Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108605 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /air… |
jeecgboot |
JeecgBoot |
2026-10-10T21:49:08.668Z | 2026-10-14T16:02:43.924Z |
| cve-2026-103685 | 4.3 (v3.1) | WordPress ALD – Dropshipping and Fulfillment for AliEx… |
VillaTheme |
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce |
2026-10-10T19:55:52.636Z | 2026-10-11T12:13:33.093Z |
| cve-2026-108604 | 5.8 (v4.0) 6.3 (v3.1) | Tabularis through 0.27.0 Read-Only Bypass via MCP run_… |
TabularisDB |
tabularis |
2026-10-10T19:54:37.564Z | 2026-10-13T11:49:10.959Z |
| cve-2026-108603 | 4.8 (v4.0) 3.3 (v3.1) | slide-maker through 5.8.0 Path Traversal via generate_… |
addsumtech |
slide-maker |
2026-10-10T19:54:36.916Z | 2026-10-14T02:28:15.212Z |
| cve-2026-108602 | 5.3 (v4.0) 4.3 (v3.1) | Helicone through v2025.08.21-1 SSRF via Jawn Webhook S… |
Helicone |
helicone |
2026-10-10T19:54:36.258Z | 2026-10-18T11:53:08.668Z |
| cve-2026-27350 | 7.2 (v3.1) | WordPress Builderius plugin <= 1.4-beta - Server Side … |
Builderius.io |
Builderius |
2026-10-10T19:44:36.929Z | 2026-10-11T11:42:57.301Z |
| cve-2026-97853 | 6.9 (v4.0) | Unbounded allocation in decimal Decimal.round/3 driven… |
ericmj |
decimal |
2026-10-10T19:43:45.217Z | 2026-10-15T18:09:50.720Z |
| cve-2026-66480 | 5.3 (v3.1) | WordPress YITH WooCommerce Product Add-Ons plugin <= 4… |
YITH |
YITH WooCommerce Product Add-Ons |
2026-10-10T19:42:40.322Z | 2026-10-11T11:40:27.998Z |
| cve-2026-57742 | 7.1 (v3.1) | WordPress Kids Planet theme <= 2.2.14.2 - Cross Site S… |
ThemeREX Group |
Kids Planet |
2026-10-10T19:40:34.607Z | 2026-10-11T11:42:54.152Z |
| cve-2026-107434 | 5.4 (v3.1) | WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulne… |
videowhisper |
MicroPayments |
2026-10-10T19:36:24.555Z | 2026-10-11T12:13:33.222Z |
| cve-2026-107420 | 5.3 (v3.1) | WordPress Pay With MetaMask For WooCommerce – Cryptocu… |
Narinder Singh |
Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway |
2026-10-10T19:36:23.815Z | 2026-10-11T12:13:33.358Z |
| cve-2026-81797 | 9.8 (v3.1) | WordPress Buzz Stone | Magazine & Viral Blog WordPress… |
ThemeRex |
Buzz Stone | Magazine & Viral Blog WordPress Theme |
2026-10-10T19:36:20.181Z | 2026-10-11T11:47:06.948Z |
| cve-2026-78535 | 9.8 (v3.1) | WordPress Photolia theme <= 1.0.3 - PHP Object Injecti… |
ThemeRex |
Photolia |
2026-10-10T19:36:19.431Z | 2026-10-11T11:53:08.903Z |
| cve-2026-78534 | 7.1 (v3.1) | WordPress Educavo theme <= 3.4.2 - Cross Site Scriptin… |
Keen IT Solutions |
Educavo |
2026-10-10T19:36:18.684Z | 2026-10-11T11:42:57.594Z |
| cve-2026-78533 | 9.8 (v3.1) | WordPress Qwery theme <= 3.6.1 - PHP Object Injection … |
AncoraThemes |
Qwery |
2026-10-10T19:36:17.936Z | 2026-10-11T11:53:09.041Z |
| cve-2026-78532 | 7.1 (v3.1) | WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS… |
designthemes |
LMS |
2026-10-10T19:36:17.241Z | 2026-10-11T11:42:57.727Z |
| cve-2026-78531 | 9.8 (v3.1) | WordPress Jacqueline theme <= 2.22 - PHP Object Inject… |
ThemeREX |
Jacqueline |
2026-10-10T19:36:16.484Z | 2026-10-11T11:53:09.192Z |
| cve-2026-78530 | 7.7 (v3.1) | WordPress FoodBakery theme <= 4.6 - Arbitrary File Del… |
Chimpstudio |
FoodBakery |
2026-10-10T19:36:15.786Z | 2026-10-11T12:13:33.478Z |
| cve-2026-78529 | 9.8 (v3.1) | WordPress Alliance theme <= 3.11 - PHP Object Injectio… |
ThemeREX |
Alliance |
2026-10-10T19:36:15.048Z | 2026-10-11T11:53:09.311Z |
| cve-2026-66569 | 9.8 (v3.1) | WordPress Kicker theme <= 2.2.1 - PHP Object Injection… |
axiomthemes |
Kicker |
2026-10-10T19:36:14.295Z | 2026-10-11T11:53:09.437Z |
| cve-2026-66568 | 9.8 (v3.1) | WordPress Original theme <= 1.9.0 - PHP Object Injecti… |
axiomthemes |
Original |
2026-10-10T19:36:13.592Z | 2026-10-11T11:53:09.567Z |
| cve-2026-66567 | 9.8 (v3.1) | WordPress Anesta theme <= 1.5.3 - PHP Object Injection… |
AncoraThemes |
Anesta |
2026-10-10T19:36:12.850Z | 2026-10-11T11:53:09.687Z |
| cve-2026-66566 | 8.1 (v3.1) | WordPress Ambient theme <= 1.7 - Local File Inclusion … |
Elated-Themes |
Ambient |
2026-10-10T19:36:12.066Z | 2026-10-11T11:53:06.480Z |
| cve-2026-66565 | 9.8 (v3.1) | WordPress FC United theme <= 1.1.1 - PHP Object Inject… |
axiomthemes |
FC United |
2026-10-10T19:36:11.322Z | 2026-10-11T11:53:09.804Z |
| cve-2026-66564 | 9.8 (v3.1) | WordPress ShiftCV theme <= 3.0.14 - PHP Object Injecti… |
ThemeREX |
ShiftCV |
2026-10-10T19:36:10.604Z | 2026-10-11T11:53:09.938Z |
| cve-2026-66563 | 9.8 (v3.1) | WordPress Windsor theme <= 2.10 - PHP Object Injection… |
ThemeREX |
Windsor |
2026-10-10T19:36:09.853Z | 2026-10-11T11:53:10.057Z |
| cve-2026-66483 | 9.8 (v3.1) | WordPress Education Center theme <= 3.6.12 - PHP Objec… |
ThemeREX |
Education Center |
2026-10-10T19:36:09.122Z | 2026-10-11T11:53:10.197Z |
| cve-2026-66482 | 9.8 (v3.1) | WordPress Drone Media theme <= 2.2.0 - PHP Object Inje… |
AncoraThemes |
Drone Media |
2026-10-10T19:36:08.416Z | 2026-10-11T11:53:10.333Z |
| cve-2026-66481 | 6.8 (v3.1) | WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrar… |
Presto Player |
Presto Player Pro |
2026-10-10T19:36:07.665Z | 2026-10-11T12:13:33.600Z |
| cve-2026-65459 | 7.5 (v3.1) | WordPress Forminator plugin <= 1.57.3 - Arbitrary Cont… |
WPMU DEV |
Forminator |
2026-10-10T19:36:06.909Z | 2026-10-11T12:13:33.722Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-020 | Multiples vulnérabilités dans Fetchmail | 2007-01-10T00:00:00.000000 | 2007-03-26T00:00:00.000000 |
| certa-2007-avi-019 | Vulnérabilités dans Kerberos | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-016 | Multiples vulnérabilités de Microsoft Excel | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-015 | Vulnérabilité de Microsoft Office 2003 | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-018 | Vulnérabilité VML du système Microsoft Windows | 2007-01-09T00:00:00.000000 | 2007-01-09T00:00:00.000000 |
| certa-2007-avi-017 | Vulnérabilités de Microsoft Outlook | 2007-01-09T00:00:00.000000 | 2007-01-09T00:00:00.000000 |
| certa-2007-avi-014 | Vulnérabilités de AIX | 2007-01-09T00:00:00.000000 | 2007-01-09T00:00:00.000000 |
| certa-2007-avi-013 | Plusieurs vulnérabilités dans le navigateur Opera | 2007-01-09T00:00:00.000000 | 2007-01-23T00:00:00.000000 |
| certa-2007-avi-012 | Multiples vulnérabilités de Cisco secure ACS | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-011 | Multiples vulnérabilités dans Drupal | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-010 | Vulnérabilités dans WordPress | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-009 | Vulnérabilité de l'antivirus Kaspersky | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-008 | Vulnérabilité de Eudora Mail Server | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-007 | Vulnérabilité dans Novell Client | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-006 | Vulnérabilité dans OpenBSD | 2007-01-05T00:00:00.000000 | 2007-01-05T00:00:00.000000 |
| certa-2007-avi-005 | Vulnérabilité dans OpenOffice.org | 2007-01-05T00:00:00.000000 | 2007-01-05T00:00:00.000000 |
| certa-2007-avi-004 | Vulnérabilités dans Cisco Clean Access | 2007-01-04T00:00:00.000000 | 2007-01-04T00:00:00.000000 |
| certa-2007-avi-003 | Multiples vulnérabilités du greffon Adobe Acrobat Reader | 2007-01-04T00:00:00.000000 | 2007-01-04T00:00:00.000000 |
| certa-2007-avi-002 | Vulnérabilité dans VLC media player | 2007-01-04T00:00:00.000000 | 2007-01-30T00:00:00.000000 |
| certa-2007-avi-001 | Vulnérabilités dans Cacti | 2007-01-02T00:00:00.000000 | 2007-01-29T00:00:00.000000 |
| certa-2006-avi-571 | Multiples vulnérabilités sous Novell NetMail | 2006-12-26T00:00:00.000000 | 2006-12-26T00:00:00.000000 |
| certa-2006-avi-570 | Multiples vulnérabilités dans le JRE Java de Sun | 2006-12-22T00:00:00.000000 | 2006-12-22T00:00:00.000000 |
| certa-2006-avi-569 | Vulnérabilité MacOS X Quicktime et Quartz | 2006-12-21T00:00:00.000000 | 2006-12-21T00:00:00.000000 |
| certa-2006-avi-568 | Multiples vulnérabilités dans les produits Mozilla | 2006-12-21T00:00:00.000000 | 2007-04-19T00:00:00.000000 |
| certa-2006-avi-567 | Vulnérabilité dans Computer Associates CleverPath | 2006-12-21T00:00:00.000000 | 2006-12-21T00:00:00.000000 |
| certa-2006-avi-566 | Vulnérabilités dans MailEnable | 2006-12-21T00:00:00.000000 | 2006-12-21T00:00:00.000000 |
| certa-2006-avi-565 | Vulnérabilité dans Typo3 | 2006-12-21T00:00:00.000000 | 2006-12-21T00:00:00.000000 |
| certa-2006-avi-564 | Vulnérabilité de McAfee | 2006-12-19T00:00:00.000000 | 2006-12-19T00:00:00.000000 |
| certa-2006-avi-563 | Multiples vulnérabilités dans Avaya Predictive Dialing System | 2006-12-18T00:00:00.000000 | 2006-12-18T00:00:00.000000 |
| certa-2006-avi-562 | Vulnérabilités dans Ruby | 2006-12-18T00:00:00.000000 | 2007-03-26T00:00:00.000000 |