|
cve-2026-97305
|
6.9 (v4.0)
|
WordPress AI Chatbot for WordPress – Hyve Lite plugin …
|
Themeisle
|
AI Chatbot for WordPress – Hyve Lite
|
2026-10-05T18:08:36.362Z |
2026-10-05T18:45:13.106Z |
|
cve-2026-103334
|
7.5 (v3.1)
|
WordPress Five Star Restaurant Reservations plugin <= …
|
Etoile Web Design Incorporated
|
Five Star Restaurant Reservations
|
2026-10-05T18:08:36.164Z |
2026-10-05T18:47:24.816Z |
|
cve-2026-97304
|
6.5 (v3.1)
|
WordPress Timetics plugin <= 1.0.63 - Broken Access Co…
|
Arraytics
|
Timetics
|
2026-10-05T18:08:35.952Z |
2026-10-05T18:42:34.010Z |
|
cve-2026-100515
|
7.1 (v3.1)
|
WordPress Photo Reviews for WooCommerce plugin <= 1.2.…
|
VillaTheme
|
Photo Reviews for WooCommerce
|
2026-10-05T18:08:35.913Z |
2026-10-09T18:19:21.509Z |
|
cve-2026-103085
|
6.5 (v3.1)
|
WordPress WP User Manager plugin <= 2.9.20 - Privilege…
|
WP User Manager
|
WP User Manager
|
2026-10-05T18:08:35.787Z |
2026-10-05T18:45:32.266Z |
|
cve-2026-103086
|
6.5 (v3.1)
|
WordPress UsersWP plugin <= 1.2.74 - Broken Access Con…
|
Stiofan
|
UsersWP
|
2026-10-05T18:08:35.529Z |
2026-10-06T10:41:52.418Z |
|
cve-2026-100509
|
6.5 (v3.1)
|
WordPress RepairBuddy plugin <= 4.1225 - Cross Site Sc…
|
Webful Creations
|
RepairBuddy
|
2026-10-05T18:08:35.500Z |
2026-10-05T18:49:24.033Z |
|
cve-2026-102383
|
6.5 (v3.1)
|
WordPress Lookzy plugin <= 1.1.14 - Broken Access Cont…
|
VillaTheme
|
Lookzy
|
2026-10-05T18:08:35.452Z |
2026-10-05T18:42:11.214Z |
|
cve-2026-105637
|
|
Plane: Cross-Project Asset Hijacking via 'ProjectBulkA…
|
makeplane
|
plane
|
2026-10-05T18:04:02.780Z |
2026-10-05T19:09:51.157Z |
|
cve-2026-105636
|
|
Plane: SSRF via HTTP redirect in webhook delivery (all…
|
makeplane
|
plane
|
2026-10-05T18:02:53.127Z |
2026-10-07T21:39:44.814Z |
|
cve-2026-105635
|
|
Plane: Unauthenticated Project Invitation Email Disclo…
|
makeplane
|
plane
|
2026-10-05T18:01:52.446Z |
2026-10-05T18:41:46.850Z |
|
cve-2026-105634
|
|
Plane: Privilege Escalation: Project Guest Can Demote …
|
makeplane
|
plane
|
2026-10-05T18:00:50.831Z |
2026-10-06T14:52:51.459Z |
|
cve-2026-105633
|
|
Plane: Issue Attachment Ownership Hijacking via Missin…
|
makeplane
|
plane
|
2026-10-05T17:58:32.417Z |
2026-10-05T18:22:11.592Z |
|
cve-2026-105632
|
|
Plane: Broken Access Control - joinProject GraphQL mut…
|
makeplane
|
plane
|
2026-10-05T17:57:22.672Z |
2026-10-05T19:13:21.788Z |
|
cve-2026-93323
|
6.8 (v4.0)
|
Oversized Dockerfile or .dockerignore can exhaust buil…
|
moby
|
BuildKit
|
2026-10-05T17:57:12.252Z |
2026-10-05T18:47:42.179Z |
|
cve-2026-105631
|
|
Plane: asset download endpoints scope file lookups to …
|
makeplane
|
plane
|
2026-10-05T17:55:56.166Z |
2026-10-07T21:38:31.535Z |
|
cve-2026-105630
|
|
Plane: Stored XSS via SVG attachment served inline on …
|
makeplane
|
plane
|
2026-10-05T17:54:01.999Z |
2026-10-05T18:41:01.196Z |
|
cve-2026-93322
|
6.9 (v4.0)
|
Malformed MergeOp can crash the BuildKit daemon
|
moby
|
BuildKit
|
2026-10-05T17:53:50.583Z |
2026-10-05T18:51:34.926Z |
|
cve-2026-105629
|
|
Plane: Cross-Tenant Destructive IDOR: Estimate Point D…
|
makeplane
|
plane
|
2026-10-05T17:53:01.671Z |
2026-10-06T14:52:59.760Z |
|
cve-2026-105628
|
|
Plane: OAuth Avatar Redirect SSRF Leads to Internal Da…
|
makeplane
|
plane
|
2026-10-05T17:51:01.044Z |
2026-10-05T17:57:41.515Z |
|
cve-2026-93320
|
6 (v4.0)
|
BuildKit improperly handles special files in build snapshots
|
moby
|
BuildKit
|
2026-10-05T17:50:44.195Z |
2026-10-05T18:52:25.223Z |
|
cve-2026-104979
|
|
Plane: Cross-tenant stored XSS in intake enables accou…
|
makeplane
|
plane
|
2026-10-05T17:49:53.030Z |
2026-10-05T19:12:00.312Z |
|
cve-2026-104978
|
|
Plane: Invitation Hijack in Project Join Flow via Miss…
|
makeplane
|
plane
|
2026-10-05T17:48:34.948Z |
2026-10-07T20:56:28.847Z |
|
cve-2026-78413
|
5.5 (v3.1)
|
Velociraptor privilege escalation via SysmonLogForward…
|
Rapid7
|
Velociraptor
|
2026-10-05T17:48:03.883Z |
2026-10-05T19:07:47.590Z |
|
cve-2026-104977
|
|
Plane: Incomplete fix of CVE-2026-27706 — SSRF still r…
|
makeplane
|
plane
|
2026-10-05T17:47:29.989Z |
2026-10-05T18:40:11.398Z |
|
cve-2026-93319
|
5.7 (v4.0)
|
A malicious frontend can cause a daemon panic
|
moby
|
BuildKit
|
2026-10-05T17:47:22.297Z |
2026-10-05T19:07:12.038Z |
|
cve-2026-104976
|
|
Plane: SSRF in Gitea OAuth
|
makeplane
|
plane
|
2026-10-05T17:45:43.115Z |
2026-10-06T14:53:08.451Z |
|
cve-2026-93318
|
7.5 (v4.0)
|
Cache poisoning via unvalidated image layer DiffIDs
|
moby
|
BuildKit
|
2026-10-05T17:45:39.491Z |
2026-10-05T19:06:41.297Z |
|
cve-2026-105385
|
|
onetwothreeneth HospitalManagementSystem transaction_d…
|
onetwothreeneth
|
HospitalManagementSystem
|
2026-10-05T17:45:11.126Z |
2026-10-07T20:55:26.510Z |
|
cve-2026-104975
|
|
Plane: Cross-tenant asset authorization bypass in Plan…
|
makeplane
|
plane
|
2026-10-05T17:44:24.414Z |
2026-10-05T18:00:17.007Z |