Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-97273 7.1 (v3.1) WordPress Premmerce Wishlist for WooCommerce plugin <=… Premmerce
Premmerce Wishlist for WooCommerce
2026-10-01T14:34:00.261Z 2026-10-03T15:12:24.277Z
cve-2026-97269 6.5 (v3.1) WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct… WPFunnels
WPFunnels
2026-10-01T14:33:59.507Z 2026-10-01T15:00:07.930Z
cve-2026-97268 7.1 (v3.1) WordPress Premmerce Wishlist for WooCommerce plugin <=… Premmerce
Premmerce Wishlist for WooCommerce
2026-10-01T14:33:58.737Z 2026-10-01T15:22:50.151Z
cve-2026-97260 7.1 (v3.1) WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scr… maxfoundry
MaxGalleria
2026-10-01T14:33:57.980Z 2026-10-01T16:02:40.819Z
cve-2026-97258 6.5 (v3.1) WordPress Aruba Migration Tool plugin <= 1.0.4 - Broke… Aruba.it
Aruba Migration Tool
2026-10-01T14:33:57.214Z 2026-10-03T15:12:24.403Z
cve-2026-97251 6.5 (v3.1) WordPress Bus Ticket Booking with Seat Reservation plu… magepeopleteam
Bus Ticket Booking with Seat Reservation
2026-10-01T14:33:56.425Z 2026-10-01T15:02:09.768Z
cve-2026-95588 8.6 (v3.1) WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 … AcyMailing Newsletter Team
AcyMailing SMTP Newsletter
2026-10-01T14:33:55.650Z 2026-10-01T15:23:18.110Z
cve-2026-94390 7.2 (v3.1) WordPress Hide Shipping Method For WooCommerce plugin … Dotstore
Hide Shipping Method For WooCommerce
2026-10-01T14:33:54.882Z 2026-10-01T16:03:56.330Z
cve-2026-62073 7.5 (v3.1) WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken… Themeisle
WP Full Stripe Free
2026-10-01T14:33:54.117Z 2026-10-03T15:12:24.535Z
cve-2026-62071 9.3 (v3.1) WordPress WordPress File Upload plugin <= 5.1.10 - SQL… nickboss
WordPress File Upload
2026-10-01T14:33:53.363Z 2026-10-01T15:06:25.257Z
cve-2026-103752 9.8 (v3.1) WordPress Authorizer plugin <= 3.15.3 - Privilege Esca… Paul Ryan
Authorizer
2026-10-01T14:33:52.557Z 2026-10-01T15:23:37.279Z
cve-2026-103687 rhukster dom-sanitizer SVG Sanitization DOMSanitizer.p… rhukster
dom-sanitizer
2026-10-01T14:30:12.624Z 2026-10-01T15:07:06.705Z
cve-2024-58388 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-11-06T18:02:46.319Z'}, 'rejectedReasons': [{'lang': 'en', 'value': "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\xa0CVE-2024-33605's description was updated to include the impacted endpoint as singular patch addressed both.", 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.&nbsp;CVE-2024-33605's description was updated to include the impacted endpoint as singular patch addressed both."}]}], 'x_generator': {'engine': 'vulncheck'}} N/A N/A 2026-10-01T14:24:20.803Z 2026-11-06T18:02:46.319Z
cve-2026-79900 6.5 (v3.1) Heap overflow in KSL checksum initialization Fortra
BoKS Manager boks-server
2026-10-01T14:11:55.071Z 2026-10-01T14:42:09.954Z
cve-2026-79901 9.9 (v3.1) Predictable Active Directory service-account passwords… Fortra
BoKS Manager boks-server
2026-10-01T13:52:27.046Z 2026-10-01T14:43:07.294Z
cve-2026-103686 rhukster dom-sanitizer URL Validation DOMSanitizer.php… rhukster
dom-sanitizer
2026-10-01T13:45:12.259Z 2026-10-06T01:44:54.243Z
cve-2026-66253 3.1 (v3.1) HCL iControl is affected by a Session Timeout vulnerability HCL Software
iControl
2026-10-01T13:30:02.803Z 2026-10-01T13:30:02.803Z
cve-2026-66249 3.1 (v3.1) HCL iControl is affected by a Missing Secure Attribute… HCL Software
iControl
2026-10-01T13:29:21.756Z 2026-10-01T13:29:21.756Z
cve-2026-66248 3.1 (v3.1) HCL iControl is affected by an Improper Error Handling… HCL Software
iControl
2026-10-01T13:26:30.687Z 2026-10-01T13:28:29.134Z
cve-2026-66247 4.3 (v3.1) iControl is affected by an insecure Cross-Origin … HCL Software
iControl
2026-10-01T13:25:13.790Z 2026-10-01T13:49:51.789Z
cve-2026-66246 8.8 (v3.1) HCL iControl is affected by multiple security vulnerab… HCL Software
iControl
2026-10-01T13:23:25.586Z 2026-10-01T13:51:51.378Z
cve-2026-102505 N/A Imager versions before 1.037 for Perl overflow a heap …

2026-10-01T13:11:51.967Z 2026-10-01T19:32:38.071Z
cve-2026-102504 N/A Imager versions before 1.037 for Perl exit the process…

2026-10-01T13:11:38.558Z 2026-10-01T19:31:30.976Z
cve-2026-62058 5.3 (v3.1) WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Ex… WPExperts
CF7 Apps
2026-10-01T12:40:18.396Z 2026-10-01T13:38:59.450Z
cve-2026-62059 7.6 (v3.1) WordPress Ultimate Member plugin <= 2.13.1 - SQL Injec… Ultimate Member
Ultimate Member
2026-10-01T12:39:49.807Z 2026-10-01T13:57:56.421Z
cve-2026-62060 7.6 (v3.1) WordPress Captivate Sync plugin <= 3.3.2 - SQL Injecti… captivateaudio
Captivate Sync
2026-10-01T12:39:21.338Z 2026-10-01T13:12:51.056Z
cve-2026-62061 5.3 (v3.1) WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Dir… Metagauss
ProfileGrid
2026-10-01T12:38:50.904Z 2026-10-01T13:07:12.654Z
cve-2026-62063 5.4 (v3.1) WordPress WpTravelly plugin <= 2.3.1 - Broken Access C… Magepeople inc.
WpTravelly
2026-10-01T12:38:26.109Z 2026-10-01T13:17:34.846Z
cve-2026-102394 6.5 (v3.1) WordPress Essential Addons for Elementor plugin <= 6.8… WPDeveloper
Essential Addons for Elementor
2026-10-01T12:35:39.808Z 2026-10-01T13:10:48.460Z
cve-2026-103339 6.5 (v3.1) WordPress Metform plugin <= 4.3.0 - Cross Site Scripti… Wpmet
Metform
2026-10-01T12:34:57.157Z 2026-10-01T13:12:11.502Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description