletters, and Marketing Automation |
2026-10-16T04:27:05.579Z | 2026-10-16T17:07:01.282Z | |
| cve-2026-107659 | Modula Image Gallery <= 3.0.11 - Missing Authorization… |
wpchill |
Modula Image Gallery – Photo Grid & Video Gallery |
2026-10-16T04:27:05.213Z | 2026-10-16T17:07:09.932Z | |
| cve-2026-104798 | My Calendar <= 3.8.7 - Unauthenticated Privilege Escal… |
joedolson |
My Calendar – Accessible Event Manager |
2026-10-16T04:27:04.876Z | 2026-10-16T17:07:17.621Z | |
| cve-2026-103481 | Gwolle Guestbook <= 5.1.1 - Reflected Cross-Site Scrip… |
mpol |
Gwolle Guestbook |
2026-10-16T04:27:04.530Z | 2026-10-16T14:39:05.468Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-496 | Vulnérabilité dans Adobe Flash Player | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-495 | Multiples vulnérabilités dans le noyau linux Ubuntu | 2014-11-25T00:00:00.000000 | 2014-11-25T00:00:00.000000 |
| certfr-2014-avi-494 | Multiples vulnérabilités dans phpMyAdmin | 2014-11-24T00:00:00.000000 | 2014-11-24T00:00:00.000000 |
| certfr-2014-avi-493 | Multiples vulnérabilités dans Asterisk | 2014-11-24T00:00:00.000000 | 2014-11-24T00:00:00.000000 |
| certfr-2014-avi-492 | Vulnérabilité dans Xen | 2014-11-21T00:00:00.000000 | 2014-11-21T00:00:00.000000 |
| certfr-2014-avi-491 | Vulnérabilité dans le smartphone P7 Huawei | 2014-11-20T00:00:00.000000 | 2014-11-20T00:00:00.000000 |
| certfr-2014-avi-490 | Multiples vulnérabilités dans Drupal | 2014-11-20T00:00:00.000000 | 2014-11-20T00:00:00.000000 |
| certfr-2014-avi-489 | Vulnérabilité de l'implémentation Kerberos dans Microsoft Windows | 2014-11-19T00:00:00.000000 | 2014-11-19T00:00:00.000000 |
| certfr-2014-avi-488 | Multiples vulnérabilités dans Google Chrome | 2014-11-19T00:00:00.000000 | 2014-11-19T00:00:00.000000 |
| certfr-2014-avi-487 | Multiples vulnérabilités dans les produits Apple | 2014-11-18T00:00:00.000000 | 2014-11-18T00:00:00.000000 |
| certfr-2014-avi-486 | Multiples vulnérabilités dans Xen | 2014-11-18T00:00:00.000000 | 2014-11-18T00:00:00.000000 |
| certfr-2014-avi-485 | Multiples vulnérabilités dans Moodle | 2014-11-17T00:00:00.000000 | 2014-11-17T00:00:00.000000 |
| certfr-2014-avi-484 | Multiples vulnérabilités dans les produits Huawei | 2014-11-17T00:00:00.000000 | 2014-11-17T00:00:00.000000 |
| certfr-2014-avi-483 | Multiples vulnérabilités dans PHP | 2014-11-14T00:00:00.000000 | 2014-11-14T00:00:00.000000 |
| certfr-2014-avi-482 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2014-11-13T00:00:00.000000 | 2014-11-13T00:00:00.000000 |
| certfr-2014-avi-481 | Multiples vulnérabilités dans Wireshark | 2014-11-13T00:00:00.000000 | 2014-11-13T00:00:00.000000 |
| certfr-2014-avi-480 | Multiples vulnérabilités dans les produits Juniper | 2014-11-13T00:00:00.000000 | 2014-11-13T00:00:00.000000 |
| certfr-2014-avi-479 | Multiples vulnérabilités dans Google Chrome | 2014-11-13T00:00:00.000000 | 2014-11-13T00:00:00.000000 |
| certfr-2014-avi-478 | Multiples vulnérabilités dans Adobe Flash Player | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-477 | Vulnérabilité dans le noyau de Microsoft Windows | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-476 | Vulnérabilité dans Microsoft Input Method Editor (IME) | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-475 | Vulnérabilité dans Microsoft Active Directory Federation Services | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-474 | Vulnérabilité dans Microsoft Internet Information Services (IIS) | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-473 | Vulnérabilité dans Microsoft Remote Desktop Protocol | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-472 | Vulnérabilité dans Microsoft SharePoint Foundation | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-471 | Vulnérabilité dans Microsoft .NET | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-470 | Vulnérabilité dans le service audio de Microsoft Windows | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-469 | Vulnérabilité dans l'implémentation de TCP/IP dans Microsoft Windows | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-468 | Multiples vulnérabilités dans Microsoft Office | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-avi-467 | Vulnérabilité dans Microsoft XML Core Services | 2014-11-12T00:00:00.000000 | 2014-11-12T00:00:00.000000 |