Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-27364 | 6.5 (v3.1) | WordPress Style Kits plugin <= 2.6.5 - Broken Access C… |
AnalogWP |
Style Kits |
2026-08-24T21:31:24.274Z | 2026-08-25T19:23:25.508Z |
| cve-2026-59780 | Apache CloudStack: LDAP provider configuration disclosure |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:27:16.849Z | 2026-08-25T19:23:16.262Z | |
| cve-2026-32560 | 8.8 (v3.1) | WordPress MagicAI for WordPress - AI Text, Image, Chat… |
LiquidThemes |
MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator |
2026-08-24T21:31:27.848Z | 2026-08-25T19:23:15.522Z |
| cve-2026-78263 | 7.1 (v3.1) | WordPress Event Tickets plugin <= 5.29.2.1 - Cross Sit… |
Nexcess |
Event Tickets |
2026-08-24T21:31:31.391Z | 2026-08-25T19:23:05.855Z |
| cve-2026-78268 | 7.5 (v3.1) | WordPress Lead Generation Contact Widget & AI Chatbot:… |
Extend Themes |
Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads |
2026-08-24T21:31:34.955Z | 2026-08-25T19:22:54.673Z |
| cve-2026-55371 | OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:31:35.995Z | 2026-08-25T19:22:48.186Z | |
| cve-2026-19801 | BetterLinks <= 3.1.0 - Missing Authorization to Authen… |
wpdevteam |
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP |
2026-08-25T01:26:44.025Z | 2026-08-25T19:22:38.068Z | |
| cve-2026-76063 | FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stor… |
roxnor |
FundEngine – Donation and Crowdfunding Platform |
2026-08-25T03:27:06.337Z | 2026-08-25T19:22:31.342Z | |
| cve-2026-80051 | 5.9 (v4.0) | github.com/graphql-go/graphql (GraphQL for Go) th… |
graphql-go project |
graphql-go |
2026-08-25T17:55:57.383Z | 2026-08-25T19:22:26.133Z |
| cve-2026-14280 | Events Manager <= 7.3.7.4 - Authenticated (Administrat… |
netweblogic |
Events Manager – Calendar, Bookings, Tickets, and more! |
2026-08-25T03:27:07.025Z | 2026-08-25T19:22:20.406Z | |
| cve-2026-61397 | Apache CloudStack: OAuth2 Token Cross-Request Leak |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:26:25.472Z | 2026-08-25T19:22:14.318Z | |
| cve-2026-18328 | Forminator Forms <= 1.57.0 - Unauthenticated DOM-Based… |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-08-25T07:39:50.754Z | 2026-08-25T19:22:02.061Z | |
| cve-2026-17587 | My Agile Privacy® <= 3.3.6 - Missing Authorization to … |
formulaagile |
My Agile Privacy® – CMP, Cookie Consent & Privacy Tools |
2026-08-25T11:27:11.761Z | 2026-08-25T19:21:42.990Z | |
| cve-2026-77824 | Media Sweep <= 1.1.3 - Authenticated (Administrator+) … |
wpcreatix |
Media Sweep – WordPress Media Cleaner |
2026-08-25T11:27:12.470Z | 2026-08-25T19:21:34.704Z | |
| cve-2026-55526 | PraisonAI: SSRF protection bypass in `spider_tools._ho… |
MervinPraison |
PraisonAI |
2026-08-25T14:36:09.934Z | 2026-08-25T19:21:26.954Z | |
| cve-2026-55541 | PraisonAI: `--api-key` flag on `praisonai serve` is no… |
MervinPraison |
PraisonAI |
2026-08-25T15:05:25.370Z | 2026-08-25T19:21:21.324Z | |
| cve-2026-61398 | Apache CloudStack: Cross-Site Scripting (XSS) Vulnerab… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:25:47.657Z | 2026-08-25T19:21:10.214Z | |
| cve-2026-55527 | PraisonAI: Arbitrary file write via unsanitized `user_… |
MervinPraison |
PraisonAI |
2026-08-25T15:09:07.500Z | 2026-08-25T19:21:08.622Z | |
| cve-2026-55539 | PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/a… |
MervinPraison |
PraisonAI |
2026-08-25T15:14:07.109Z | 2026-08-25T19:20:57.949Z | |
| cve-2026-78379 | 9.2 (v4.0) 8.1 (v3.1) | Consent bypass in python_repl tool via batch kwargs fo… |
Amazon |
strands-agents-tools |
2026-08-25T19:05:57.779Z | 2026-08-25T19:20:51.512Z |
| cve-2026-55640 | Nextcloud MCP Server: Unauthenticated `POST /webhooks/… |
cbcoutinho |
nextcloud-mcp-server |
2026-08-25T16:03:28.085Z | 2026-08-25T19:20:43.689Z | |
| cve-2026-59184 | OpenEXR: OpenEXRUtil FlatImageChannel row nonzero data… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:28:47.827Z | 2026-08-25T19:20:34.302Z | |
| cve-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 pl… |
AcademySoftwareFoundation |
openexr |
2026-08-25T17:59:25.292Z | 2026-08-25T19:20:27.685Z | |
| cve-2026-55619 | eml_parser: Parser DoS via deeply nested parentheses i… |
GOVCERT-LU |
eml_parser |
2026-08-25T18:24:29.921Z | 2026-08-25T19:20:15.362Z | |
| cve-2026-62440 | Apache CloudStack: Improper access control in Kubernet… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:23:55.427Z | 2026-08-25T19:20:14.393Z | |
| cve-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:27:19.057Z | 2026-08-25T19:20:04.216Z | |
| cve-2026-18420 | 8.8 (v3.1) 8.7 (v4.0) | RCE via Prototype Pollution in OpenSearch Dashboards |
AWS |
Amazon OpenSearch Service |
2026-08-20T20:40:40.709Z | 2026-08-25T19:19:07.471Z |
| cve-2026-32561 | 8.8 (v3.1) | WordPress Booking Hub plugin <= 1.3.0 - Privilege Esca… |
LiquidThemes |
Booking Hub |
2026-08-24T21:31:28.568Z | 2026-08-25T19:17:36.940Z |
| cve-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE de… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:16:37.986Z | 2026-08-25T19:16:49.514Z | |
| cve-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unva… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:58:25.871Z | 2026-08-25T19:16:25.169Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-675 | Vulnérabilités dans Opera | 2011-12-07T00:00:00.000000 | 2011-12-07T00:00:00.000000 |
| certa-2011-avi-674 | Vulnérabilité dans MIT Kerberos | 2011-12-07T00:00:00.000000 | 2011-12-07T00:00:00.000000 |
| certa-2011-avi-673 | Vulnérabilité dans libXfont | 2011-12-06T00:00:00.000000 | 2011-12-06T00:00:00.000000 |
| certa-2011-avi-672 | Vulnérabilité dans Blue Coat ProxyAV | 2011-12-06T00:00:00.000000 | 2011-12-06T00:00:00.000000 |
| certa-2011-avi-671 | Vulnérabilités dans JBoss | 2011-12-05T00:00:00.000000 | 2011-12-05T00:00:00.000000 |
| certa-2011-avi-670 | Vulnérabilité dans Adobe Flex | 2011-12-05T00:00:00.000000 | 2011-12-05T00:00:00.000000 |
| certa-2011-avi-669 | Vulnérabilité dans Lighttpd | 2011-11-30T00:00:00.000000 | 2011-11-30T00:00:00.000000 |
| certa-2011-avi-668 | Vulnérabilité dans Novell Open Enterprise Server | 2011-11-30T00:00:00.000000 | 2011-11-30T00:00:00.000000 |
| certa-2011-avi-667 | Vulnérabilité dans IBM Tivoli Netcool/Reporter | 2011-11-30T00:00:00.000000 | 2011-11-30T00:00:00.000000 |
| certa-2011-avi-666 | Vulnérabilité dans le module Digest pour Perl | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-665 | Vulnérabilité dans System Administration Manager pour systèmes HP-UX | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-664 | Multiples vulnérabilités dans FFmpeg | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-663 | Vulnérabilités dans HP-UX Tomcat Servlet Engine | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-662 | Vulnérabilités dans TYPO3 | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-661 | Vulnérabilité dans syslog-ng Premium Edition | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-660 | Vulnérabilité dans CA Directory | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-659 | Vulnérabilité dans iBM Lotus Mobile Connect | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-658 | Vulnérabilité dans Ubuntu Software Center | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-657 | Vulnérabilités dans TikiWiki | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-656 | Multiples vulnérabilités dans RealPlayer | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-655 | Vulnérabilité dans Dovecot | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-654 | Vulnérabilités dans SPIP | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-653 | Vulnérabilité dans Ruby on Rails | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-652 | Vulnérabilités dans SAP | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-651 | Vulnérabilités dans HP Network Node Manager | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-490 | Vulnérabilité dans Apache httpd | 2011-09-01T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-650 | Vulnérabilité dans Juniper Junos | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |
| certa-2011-avi-649 | Multiples vulnérabilités dans SAP NetWeaver | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |
| certa-2011-avi-648 | Vulnérabilité dans nginx | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |
| certa-2011-avi-647 | VMware vCenter Update Manager | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |