Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109111 | N/A | {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-24T22:18:59.588Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-24T22:18:59.588Z | |
| cve-2026-89284 | N/A | {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-24T22:18:59.460Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-24T22:18:59.460Z | |
| cve-2026-91403 | Vulnerability in the Oracle Java SE, Oracle Graal… |
Oracle Corporation |
Oracle Java SE |
2026-10-21T21:23:28.057Z | 2026-10-24T20:01:56.993Z | |
| cve-2026-112855 | 9.8 (v3.1) | WordPress Redy theme <= 1.3.5 - PHP Object Injection v… |
axiomthemes |
Redy |
2026-10-23T13:00:16.938Z | 2026-10-24T14:47:01.013Z |
| cve-2026-112859 | 9.8 (v3.1) | WordPress Little Birdies theme <= 1.3.16 - PHP Object … |
ThemeREX Group |
Little Birdies |
2026-10-23T13:00:17.469Z | 2026-10-24T14:47:00.875Z |
| cve-2026-112858 | 9.8 (v3.1) | WordPress Rhodos theme <= 1.3.3 - PHP Object Injection… |
axiomthemes |
Rhodos |
2026-10-23T13:00:17.505Z | 2026-10-24T14:47:00.738Z |
| cve-2026-112856 | 9.8 (v3.1) | WordPress Vagabonds theme <= 1.3.10 - PHP Object Injec… |
ThemeREX Group |
Vagabonds |
2026-10-23T13:00:17.961Z | 2026-10-24T14:47:00.597Z |
| cve-2026-112852 | 8.1 (v3.1) | WordPress Helion theme <= 1.1.12 - PHP Object Injectio… |
ThemeREX Group |
Helion |
2026-10-23T13:00:18.393Z | 2026-10-24T14:47:00.462Z |
| cve-2026-112851 | 9.8 (v3.1) | WordPress HotLock theme <= 1.3.9 - PHP Object Injectio… |
ThemeREX Group |
HotLock |
2026-10-23T13:00:18.778Z | 2026-10-24T14:47:00.303Z |
| cve-2026-112846 | 9.8 (v3.1) | WordPress Save Life theme <= 1.2.14 - PHP Object Injec… |
ThemeREX Group |
Save Life |
2026-10-23T13:00:18.841Z | 2026-10-24T14:47:00.039Z |
| cve-2026-112847 | 9.8 (v3.1) | WordPress ZenSoul theme <= 1.13 - PHP Object Injection… |
ThemeREX |
ZenSoul |
2026-10-23T13:00:19.203Z | 2026-10-24T14:46:59.854Z |
| cve-2026-112854 | 9.8 (v3.1) | WordPress Holistic Center theme <= 1.2.6 - PHP Object … |
axiomthemes |
Holistic Center |
2026-10-23T13:00:19.251Z | 2026-10-24T14:46:59.714Z |
| cve-2026-112850 | 8.1 (v3.1) | WordPress Your Dress theme <= 1.4.1 - Local File Inclu… |
AncoraThemes |
Your Dress |
2026-10-23T13:00:19.609Z | 2026-10-24T14:46:59.580Z |
| cve-2026-112848 | 9.8 (v3.1) | WordPress Hostme v2 theme <= 7.0 - PHP Object Injectio… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:20.030Z | 2026-10-24T14:46:59.432Z |
| cve-2026-111402 | 9.3 (v3.1) | WordPress Newsletters plugin <= 4.18.1 - SQL Injection… |
Tribulant Software |
Newsletters |
2026-10-24T08:00:10.963Z | 2026-10-24T14:46:59.295Z |
| cve-2026-94075 | 9.8 (v3.1) | WordPress Newsletters plugin <= 4.18.1 - PHP Object In… |
Tribulant Software |
Newsletters |
2026-10-24T08:00:11.463Z | 2026-10-24T14:46:59.162Z |
| cve-2026-112866 | 9.3 (v3.1) | WordPress Product Filter by WBW plugin <= 3.4.6 - SQL … |
WPFactory |
Product Filter by WBW |
2026-10-24T08:00:11.483Z | 2026-10-24T14:46:59.015Z |
| cve-2026-114190 | 5.9 (v3.1) | WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Da… |
Hai Zheng / Lite Speed Cache |
LiteSpeed Cache |
2026-10-24T08:00:11.901Z | 2026-10-24T14:46:58.879Z |
| cve-2026-110892 | 6.5 (v3.1) | WordPress SureDash plugin <= 1.12.2 - Broken Access Co… |
Brainstorm Force |
SureDash |
2026-10-24T08:00:12.427Z | 2026-10-24T14:46:58.746Z |
| cve-2026-114196 | 9.8 (v3.1) | WordPress Paytium plugin <= 5.0.5 - PHP Object Injecti… |
paytiumsupport |
Paytium |
2026-10-24T08:00:13.761Z | 2026-10-24T14:46:58.606Z |
| cve-2026-114705 | 6.5 (v3.1) | WordPress WP Social Feed Gallery plugin <= 5.0.13 - Br… |
quadlayers |
WP Social Feed Gallery |
2026-10-24T10:00:11.514Z | 2026-10-24T14:46:58.465Z |
| cve-2026-114192 | 6.5 (v3.1) | WordPress WpEvently plugin <= 5.7.8 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-10-24T14:00:09.029Z | 2026-10-24T14:46:58.324Z |
| cve-2026-114704 | 7.2 (v3.1) | WordPress Relevanssi plugin <= 4.28.4 - PHP Object In… |
Christoph Vielgrader |
Relevanssi |
2026-10-24T14:00:09.045Z | 2026-10-24T14:46:58.175Z |
| cve-2026-114191 | 7.5 (v3.1) | WordPress UPI QR Code Payment Gateway for WooCommerce … |
Knit Pay |
UPI QR Code Payment Gateway for WooCommerce |
2026-10-24T14:00:09.573Z | 2026-10-24T14:46:58.028Z |
| cve-2026-112863 | 7.1 (v3.1) | WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripti… |
Hogash |
KALLYAS |
2026-10-23T13:00:16.927Z | 2026-10-24T14:46:57.865Z |
| cve-2026-114179 | 7.1 (v3.1) | WordPress BP Better Messages plugin <= 3.1.3 - Cross S… |
wordplus |
BP Better Messages |
2026-10-24T08:00:10.535Z | 2026-10-24T14:46:57.707Z |
| cve-2026-112844 | 7.1 (v3.1) | WordPress WP Event Solution plugin <= 4.1.26 - Cross S… |
Arraytics |
WP Event Solution |
2026-10-24T08:00:10.546Z | 2026-10-24T14:46:57.569Z |
| cve-2026-112869 | 7.1 (v3.1) | WordPress We’re Open! plugin <= 2.6 - Cross Site Scrip… |
Noah Hearle |
We’re Open! |
2026-10-24T08:00:10.988Z | 2026-10-24T14:46:57.432Z |
| cve-2026-114178 | 7.1 (v3.1) | WordPress W3 Total Cache plugin <= 2.10.7 - Cross Site… |
Bold Grid |
W3 Total Cache |
2026-10-24T08:00:11.922Z | 2026-10-24T14:46:57.285Z |
| cve-2026-114697 | 7.1 (v3.1) | WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site … |
QuarkA |
QA Analytics |
2026-10-24T08:00:12.424Z | 2026-10-24T14:46:57.138Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-191 | Vulnérabilité de Cisco CatOS | 2004-06-10T00:00:00.000000 | 2004-06-10T00:00:00.000000 |
| certa-2004-avi-188 | Vulnérabilité dans Crystal Reports Web Viewer | 2004-06-09T00:00:00.000000 | 2004-06-09T00:00:00.000000 |
| certa-2004-avi-187 | Vulnérabilité de DirectPlay | 2004-06-09T00:00:00.000000 | 2004-06-09T00:00:00.000000 |
| certa-2004-avi-147 | Vulnérabilité de LHA | 2004-04-30T00:00:00.000000 | 2004-06-09T00:00:00.000000 |
| certa-2004-avi-141 | Vulnérabilité de l'application utempter | 2004-04-23T00:00:00.000000 | 2004-06-09T00:00:00.000000 |
| certa-2004-avi-038 | Vulnérabilité dans le serveur samba | 2004-02-13T00:00:00.000000 | 2004-06-09T00:00:00.000000 |
| certa-2004-avi-183 | Mise à jour de sécurité MacOS X | 2004-06-08T00:00:00.000000 | 2004-06-08T00:00:00.000000 |
| certa-2004-avi-181 | Vulnérabilité de la base de données Firebird | 2004-06-04T00:00:00.000000 | 2004-06-04T00:00:00.000000 |
| certa-2004-avi-179 | Vulnérabilité de HP OpenView Select Access | 2004-06-02T00:00:00.000000 | 2004-06-02T00:00:00.000000 |
| certa-2004-avi-152 | Vulnérabilité de MPlayer et Xine | 2004-05-03T00:00:00.000000 | 2004-06-01T00:00:00.000000 |
| certa-2004-avi-146 | Vulnérabilité de GNU Midnight Commander | 2004-04-30T00:00:00.000000 | 2004-06-01T00:00:00.000000 |
| certa-2004-avi-099 | Vulnérabilités dans Ethereal | 2004-03-24T00:00:00.000000 | 2004-06-01T00:00:00.000000 |
| certa-2004-avi-177 | Vulnérabilité d'iLO pour les serveurs ProLiant | 2004-05-27T00:00:00.000000 | 2004-05-27T00:00:00.000000 |
| certa-2004-avi-176 | Vulnérabilité de la primitive système msync de FreeBSD | 2004-05-27T00:00:00.000000 | 2004-05-27T00:00:00.000000 |
| certa-2004-avi-175 | Vulnérabilité dans la bibliothèque libcpr sous Irix | 2004-05-27T00:00:00.000000 | 2004-05-27T00:00:00.000000 |
| certa-2004-avi-165 | Vulnérabilité du navigateur Opera | 2004-05-13T00:00:00.000000 | 2004-05-27T00:00:00.000000 |
| certa-2004-avi-158 | Vulnérabilité dans la Machine Virtuelle Java de SUN | 2004-05-10T00:00:00.000000 | 2004-05-27T00:00:00.000000 |
| certa-2004-avi-174 | Vulnérabilité dans F-Secure Anti-virus | 2004-05-26T00:00:00.000000 | 2004-05-26T00:00:00.000000 |
| certa-2004-avi-148 | Vulnérabilité de la bibliothèque libpng | 2004-04-30T00:00:00.000000 | 2004-05-26T00:00:00.000000 |
| certa-2004-avi-137 | Vulnérabilité de MySQL | 2004-04-20T00:00:00.000000 | 2004-05-26T00:00:00.000000 |
| certa-2004-avi-172 | Vulnérabilité sur rpc.mountd sur Irix | 2004-05-21T00:00:00.000000 | 2004-05-25T00:00:00.000000 |
| certa-2004-avi-173 | Vulnérabilité dans Symantec Norton Antivirus 2004 | 2004-05-24T00:00:00.000000 | 2004-05-24T00:00:00.000000 |
| certa-2004-avi-043 | Vulnérabilité de Metamail | 2004-02-19T00:00:00.000000 | 2004-05-24T00:00:00.000000 |
| certa-2004-avi-169 | Vulnérabilité de Java Secure Socket Extension (JSSE) | 2004-05-19T00:00:00.000000 | 2004-05-19T00:00:00.000000 |
| certa-2004-avi-151 | Vulnérabilité dans ProFTPD | 2004-05-03T00:00:00.000000 | 2004-05-19T00:00:00.000000 |
| certa-2004-avi-086 | Vulnérabilité du serveur HTTP Apache | 2004-03-15T00:00:00.000000 | 2004-05-18T00:00:00.000000 |
| certa-2004-avi-157 | Vulnérabilités dans Exim | 2004-05-07T00:00:00.000000 | 2004-05-17T00:00:00.000000 |
| certa-2004-avi-080 | Multiples vulnérabilités dans Mozilla | 2004-03-11T00:00:00.000000 | 2004-05-14T00:00:00.000000 |
| certa-2004-avi-164 | Vulnérabilité du noyau OpenBSD | 2004-05-13T00:00:00.000000 | 2004-05-13T00:00:00.000000 |
| certa-2004-avi-163 | Multiples vulnérabilités dans des produits de sécurité Symantec | 2004-05-13T00:00:00.000000 | 2004-05-13T00:00:00.000000 |