Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-40777 | 8.1 (v3.1) | WordPress WPSection plugin <= 1.5.1 - Broken Access Co… |
Rashid |
WPSection |
2026-10-10T19:34:58.723Z | 2026-10-11T12:13:36.220Z |
| cve-2026-39802 | 8.1 (v3.1) | WordPress Everest Backup plugin <= 2.3.13 - Remote Cod… |
everestthemes |
Everest Backup |
2026-10-10T19:34:57.947Z | 2026-10-11T12:13:36.342Z |
| cve-2026-39801 | 9.8 (v3.1) | WordPress AIWU plugin <= 1.5.9 - Privilege Escalation … |
Sergey |
AIWU |
2026-10-10T19:34:57.214Z | 2026-10-11T12:13:36.457Z |
| cve-2026-39800 | 7.1 (v3.1) | WordPress Additional Order Filters for WooCommerce plu… |
Anton Bond |
Additional Order Filters for WooCommerce |
2026-10-10T19:34:56.435Z | 2026-10-11T11:43:00.654Z |
| cve-2026-39799 | 7.1 (v3.1) | WordPress WP File Download plugin <= 6.3.6 - Cross Sit… |
Joomunited |
WP File Download |
2026-10-10T19:34:55.718Z | 2026-10-11T11:43:00.768Z |
| cve-2026-108600 | 5.7 (v4.0) 4.7 (v3.1) | open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape v… |
open-multi-agent |
open-multi-agent |
2026-10-10T18:58:16.432Z | 2026-10-13T18:54:52.634Z |
| cve-2026-108599 | 5.7 (v4.0) 4.7 (v3.1) | Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restr… |
pulseaiclub |
phi |
2026-10-10T18:58:15.610Z | 2026-10-14T16:02:53.639Z |
| cve-2026-108598 | 9.3 (v4.0) 9.8 (v3.1) | Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mappi… |
floci-io |
floci |
2026-10-10T18:58:14.825Z | 2026-10-13T11:41:41.376Z |
| cve-2026-108597 | 5.9 (v4.0) 4.8 (v3.1) | Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal … |
cohere-ai |
cohere-python |
2026-10-10T18:58:14.132Z | 2026-10-14T02:26:27.391Z |
| cve-2026-108596 | 6 (v4.0) 5.3 (v3.1) | OpenLIT 2.1.0 Authorization Bypass via x-openlit-proje… |
openlit |
openlit |
2026-10-10T18:58:13.358Z | 2026-10-18T11:53:08.823Z |
| cve-2026-94590 | 6.5 (v3.1) | WordPress Sell Downloads plugin <= 1.2.3 - Broken Acce… |
CodePeople2 |
Sell Downloads |
2026-10-10T18:45:45.857Z | 2026-10-11T12:13:36.569Z |
| cve-2026-57806 | 7.1 (v3.1) | WordPress Martfury - WooCommerce Marketplace WordPress… |
drfuri |
Martfury - WooCommerce Marketplace WordPress Theme |
2026-10-10T18:44:38.221Z | 2026-10-11T11:42:54.287Z |
| cve-2026-108595 | 6 (v4.0) 5.3 (v3.1) | Phi 0.3.0 through 0.28.4 Permission Bypass via agent_s… |
pulseaiclub |
phi |
2026-10-10T18:16:58.378Z | 2026-10-13T18:56:08.213Z |
| cve-2026-108594 | 2.3 (v4.0) 3.5 (v3.1) | Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Cla… |
mealie-recipes |
mealie |
2026-10-10T18:16:57.811Z | 2026-10-14T16:03:00.386Z |
| cve-2026-108593 | 7.3 (v4.0) 6.4 (v3.1) | 9router 0.4.1 through 0.5.99 Config Injection RCE via … |
decolua |
9router |
2026-10-10T18:16:57.203Z | 2026-10-13T11:38:18.277Z |
| cve-2026-108592 | 6 (v4.0) 5.3 (v3.1) | mini-swe-agent 1.10.0 through 2.4.6 Environment Exposu… |
SWE-agent |
mini-swe-agent |
2026-10-10T18:16:56.528Z | 2026-10-14T02:24:46.600Z |
| cve-2026-108591 | 5.9 (v4.0) 4.4 (v3.1) | InnoShop 0.9.2 Local File Disclosure via AI Core MCP f… |
innocommerce |
InnoShop |
2026-10-10T18:16:55.939Z | 2026-10-18T11:53:08.980Z |
| cve-2026-106610 | 9.8 (v3.1) | WordPress miniorange otp verification plugin <= 5.5.7 … |
miniOrange |
miniorange otp verification |
2026-10-10T18:09:06.421Z | 2026-10-11T12:13:36.684Z |
| cve-2026-96341 | 8.2 (v3.1) | WordPress Forminator plugin <= 1.57.3 - Privilege Esca… |
WPMU DEV |
Forminator |
2026-10-10T18:09:06.215Z | 2026-10-11T12:13:42.585Z |
| cve-2026-105892 | 9.8 (v3.1) | WordPress rtMedia for WordPress, BuddyPress and bbPres… |
rtCamp Inc. |
rtMedia for WordPress, BuddyPress and bbPress |
2026-10-10T18:09:05.758Z | 2026-10-11T12:13:42.710Z |
| cve-2026-105889 | 9.3 (v3.1) | WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vu… |
Tickera |
Tickera |
2026-10-10T17:00:10.991Z | 2026-10-11T12:03:20.837Z |
| cve-2026-104398 | 9.8 (v3.1) | WordPress AFFI – Affiliate Marketing for WooCommerce p… |
VillaTheme |
AFFI – Affiliate Marketing for WooCommerce |
2026-10-10T17:00:10.991Z | 2026-10-11T12:13:42.842Z |
| cve-2026-103071 | 7.5 (v3.1) | WordPress Thank You Page Customizer for WooCommerce pl… |
VillaTheme |
Thank You Page Customizer for WooCommerce |
2026-10-10T17:00:10.567Z | 2026-10-11T12:13:36.805Z |
| cve-2026-103357 | 6.9 (v4.0) | WordPress GIFT4U plugin <= 1.1.3 - Broken Access Contr… |
VillaTheme |
GIFT4U |
2026-10-10T17:00:10.501Z | 2026-10-11T12:13:36.927Z |
| cve-2026-106608 | 7.2 (v3.1) | WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manag… |
Automattic |
WooCommerce |
2026-10-10T17:00:10.174Z | 2026-10-11T12:13:37.058Z |
| cve-2026-106609 | 7.5 (v3.1) | WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Brok… |
Web Impian |
Bayarcash WooCommerce |
2026-10-10T17:00:10.072Z | 2026-10-11T12:13:37.201Z |
| cve-2026-94160 | 7.1 (v3.1) | WordPress ThemeStek Extras for LabtechCO Theme plugin … |
themeStek |
ThemeStek Extras for LabtechCO Theme |
2026-10-10T17:00:09.779Z | 2026-10-11T11:42:54.432Z |
| cve-2026-62044 | 7.2 (v3.1) | WordPress Super Video Player plugin <= 1.8.13 - PHP Ob… |
bPlugins |
Super Video Player |
2026-10-10T17:00:09.638Z | 2026-10-11T12:13:37.319Z |
| cve-2026-108586 | 5.3 (v4.0) 5.4 (v3.1) | 1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypas… |
1mcp-app |
@1mcp/agent |
2026-10-10T16:14:10.297Z | 2026-10-13T18:27:18.799Z |
| cve-2026-108585 | 5.3 (v4.0) 5.4 (v3.1) | argocd-mcp through 0.9.0 Path Traversal via delete_app… |
argoproj-labs |
argocd-mcp |
2026-10-10T16:14:09.568Z | 2026-10-14T16:03:13.213Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-470 | Vulnérabilité sur le produit CSA de CISCO | 2006-11-06T00:00:00.000000 | 2006-11-06T00:00:00.000000 |
| certa-2006-avi-469 | Multiples vulnérabilités dans Wireshark | 2006-10-27T00:00:00.000000 | 2006-10-27T00:00:00.000000 |
| certa-2006-avi-468 | Vulnérabilité dans Cisco Security Agent | 2006-10-26T00:00:00.000000 | 2006-10-26T00:00:00.000000 |
| certa-2006-avi-467 | Multiples vulnérabilités dans les produits Blue Coat | 2006-10-26T00:00:00.000000 | 2006-10-26T00:00:00.000000 |
| certa-2006-avi-466 | Vulnérabilités dans Winamp | 2006-10-26T00:00:00.000000 | 2006-10-26T00:00:00.000000 |
| certa-2006-avi-465 | Multiples vulnérabilités dans PostgreSQL | 2006-10-25T00:00:00.000000 | 2006-11-07T00:00:00.000000 |
| certa-2006-avi-464 | Multiples vulnérabilités dans Drupal | 2006-10-25T00:00:00.000000 | 2006-10-25T00:00:00.000000 |
| certa-2006-avi-463 | Vulnérabilité dans certains produits Symantec | 2006-10-25T00:00:00.000000 | 2006-10-25T00:00:00.000000 |
| certa-2006-avi-461 | Vulnérabilité dans HP Tru64 UNIX dtmail | 2006-10-25T00:00:00.000000 | 2006-10-25T00:00:00.000000 |
| certa-2006-avi-462 | Multiples vulnérabilités dans Novell eDirectory | 2006-10-24T00:00:00.000000 | 2006-10-24T00:00:00.000000 |
| certa-2006-avi-460 | Vulnérabilité dans Kaspersky Anti-Virus | 2006-10-24T00:00:00.000000 | 2006-10-24T00:00:00.000000 |
| certa-2006-avi-459 | Vulnérabilité dans la bibliothèque graphique Qt | 2006-10-20T00:00:00.000000 | 2006-10-25T00:00:00.000000 |
| certa-2006-avi-458 | Vulnérabilité dans HP CIFS Server | 2006-10-20T00:00:00.000000 | 2006-10-20T00:00:00.000000 |
| certa-2006-avi-457 | Multiples vulnérabilités sur les produits Oracle | 2006-10-20T00:00:00.000000 | 2006-10-20T00:00:00.000000 |
| certa-2006-avi-456 | Vulnérabilité dans Opera | 2006-10-18T00:00:00.000000 | 2006-10-18T00:00:00.000000 |
| certa-2006-avi-455 | Vulnérabilité du module mod_tcl de Apache | 2006-10-16T00:00:00.000000 | 2006-10-16T00:00:00.000000 |
| certa-2006-avi-454 | Vulnérabilités dans Clam Antivirus | 2006-10-16T00:00:00.000000 | 2006-11-07T00:00:00.000000 |
| certa-2006-avi-453 | Vulnérabilité de OpenSSH | 2006-10-13T00:00:00.000000 | 2006-10-13T00:00:00.000000 |
| certa-2006-avi-452 | Vulnérabilité dans Cahier de Texte | 2006-10-12T00:00:00.000000 | 2006-10-12T00:00:00.000000 |
| certa-2006-avi-451 | Multiples vulnérabilités dans IBM Websphere | 2006-10-12T00:00:00.000000 | 2006-10-12T00:00:00.000000 |
| certa-2006-avi-450 | Vulnérabilité dans le noyau Linux 2.4.x | 2006-10-12T00:00:00.000000 | 2006-10-12T00:00:00.000000 |
| certa-2006-avi-446 | Vulnérabilité dans les copieurs Xerox | 2006-10-12T00:00:00.000000 | 2006-10-12T00:00:00.000000 |
| certa-2006-avi-449 | Vulnérabilité de systrace sous OpenBSD | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-448 | Multiples vulnérabilités d'OpenSSL sous OpenBSD | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-447 | Vulnérabilité de httpd sous OpenBSD | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-445 | Vulnérabilité dans Microsoft Windows Object Packager | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-444 | Vulnérabilités dans la gestion d'IPv6 sous Windows | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-443 | Vulnérabilité Microsoft (service Serveur) | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-442 | Multiples vulnérabilités dans Microsoft Office | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-441 | Vulnérabilités dans Microsoft XML Core Services | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |