Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106647 | N/A | Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ For… |
Unknown |
Royal Addons for Elementor |
2026-10-28T06:00:21.875Z | 2026-10-28T17:58:08.236Z |
| cve-2026-106003 | N/A | Court Reservation < 1.12.4 - Unauthenticated Reservati… |
Unknown |
Court Reservation |
2026-10-28T06:00:21.700Z | 2026-10-28T17:58:08.395Z |
| cve-2026-106002 | N/A | Court Reservation < 1.12.4 - Unauthenticated Arbitrary… |
Unknown |
Court Reservation |
2026-10-28T06:00:21.524Z | 2026-10-28T17:58:08.549Z |
| cve-2026-105997 | N/A | Booking Package < 1.7.33 - Unauthenticated Verificatio… |
Unknown |
Booking Package |
2026-10-28T06:00:21.342Z | 2026-10-28T17:58:08.731Z |
| cve-2026-105972 | N/A | WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored… |
Unknown |
Menu Cart for WooCommerce |
2026-10-28T06:00:21.162Z | 2026-10-28T17:58:08.920Z |
| cve-2026-104694 | N/A | Thrive Automator < 11.2 - Editor+ Blind SQLi via 'addi… |
Unknown |
Thrive Automator |
2026-10-28T06:00:20.983Z | 2026-10-28T17:58:09.090Z |
| cve-2026-103688 | N/A | Checkout Files Upload for WooCommerce < 2.4.0 - Unauth… |
Unknown |
Checkout Files Upload for WooCommerce |
2026-10-28T06:00:20.809Z | 2026-10-28T17:58:09.254Z |
| cve-2026-103382 | N/A | Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthentic… |
Unknown |
Casso Flow |
2026-10-28T06:00:20.631Z | 2026-10-28T17:58:09.436Z |
| cve-2026-103372 | N/A | Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Or… |
Unknown |
Payconiq |
2026-10-28T06:00:20.224Z | 2026-10-28T17:58:09.601Z |
| cve-2026-103331 | N/A | UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauth… |
Unknown |
UniPAY Payment Gateway For WooCommerce |
2026-10-28T06:00:19.793Z | 2026-10-28T17:58:09.780Z |
| cve-2026-15323 | Product Designer for WooCommerce WordPress | Lumise <=… |
King-Theme |
Product Designer for WooCommerce WordPress | Lumise |
2026-10-28T05:33:31.729Z | 2026-10-29T01:41:55.027Z | |
| cve-2026-109236 | Customer Email Verification for WooCommerce <= 2.8.2 -… |
zorem |
Customer Email Verification for WooCommerce |
2026-10-28T05:33:31.213Z | 2026-10-28T16:10:40.810Z | |
| cve-2026-115522 | 5.3 (v4.0) | Cross-Application Artifact Namespace Isolation in Goog… |
Google |
Agent Development Kit (ADK) for Python |
2026-10-28T04:36:49.927Z | 2026-10-28T04:36:49.927Z |
| cve-2026-104384 | 8.7 (v4.0) | Insufficiently protected credentials in EagleCloud Aqu… |
EagleCloud |
Aquila |
2026-10-28T04:21:29.717Z | 2026-10-28T04:21:29.717Z |
| cve-2026-104383 | 9.4 (v4.0) | Code injection in EagleCloud Aquila on-premises version |
EagleCloud |
Aquila |
2026-10-28T04:21:22.924Z | 2026-10-28T04:21:22.924Z |
| cve-2026-99100 | N/A | wifi: p54: validate firmware record lengths |
Linux |
Linux |
2026-10-28T03:55:38.898Z | 2026-11-01T12:42:04.550Z |
| cve-2026-118276 | a2ui-project a2ui Parser expression_parser.ts formatSt… |
a2ui-project |
a2ui |
2026-10-28T03:45:18.266Z | 2026-10-28T03:45:18.266Z | |
| cve-2026-111727 | Appointment Booking Calendar <= 1.4.05 - Authenticated… |
codepeople |
Appointment Booking Calendar |
2026-10-28T03:42:54.736Z | 2026-10-29T01:41:55.179Z | |
| cve-2026-1928 | Rank Math SEO <= 1.0.276 - Authenticated (Contributor+… |
rankmath |
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings |
2026-10-28T03:42:54.378Z | 2026-10-29T01:41:55.325Z | |
| cve-2026-116613 | Animated Text Block <= 1.2.6 - Missing Authorization t… |
bplugins |
Animated Text Block – Add Typing and Looping Text Effects |
2026-10-28T03:42:54.035Z | 2026-10-29T01:41:55.485Z | |
| cve-2026-111255 | affiliate-toolkit <= 3.9.2 - Authenticated (Contributo… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T03:42:53.522Z | 2026-10-28T16:10:48.081Z | |
| cve-2026-118275 | a2ui-project a2ui Resolver data-context.ts DataContext… |
a2ui-project |
a2ui |
2026-10-28T03:30:18.509Z | 2026-10-28T16:10:54.352Z | |
| cve-2026-118384 | 6.1 (v3.1) | GNU mtools before 4.0.50 has an out-of-bounds wri… |
GNU |
mtools |
2026-10-28T02:53:38.786Z | 2026-10-31T15:14:13.418Z |
| cve-2026-118274 | a2ui-project a2ui Binder generic-binder.ts resource co… |
a2ui-project |
a2ui |
2026-10-28T02:45:10.858Z | 2026-10-28T02:45:10.858Z | |
| cve-2026-118273 | a2ui-project a2ui data-model.ts DataModel.set resource… |
a2ui-project |
a2ui |
2026-10-28T02:30:20.889Z | 2026-10-28T02:30:20.889Z | |
| cve-2026-107745 | AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limit… |
tigroumeow |
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini |
2026-10-28T02:29:59.766Z | 2026-10-29T01:51:59.196Z | |
| cve-2026-109209 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Sub… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:59.405Z | 2026-10-29T01:51:59.353Z | |
| cve-2026-111314 | affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cr… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T02:29:59.059Z | 2026-10-29T01:51:59.496Z | |
| cve-2026-97019 | AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Si… |
mohammed_kaludi |
AMP for WP – Accelerated Mobile Pages |
2026-10-28T02:29:58.709Z | 2026-10-29T01:51:59.638Z | |
| cve-2026-109999 | AI Marketing Expert <= 1.2.8 - Unauthenticated Stored … |
nalam-1 |
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot |
2026-10-28T02:29:58.364Z | 2026-10-28T16:11:01.240Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000168 | Enisys Gw vulnerable to arbitrary file creation | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000167 | Enisys Gw vulnerable to SQL injection | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000164 | ANA App fails to verify SSL server certificates | 2015-10-28T14:50+09:00 | 2018-03-07T13:50+09:00 |
| jvndb-2015-000166 | EC-CUBE vulnerable to cross-site request forgery | 2015-10-26T12:27+09:00 | 2015-11-13T19:36+09:00 |
| jvndb-2015-000162 | AirDroid for Android vulnerable in handling of implicit intents | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000160 | Avast vulnerable to directory traversal | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000126 | eXtplorer vulnerable to cross-site request forgery | 2015-10-15T12:24+09:00 | 2015-10-19T15:55+09:00 |
| jvndb-2015-000159 | Party Track SDK for iOS fails to verify server certificates | 2015-10-14T15:41+09:00 | 2015-11-11T17:32+09:00 |
| jvndb-2015-000158 | Pref Shimane CMS vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000154 | phpRechnung vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000153 | Dojo Toolkit vulnerable to cross-site scripting | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000152 | Cybozu Garoon vulnerable to LDAP injection | 2015-10-07T14:48+09:00 | 2016-06-02T19:15+09:00 |
| jvndb-2015-000151 | Multiple PHP code execution vulnerabilitles in Cybozu Garoon | 2015-10-07T14:48+09:00 | 2016-05-30T15:34+09:00 |
| jvndb-2015-000149 | gollum vulnerable to file exposure | 2015-10-02T13:36+09:00 | 2015-10-08T15:26+09:00 |
| jvndb-2015-000148 | Dotclear vulnerable to cross-site scripting | 2015-10-02T13:36+09:00 | 2015-10-06T18:02+09:00 |
| jvndb-2015-000147 | AjaXplorer vulnerable to directory traversal | 2015-10-01T14:11+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000141 | Python for Windows may insecurely load dynamic libraries | 2015-10-01T14:11+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000140 | Canary Labs Trend Web Server vulnerable to buffer overflow | 2015-10-01T14:11+09:00 | 2015-10-06T18:00+09:00 |
| jvndb-2015-000146 | MATCHA SNS access restriction bypass vulnerability | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000145 | MATCHA SNS vulnerable to code injection | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000144 | MATCHA INVOICE vulnerable to code injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000143 | MATCHA INVOICE vulnerable to SQL injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000139 | baserCMS vulnerable to SQL injection | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000138 | baserCMS fails to restrict access permissions | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000137 | niconico App for iOS fails to verify SSL server certificates | 2015-09-29T14:05+09:00 | 2018-03-07T12:26+09:00 |
| jvndb-2015-000142 | Apache Cordova plugin cordova-plugin-file-transfer vulnerable to HTTP header injection | 2015-09-29T14:04+09:00 | 2015-12-21T17:45+09:00 |
| jvndb-2015-000136 | H2O vulnerable to directory traversal | 2015-09-17T13:36+09:00 | 2015-10-05T17:32+09:00 |
| jvndb-2015-000135 | Photon vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:15+09:00 |
| jvndb-2015-000134 | Reversi vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:18+09:00 |
| jvndb-2015-000133 | Koritore vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0504 | Vulnérabilité dans les produits Moxa | 2025-06-12T00:00:00.000000 | 2025-06-12T00:00:00.000000 |
| certfr-2025-avi-0503 | Multiples vulnérabilités dans les produits Mitel | 2025-06-12T00:00:00.000000 | 2025-06-12T00:00:00.000000 |
| certfr-2025-avi-0502 | Multiples vulnérabilités dans GitLab | 2025-06-12T00:00:00.000000 | 2025-06-12T00:00:00.000000 |
| certfr-2025-avi-0501 | Multiples vulnérabilités dans les produits Microsoft | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0500 | Vulnérabilité dans Microsoft .Net | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0499 | Multiples vulnérabilités dans Microsoft Windows | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0498 | Multiples vulnérabilités dans Microsoft Office | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0497 | Vulnérabilité dans les processeurs Intel | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0496 | Multiples vulnérabilités dans les produits Fortinet | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0495 | Multiples vulnérabilités dans les produits Adobe | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0494 | Vulnérabilité dans Elastic Kibana | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0493 | Multiples vulnérabilités dans les produits Centreon | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0492 | Multiples vulnérabilités dans les produits Siemens | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0491 | Multiples vulnérabilités dans les produits Mozilla | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0490 | Multiples vulnérabilités dans Ivanti Workspace Control (IWC) | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0489 | Multiples vulnérabilités dans Google Chrome | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0488 | Vulnérabilité dans Stormshield Network Security | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0487 | Multiples vulnérabilités dans les produits SAP | 2025-06-11T00:00:00.000000 | 2025-06-11T00:00:00.000000 |
| certfr-2025-avi-0486 | Multiples vulnérabilités dans les produits Qnap | 2025-06-10T00:00:00.000000 | 2025-06-10T00:00:00.000000 |
| certfr-2025-avi-0485 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-06-10T00:00:00.000000 | 2025-06-10T00:00:00.000000 |
| certfr-2025-avi-0484 | Vulnérabilité dans les produits HPE Aruba Networking | 2025-06-10T00:00:00.000000 | 2025-06-10T00:00:00.000000 |
| certfr-2025-avi-0483 | Vulnérabilité dans Mozilla VPN | 2025-06-10T00:00:00.000000 | 2025-06-10T00:00:00.000000 |
| certfr-2025-avi-0482 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-06T00:00:00.000000 | 2025-06-06T00:00:00.000000 |
| certfr-2025-avi-0481 | Multiples vulnérabilités dans les produits IBM | 2025-06-06T00:00:00.000000 | 2025-06-06T00:00:00.000000 |
| certfr-2025-avi-0480 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-06-06T00:00:00.000000 | 2025-06-06T00:00:00.000000 |
| certfr-2025-avi-0479 | Multiples vulnérabilités dans les produits Cisco | 2025-06-05T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0478 | Vulnérabilité dans Wireshark | 2025-06-05T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0477 | Multiples vulnérabilités dans les produits VMware | 2025-06-05T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0476 | Vulnérabilité dans cURL | 2025-06-04T00:00:00.000000 | 2025-06-04T00:00:00.000000 |
| certfr-2025-avi-0475 | Multiples vulnérabilités dans Python | 2025-06-04T00:00:00.000000 | 2025-06-04T00:00:00.000000 |