|
cve-2026-102377
|
8.8 (v3.1)
|
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PH…
|
10Web
|
Photo Gallery by 10Web
|
2026-09-30T17:39:06.666Z |
2026-09-30T17:59:54.957Z |
|
cve-2026-102376
|
7.1 (v3.1)
|
WordPress Branda plugin <= 3.4.32 - Cross Site Scripti…
|
WPMU DEV
|
Branda
|
2026-09-30T17:39:05.910Z |
2026-09-30T17:59:55.112Z |
|
cve-2026-102375
|
6.5 (v3.1)
|
WordPress Optimole plugin <= 4.2.14 - Broken Access Co…
|
Optimole
|
Optimole
|
2026-09-30T17:39:05.158Z |
2026-10-07T07:03:08.159Z |
|
cve-2026-100512
|
9.8 (v3.1)
|
WordPress Nested Pages plugin <= 3.3.2 - PHP Object In…
|
Hook & Filter
|
Nested Pages
|
2026-09-30T17:39:04.412Z |
2026-09-30T17:59:55.366Z |
|
cve-2026-100510
|
7.1 (v3.1)
|
WordPress Post and Page Builder by BoldGrid plugin <= …
|
BoldGrid
|
Post and Page Builder by BoldGrid
|
2026-09-30T17:39:03.526Z |
2026-09-30T17:59:55.497Z |
|
cve-2026-97291
|
8.8 (v3.1)
|
WordPress Schema & Structured Data for WP & AMP plugin…
|
Magazine3
|
Schema & Structured Data for WP & AMP
|
2026-09-30T17:39:02.780Z |
2026-09-30T17:59:55.640Z |
|
cve-2026-97290
|
7.1 (v3.1)
|
WordPress Photonic Gallery & Lightbox for Flickr, Smug…
|
Sayontan Sinha
|
Photonic Gallery & Lightbox for Flickr, SmugMug & Others
|
2026-09-30T17:39:02.029Z |
2026-09-30T17:59:55.770Z |
|
cve-2026-97265
|
6.5 (v3.1)
|
WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Sc…
|
Crocoblock. Jetimpex Inc.
|
JetEngine
|
2026-09-30T17:39:01.284Z |
2026-09-30T17:59:55.899Z |
|
cve-2026-97256
|
7.2 (v3.1)
|
WordPress Page Builder by SiteOrigin plugin <= 2.36.0 …
|
Greg – SiteOrigin
|
Page Builder by SiteOrigin
|
2026-09-30T17:39:00.498Z |
2026-09-30T17:59:56.028Z |
|
cve-2026-94171
|
7.1 (v3.1)
|
WordPress CURCY plugin 2.2.18 - Cross Site Scripting (…
|
VillaTheme
|
CURCY
|
2026-09-30T17:38:59.725Z |
2026-10-05T14:02:30.455Z |
|
cve-2026-102397
|
6.5 (v3.1)
|
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 -…
|
supsystic
|
Ultimate Maps by Supsystic
|
2026-09-30T17:38:58.949Z |
2026-09-30T17:59:56.305Z |
|
cve-2026-103440
|
1.2 (v4.0)
|
pagetriagelist discloses suppressed reviewer usernames
|
The Wikimedia Foundation
|
MediaWiki PageTriage extension
|
2026-09-30T17:38:27.374Z |
2026-09-30T20:01:01.418Z |
|
cve-2026-103439
|
0.3 (v4.0)
|
Various rawParams() and escaped() updates to prevent X…
|
The Wikimedia Foundation
|
MediaWiki Wikbase extension
|
2026-09-30T17:34:10.328Z |
2026-09-30T20:01:01.560Z |
|
cve-2026-103438
|
0.3 (v4.0)
|
Various rawParams() and escaped() updates to prevent X…
|
The Wikimedia Foundation
|
MediaWiki Wikistories extension
|
2026-09-30T17:32:26.060Z |
2026-09-30T20:01:01.753Z |
|
cve-2026-55224
|
|
MineAdmin: Path Traversal via Unsanitized identifier i…
|
mineadmin
|
MineAdmin
|
2026-09-30T17:26:11.618Z |
2026-10-02T16:28:25.497Z |
|
cve-2026-55094
|
|
Taskcluster: Unauthenticated remote code execution in …
|
taskcluster
|
taskcluster
|
2026-09-30T17:22:52.135Z |
2026-09-30T19:12:22.456Z |
|
cve-2026-103476
|
6.9 (v4.0)
5.3 (v3.1)
|
yii2-starter-kit through 4.2.0 Unauthorized File Downl…
|
yii2-starter-kit
|
yii2-starter-kit
|
2026-09-30T17:22:42.463Z |
2026-10-01T15:34:07.570Z |
|
cve-2026-103475
|
9.3 (v4.0)
9.1 (v3.1)
|
yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure
|
yii2-starter-kit
|
yii2-starter-kit
|
2026-09-30T17:22:41.761Z |
2026-09-30T19:13:28.143Z |
|
cve-2026-103474
|
8.7 (v4.0)
8.8 (v3.1)
|
yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE
|
yii2-starter-kit
|
yii2-starter-kit
|
2026-09-30T17:22:41.048Z |
2026-09-30T17:50:39.433Z |
|
cve-2026-103473
|
9.2 (v4.0)
8.1 (v3.1)
|
Deno 2.7.0 through 2.9.7 Command Injection via node:ch…
|
denoland
|
deno
|
2026-09-30T17:22:40.337Z |
2026-10-02T16:27:05.332Z |
|
cve-2026-103472
|
8.7 (v4.0)
7.5 (v3.1)
|
restbed through 5.0.0 WebSocket Memory Exhaustion via …
|
Corvusoft
|
restbed
|
2026-09-30T17:22:39.306Z |
2026-10-01T18:00:00.791Z |
|
cve-2026-103471
|
8.7 (v4.0)
7.5 (v3.1)
|
restbed through 5.0.0 Denial of Service via Unbounded …
|
Corvusoft
|
restbed
|
2026-09-30T17:22:38.624Z |
2026-09-30T19:18:24.675Z |
|
cve-2026-103437
|
1.1 (v4.0)
|
ReadingLists imported metadata permits JavaScript URL XSS
|
The Wikimedia Foundation
|
MediaWiki ReadingLists extension
|
2026-09-30T17:17:35.540Z |
2026-09-30T20:01:02.016Z |
|
cve-2026-103500
|
N/A
|
Heap buffer overflow opening large email
|
Mozilla
|
Thunderbird
|
2026-09-30T17:15:06.357Z |
2026-10-21T17:24:51.272Z |
|
cve-2026-103446
|
7.4 (v4.0)
|
WikiLambda exposes anonymous execution of unsaved Abst…
|
The Wikimedia Foundation
|
MediaWiki WikiLambda extension
|
2026-09-30T17:13:02.339Z |
2026-10-06T18:25:30.800Z |
|
cve-2026-53605
|
|
Reachy Mini Wireless: Local Privilege Escalation via U…
|
pollen-robotics
|
reachy-mini-os
|
2026-09-30T17:09:23.367Z |
2026-10-02T16:25:21.048Z |
|
cve-2026-55107
|
|
Kobako Vulnerable to Sandbox Escape: guest eval reache…
|
elct9620
|
kobako
|
2026-09-30T17:06:00.286Z |
2026-09-30T19:49:04.193Z |
|
cve-2026-103445
|
1.2 (v4.0)
|
Stored XSS through PageForms #autoedit redirect links
|
The Wikimedia Foundation
|
MediaWiki Page_Forms extension
|
2026-09-30T17:04:14.711Z |
2026-09-30T20:01:02.247Z |
|
cve-2026-87004
|
|
Tugtainer: OIDC id_token claims accepted without signa…
|
Quenary
|
tugtainer
|
2026-09-30T17:01:24.963Z |
2026-09-30T18:01:20.063Z |
|
cve-2026-62308
|
|
Tugtainer: Authenticated SSRF via arbitrary notificati…
|
Quenary
|
tugtainer
|
2026-09-30T16:59:31.819Z |
2026-09-30T19:27:22.748Z |