|
cve-2026-97227
|
N/A
|
NextScripts: Social Networks Auto-Poster < 4.4.8 - Aut…
|
Unknown
|
NextScripts: Social Networks Auto-Poster
|
2026-09-27T06:00:22.837Z |
2026-09-28T00:48:07.339Z |
|
cve-2026-96899
|
N/A
|
Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via …
|
Unknown
|
Optima Express IDX
|
2026-09-27T06:00:22.661Z |
2026-09-28T00:48:07.465Z |
|
cve-2026-96897
|
N/A
|
Optima Express 8.5.0 - 8.7.5 - Unauthenticated Author …
|
Unknown
|
Optima Express IDX
|
2026-09-27T06:00:22.476Z |
2026-09-28T00:48:07.591Z |
|
cve-2026-96896
|
N/A
|
Malcure Malware Shield < 19.9.7 - Multisite Subsite Ad…
|
Unknown
|
Malcure Malware Shield — Removal, Repair, Monitor
|
2026-09-27T06:00:22.286Z |
2026-09-28T00:48:07.716Z |
|
cve-2026-96895
|
N/A
|
WP YouTube Lyte < 1.7.31 - Contributor+ Stored XSS via…
|
Unknown
|
WP YouTube Lyte
|
2026-09-27T06:00:22.090Z |
2026-09-28T00:48:07.841Z |
|
cve-2026-92995
|
N/A
|
Verge3D <= 4.13.0 - Unauthenticated Product Download D…
|
Unknown
|
Verge3D Publishing and E-Commerce
|
2026-09-27T06:00:21.844Z |
2026-09-28T00:48:07.971Z |
|
cve-2026-92436
|
N/A
|
Mailchimp for WooCommerce < 6.3 - Unauthenticated Cust…
|
Unknown
|
Mailchimp for WooCommerce
|
2026-09-27T06:00:21.636Z |
2026-09-28T00:48:08.102Z |
|
cve-2026-89006
|
N/A
|
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Sto…
|
Unknown
|
WPeMatico RSS Feed Fetcher
|
2026-09-27T06:00:21.446Z |
2026-09-28T00:48:08.230Z |
|
cve-2026-89003
|
N/A
|
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSR…
|
Unknown
|
WPeMatico RSS Feed Fetcher
|
2026-09-27T06:00:21.263Z |
2026-09-28T00:48:08.372Z |
|
cve-2026-89001
|
N/A
|
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Pos…
|
Unknown
|
WPeMatico RSS Feed Fetcher
|
2026-09-27T06:00:21.092Z |
2026-09-28T00:48:08.495Z |
|
cve-2026-89000
|
N/A
|
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSR…
|
Unknown
|
WPeMatico RSS Feed Fetcher
|
2026-09-27T06:00:20.905Z |
2026-09-28T00:48:08.620Z |
|
cve-2026-86841
|
N/A
|
Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object …
|
Unknown
|
Online Scheduling and Appointment Booking System
|
2026-09-27T06:00:20.482Z |
2026-09-28T00:48:08.749Z |
|
cve-2026-86839
|
N/A
|
Bookly < 28.3 - Staff+ Appointment and Payment Disclos…
|
Unknown
|
Online Scheduling and Appointment Booking System
|
2026-09-27T06:00:20.309Z |
2026-09-28T00:48:08.876Z |
|
cve-2026-86609
|
N/A
|
Download Manager Pro < 7.5.6 - Unauthenticated Stored …
|
Unknown
|
Download Manager
|
2026-09-27T06:00:19.713Z |
2026-09-28T00:48:09.004Z |
|
cve-2026-85002
|
N/A
|
EmbedPress < 4.6.7 - Contributor+ Stored XSS via Insta…
|
Unknown
|
EmbedPress
|
2026-09-27T06:00:19.536Z |
2026-09-28T00:48:09.138Z |
|
cve-2026-82841
|
N/A
|
UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Stora…
|
Unknown
|
UpdraftPlus: WP Backup & Migration Plugin
|
2026-09-27T06:00:19.369Z |
2026-09-28T00:48:09.261Z |
|
cve-2026-81655
|
N/A
|
Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored…
|
Unknown
|
Ad Inserter
|
2026-09-27T06:00:19.197Z |
2026-09-28T00:48:09.402Z |
|
cve-2026-84069
|
N/A
|
WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unau…
|
Unknown
|
WebFacing™
|
2026-09-27T06:00:19.008Z |
2026-09-28T00:48:09.520Z |
|
cve-2026-100746
|
|
coollabsio Coolify GitHub App Setup redirect missing a…
|
coollabsio
|
Coolify
|
2026-09-27T03:30:18.973Z |
2026-09-28T13:48:00.442Z |
|
cve-2026-100745
|
|
Edimax BR-6428nC Wireless Wizard formWizSurvey stack-b…
|
Edimax
|
BR-6428nC
|
2026-09-27T02:00:16.547Z |
2026-09-28T15:57:54.488Z |
|
cve-2026-100837
|
6.3 (v4.0)
3.7 (v3.1)
|
Edgeless Systems Contrast through 1.20.0 Credential Le…
|
edgelesssys
|
contrast
|
2026-09-27T01:30:05.443Z |
2026-09-28T13:47:25.357Z |
|
cve-2026-100836
|
5.3 (v4.0)
4.3 (v3.1)
|
Edgeless Systems Contrast through 1.20.0 Denial of Ser…
|
edgelesssys
|
contrast
|
2026-09-27T01:29:58.070Z |
2026-09-28T16:00:49.167Z |
|
cve-2026-100865
|
8.7 (v4.0)
8.8 (v3.1)
|
Heym before 0.0.53 Remote Code Execution via eval() Sa…
|
heymrun
|
heym
|
2026-09-27T01:28:53.874Z |
2026-09-28T13:40:50.761Z |
|
cve-2026-100864
|
8.7 (v4.0)
8.8 (v3.1)
|
heym before 0.0.91 Remote Code Execution via Expressio…
|
heymrun
|
heym
|
2026-09-27T01:28:53.237Z |
2026-09-28T16:04:18.805Z |
|
cve-2026-100863
|
5.3 (v4.0)
5 (v3.1)
|
Heym before 0.0.91 SSRF via image fetching and IPv6 va…
|
heymrun
|
heym
|
2026-09-27T01:28:52.561Z |
2026-09-30T15:24:03.334Z |
|
cve-2026-100862
|
6.9 (v4.0)
4.9 (v3.1)
|
heym before 0.0.91 Multiple Secrets Plaintext Storage
|
heymrun
|
heym
|
2026-09-27T01:28:51.915Z |
2026-09-30T15:49:32.160Z |
|
cve-2026-100861
|
5.3 (v4.0)
5 (v3.1)
|
heym before 0.0.105 SSRF via credential-controlled base URLs
|
heymrun
|
heym
|
2026-09-27T01:28:51.256Z |
2026-09-28T13:38:46.572Z |
|
cve-2026-100860
|
6.8 (v4.0)
5.5 (v3.1)
|
heym before 0.0.105 Authentication Bypass via Redis Node
|
heymrun
|
heym
|
2026-09-27T01:28:50.589Z |
2026-09-28T16:05:18.442Z |
|
cve-2026-100859
|
7.1 (v4.0)
6.5 (v3.1)
|
Heym before 0.0.106 Credential Exfiltration via URL Override
|
heymrun
|
heym
|
2026-09-27T01:28:49.880Z |
2026-09-30T15:23:06.521Z |
|
cve-2026-100858
|
7.6 (v4.0)
6.8 (v3.1)
|
heym before 0.0.109 Server-Side Request Forgery via Wo…
|
heymrun
|
heym
|
2026-09-27T01:28:49.185Z |
2026-09-30T15:41:51.178Z |