Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107428 | 7.1 (v3.1) | WordPress Paid Videochat Turnkey Site plugin <= 7.5.12… |
VideoWhisper.com |
Paid Videochat Turnkey Site |
2026-10-14T08:00:25.216Z | 2026-10-14T11:29:08.950Z |
| cve-2026-92392 | N/A | HTTP/2 upload Use-After-Free |
curl |
curl |
2026-10-14T07:46:15.160Z | 2026-10-20T20:25:06.818Z |
| cve-2026-107757 | Gallery Custom Links <= 2.3.3 - Authenticated (Subscri… |
tigroumeow |
Gallery Custom Links |
2026-10-14T07:43:36.794Z | 2026-10-14T14:18:40.709Z | |
| cve-2026-104909 | Mang Board <= 2.4.3 - Unauthenticated Local File Inclu… |
kitae-park |
Mang Board |
2026-10-14T07:43:36.462Z | 2026-10-14T17:38:46.306Z | |
| cve-2026-104764 | Post Export Import with Media <= 1.17.1 - Authenticate… |
wpazleen |
Post Export Import with Media |
2026-10-14T07:43:36.131Z | 2026-10-15T16:43:48.583Z | |
| cve-2026-104748 | SimpleForm <= 3.10.0 - Unauthenticated Privilege Escal… |
wpazleen |
SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications |
2026-10-14T07:43:35.763Z | 2026-10-15T16:43:48.707Z | |
| cve-2026-107650 | GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) … |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-14T07:43:35.373Z | 2026-10-14T14:27:08.058Z | |
| cve-2026-103907 | Jeg Kit for Elementor <= 3.2.19 - Missing Authorizatio… |
jegtheme |
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress |
2026-10-14T07:43:35.022Z | 2026-10-14T17:39:55.333Z | |
| cve-2026-107631 | Record of Consent Extension for Complianz <= 2.5 - Una… |
davidevalerio |
Record of Consent Extension for Complianz |
2026-10-14T07:43:34.674Z | 2026-10-15T16:43:48.829Z | |
| cve-2026-107751 | Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Sit… |
kitae-park |
Mang Board |
2026-10-14T07:43:34.349Z | 2026-10-15T16:43:48.959Z | |
| cve-2026-107756 | Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) S… |
tigroumeow |
Meow Lightbox |
2026-10-14T07:43:33.999Z | 2026-10-15T15:09:19.105Z | |
| cve-2026-104761 | Mang Board <= 2.4.3 - Authenticated (Custom+) Stored C… |
kitae-park |
Mang Board |
2026-10-14T07:43:33.581Z | 2026-10-14T14:28:13.716Z | |
| cve-2026-110284 | LifterLMS <= 10.3.1 - Authenticated (Contributor+) Loc… |
lifterlms |
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes |
2026-10-14T07:43:33.249Z | 2026-10-15T16:43:49.092Z | |
| cve-2026-103367 | ShopMagic <= 4.9.0 - Unauthenticated Local File Inclus… |
wpdesk |
ShopMagic – email automation for WordPress |
2026-10-14T07:43:32.923Z | 2026-10-14T15:54:19.602Z | |
| cve-2025-9373 | PeproDev Branches Map <= 3.0.1 - Authenticated (Contri… |
peprodev |
PeproDev Branches Map (Mapify) |
2026-10-14T07:43:32.584Z | 2026-10-15T16:43:49.219Z | |
| cve-2026-103380 | Appointment Booking Plugin <= 5.7.3 - Authenticated (S… |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-14T07:43:32.242Z | 2026-10-15T16:43:49.346Z | |
| cve-2026-103366 | Appointment Booking Plugin <= 5.7.3 - Insecure Direct … |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-14T07:43:31.890Z | 2026-10-15T16:43:49.470Z | |
| cve-2026-100163 | Appointment Booking Plugin <= 5.7.2 - Unauthenticated … |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-14T07:43:31.547Z | 2026-10-14T17:41:31.054Z | |
| cve-2026-107754 | GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) … |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-14T07:43:31.053Z | 2026-10-14T17:48:43.025Z | |
| cve-2026-105107 | 7.6 (v3.1) 7.2 (v4.0) | Koha SQL injection in reports/cat_issues_top.pl via th… |
Koha Community |
Koha |
2026-10-14T07:32:56.786Z | 2026-10-14T15:55:15.372Z |
| cve-2026-105106 | 8.8 (v3.1) | Koha authenticated OS command injection in tools/sched… |
Koha Community |
Koha |
2026-10-14T07:23:03.069Z | 2026-10-14T17:56:36.316Z |
| cve-2026-110227 | 5.3 (v3.1) | WordPress Restricted Site Access plugin <= 7.6.2 - Bro… |
10up |
Restricted Site Access |
2026-10-14T07:11:41.657Z | 2026-10-15T16:43:49.599Z |
| cve-2026-109901 | 8.5 (v3.1) | WordPress CP Multi View Event Calendar plugin <= 1.4.… |
Codepeople |
CP Multi View Event Calendar |
2026-10-14T07:11:16.010Z | 2026-10-14T15:56:23.123Z |
| cve-2026-107171 | 6.9 (v4.0) | An Hardcoded Cryptographic Key vulnerability exis… |
Trellix |
Trellix Agent |
2026-10-14T07:11:09.227Z | 2026-10-14T15:57:50.108Z |
| cve-2026-89310 | 9.4 (v4.0) 9.9 (v3.1) | SQL Command Injection Vulnerability in JTL-WMS |
JTL SW GmbH |
JTL-WMS |
2026-10-14T06:50:34.005Z | 2026-10-14T15:58:36.817Z |
| cve-2026-110467 | 5.3 (v4.0) 4.3 (v3.1) | WisdomGarden｜Tronclass - Insecure Direct Object Reference |
WisdomGarden |
Tronclass |
2026-10-14T06:31:24.977Z | 2026-10-16T15:31:52.878Z |
| cve-2026-110466 | 5.3 (v4.0) 4.3 (v3.1) | WisdomGarden｜Tronclass - Sensitive Data Exposure |
WisdomGarden |
Tronclass |
2026-10-14T06:29:52.775Z | 2026-10-14T16:00:21.597Z |
| cve-2026-110465 | 5.3 (v4.0) 4.3 (v3.1) | WisdomGarden｜Tronclass - Insecure Direct Object Reference |
WisdomGarden |
Tronclass |
2026-10-14T06:28:22.068Z | 2026-10-14T16:01:23.431Z |
| cve-2026-96904 | N/A | AWP Classifieds < 4.4.9 - Unauthenticated Listing Cont… |
Unknown |
AWP Classifieds |
2026-10-14T06:00:16.470Z | 2026-10-14T13:42:20.061Z |
| cve-2026-96900 | N/A | Cart Abandonment Recovery for WooCommerce < 2.1.4 - Un… |
Unknown |
Cart Abandonment Recovery for WooCommerce |
2026-10-14T06:00:16.298Z | 2026-10-14T13:42:20.196Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-599 | Multiples vulnérabilités dans Adobe Shockwave Player | 2012-10-24T00:00:00.000000 | 2012-10-24T00:00:00.000000 |
| certa-2012-avi-598 | Vulnérabilité dans IBM DataQuant et IBM DB2 | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-597 | Vulnérabilité dans IBM AIX | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-596 | Vulnérabilité dans McAfee Firewall Enterprise | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-595 | Multiples vulnérabilités dans les composants Java de HP-UX | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-594 | Multiples vulnérabilités dans IBM XIV Storage System | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-593 | Vulnérabilité dans IBM WebSphere Message Broker | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-592 | Multiples vulnérabilités dans IBM DB2 QMF | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-591 | Vulnérabilités dans CA ARCserve Backup | 2012-10-22T00:00:00.000000 | 2012-10-22T00:00:00.000000 |
| certa-2012-avi-590 | Multiples vulnérabilités dans Drupal | 2012-10-19T00:00:00.000000 | 2012-10-19T00:00:00.000000 |
| certa-2012-avi-589 | Multiples vulnérabilités dans Java pour Apple OS X | 2012-10-18T00:00:00.000000 | 2012-10-18T00:00:00.000000 |
| certa-2012-avi-588 | Vulnérabilité dans AWStats | 2012-10-18T00:00:00.000000 | 2012-10-18T00:00:00.000000 |
| certa-2012-avi-587 | Vulnérabilités dans Oracle Virtualization | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-586 | Multiples vulnérabilités dans Oracle Sun Products Suite | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-585 | Multiples vulnérabilités dans Oracle Financial Services Software | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-584 | Vulnérabilités dans Oracle Industry Applications | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-583 | Vulnérabilités dans Oracle Siebel CRM | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-582 | Multiples vulnérabilités dans Oracle People Soft | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-581 | Multiples vulnérabilités dans Oracle Supply Chain | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-580 | Multiples vulnérabilités dans Oracle E-Business Suite | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-579 | Multiples vulnérabilités dans Oracle MySQL | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-578 | Multiples vulnérabilités dans Oracle Fusion Middleware | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-577 | Multiples vulnérabilités dans Oracle Database Server | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-576 | Multiples vulnérabilités dans Oracle Java | 2012-10-17T00:00:00.000000 | 2012-10-17T00:00:00.000000 |
| certa-2012-avi-575 | Vulnérabilités dans le système SCADA Schneider Electric TAC I/A | 2012-10-16T00:00:00.000000 | 2012-10-16T00:00:00.000000 |
| certa-2012-avi-574 | Vulnérabilité dans le système SCADA Schneider Electric Critical Power and Cooling Services | 2012-10-16T00:00:00.000000 | 2012-10-16T00:00:00.000000 |
| certa-2012-avi-573 | Multiples vulnérabilités dans IBM HTTPSRV | 2012-10-16T00:00:00.000000 | 2012-10-16T00:00:00.000000 |
| certa-2012-avi-572 | Vulnérabilités dans Google Chrome | 2012-10-12T00:00:00.000000 | 2012-10-12T00:00:00.000000 |
| certa-2012-avi-571 | Vulnérabilités dans EMC NetWorker Module | 2012-10-12T00:00:00.000000 | 2012-10-12T00:00:00.000000 |
| certa-2012-avi-570 | Vulnérabilité dans Symantec Ghost | 2012-10-12T00:00:00.000000 | 2012-10-12T00:00:00.000000 |