|
cve-2026-103340
|
5.3 (v3.1)
|
WordPress Site Reviews plugin <= 8.3.2 - Broken Access…
|
Gemini Labs
|
Site Reviews
|
2026-10-01T12:26:12.165Z |
2026-10-01T16:28:07.573Z |
|
cve-2026-103338
|
8.5 (v3.1)
|
WordPress Unlimited Elements For Elementor (Free Widge…
|
Unlimited Elements
|
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
|
2026-10-01T12:24:10.898Z |
2026-10-01T13:18:39.859Z |
|
cve-2026-103067
|
8 (v3.1)
|
WordPress Memberful - Membership Plugin plugin <= 1.81…
|
Memberful
|
Memberful - Membership Plugin
|
2026-10-01T12:18:20.988Z |
2026-10-01T13:19:52.849Z |
|
cve-2026-103754
|
5.9 (v3.1)
|
Ansible-runner: ansible-runner: path traversal and sym…
|
Red Hat
|
Red Hat Ansible Automation Platform 2
|
2026-10-01T11:57:07.822Z |
2026-11-05T15:52:29.087Z |
|
cve-2026-103336
|
5.3 (v3.1)
|
WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sen…
|
Smackcoders Inc.
|
WP Ultimate CSV Importer
|
2026-10-01T11:43:56.597Z |
2026-10-05T06:29:27.908Z |
|
cve-2026-103680
|
3.1 (v3.1)
|
Tnef: heap buffer overflow in find_free_number() via n…
|
|
|
2026-10-01T11:34:51.984Z |
2026-10-01T14:58:06.254Z |
|
cve-2026-103679
|
6.5 (v3.1)
|
Tnef: use-after-free and double-free in get_body_files…
|
|
|
2026-10-01T11:34:50.120Z |
2026-10-01T14:59:49.129Z |
|
cve-2026-103678
|
5.4 (v3.1)
|
Tnef: heap out-of-bounds read in get_rtf_data_from_buf…
|
|
|
2026-10-01T11:34:48.652Z |
2026-10-01T15:00:19.812Z |
|
cve-2026-103858
|
5.3 (v4.0)
|
MISP Incomplete Thread Authorization Allows Unauthoriz…
|
MISP
|
MISP
|
2026-10-01T11:31:32.840Z |
2026-10-01T15:00:57.587Z |
|
cve-2026-94276
|
5.1 (v4.0)
|
Apache APISIX: Openid-connect introspection validation issue
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T11:02:36.855Z |
2026-10-01T14:44:30.267Z |
|
cve-2026-94269
|
6.3 (v4.0)
|
Apache APISIX: Servlet-style normalization creates a r…
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T11:02:20.117Z |
2026-10-01T14:50:27.791Z |
|
cve-2026-94250
|
8.2 (v4.0)
|
Apache APISIX: Batch response aggregation can exhaust …
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T11:01:41.275Z |
2026-10-01T14:51:08.084Z |
|
cve-2026-94220
|
2.1 (v4.0)
|
Apache APISIX: session fixation issue in feishu-auth a…
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T11:01:26.938Z |
2026-10-01T14:51:30.180Z |
|
cve-2026-94212
|
6.4 (v4.0)
|
Apache APISIX: unauthenticated impersonation issue in …
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T11:01:11.697Z |
2026-10-01T14:52:48.202Z |
|
cve-2026-82806
|
5.3 (v4.0)
|
Apache APISIX: cross-request permission pollution via …
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T10:58:32.654Z |
2026-10-01T14:57:12.282Z |
|
cve-2026-78242
|
5.7 (v4.0)
|
Apache APISIX: data-mask may fail to redact request he…
|
Apache Software Foundation
|
Apache APISIX
|
2026-10-01T10:58:13.262Z |
2026-10-01T14:57:34.379Z |
|
cve-2026-88789
|
8.6 (v3.1)
|
Apache Camel Quarkus: Camel Quarkus: Forced Xalan Tran…
|
Apache Software Foundation
|
Apache Camel Quarkus
|
2026-10-01T10:51:22.899Z |
2026-10-01T14:56:28.388Z |
|
cve-2026-103353
|
5.3 (v3.1)
|
WordPress FluentForm plugin <= 6.2.14 - Broken Access …
|
WP ManageNinja LLC
|
FluentForm
|
2026-10-01T10:48:43.088Z |
2026-10-01T16:29:37.061Z |
|
cve-2026-103758
|
8.6 (v4.0)
8.1 (v3.1)
|
Obot 0.21.1 through 0.24.1 Authorization Bypass via /m…
|
obot-platform
|
obot
|
2026-10-01T10:42:26.638Z |
2026-10-01T14:35:10.239Z |
|
cve-2026-103757
|
8.3 (v4.0)
7.7 (v3.1)
|
Budibase before 3.41.0 SSRF via uploadUrl in AI Table …
|
Budibase
|
budibase
|
2026-10-01T10:42:25.919Z |
2026-10-01T13:21:55.140Z |
|
cve-2026-103292
|
8.6 (v4.0)
8 (v3.1)
|
Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via gho…
|
TryGhost
|
Ghost
|
2026-10-01T10:42:25.235Z |
2026-10-01T13:04:08.126Z |
|
cve-2026-103291
|
5.3 (v4.0)
6.4 (v3.1)
|
Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch
|
TryGhost
|
Ghost
|
2026-10-01T10:42:24.553Z |
2026-10-06T01:44:08.376Z |
|
cve-2026-103290
|
5.1 (v4.0)
3.8 (v3.1)
|
Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize
|
TryGhost
|
Ghost
|
2026-10-01T10:42:23.870Z |
2026-10-01T14:37:50.738Z |
|
cve-2026-103289
|
7.1 (v4.0)
6.5 (v3.1)
|
Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments
|
TryGhost
|
Ghost
|
2026-10-01T10:42:23.205Z |
2026-10-01T13:24:02.840Z |
|
cve-2026-103288
|
7.1 (v4.0)
6.5 (v3.1)
|
Ghost 5.9.0 before 6.44.1 Authorization Bypass via Com…
|
TryGhost
|
Ghost
|
2026-10-01T10:42:22.502Z |
2026-10-01T13:28:31.759Z |
|
cve-2026-103287
|
5.1 (v4.0)
2.7 (v3.1)
|
Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery…
|
TryGhost
|
Ghost
|
2026-10-01T10:42:21.818Z |
2026-10-06T01:42:26.590Z |
|
cve-2026-103286
|
8.5 (v4.0)
7.3 (v3.1)
|
Ghost 2.21.0 before 6.56.0 Privilege Escalation via No…
|
TryGhost
|
Ghost
|
2026-10-01T10:42:21.119Z |
2026-10-01T15:30:38.273Z |
|
cve-2026-103285
|
5.3 (v4.0)
4.3 (v3.1)
|
Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery
|
TryGhost
|
Ghost
|
2026-10-01T10:42:20.382Z |
2026-10-01T13:36:43.794Z |
|
cve-2026-103284
|
5.3 (v4.0)
4.3 (v3.1)
|
Ghost 5.125.1 before 6.57.1 Information Disclosure via…
|
TryGhost
|
Ghost
|
2026-10-01T10:42:19.592Z |
2026-10-01T13:31:23.254Z |
|
cve-2026-103283
|
8.6 (v4.0)
8.1 (v3.1)
|
Ghost 6.20.0 before 6.57.1 Authentication Bypass via S…
|
TryGhost
|
Ghost
|
2026-10-01T10:42:18.910Z |
2026-10-06T01:41:33.164Z |