Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-15365 | 2.4 (v4.0) | A pop-up logic flaw in a certain feature of Kids … |
vivo |
Kids Mode |
2026-08-26T06:45:35.488Z | 2026-08-26T15:15:52.942Z |
| cve-2026-18331 | Formidable Forms <= 6.33.1 - Unauthenticated Stored Cr… |
strategy11team |
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More |
2026-08-26T06:08:28.961Z | 2026-08-26T14:08:15.044Z | |
| cve-2026-18431 | Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthentic… |
themefusion |
Avada (Fusion) Builder |
2026-08-26T06:08:28.442Z | 2026-08-27T14:34:23.749Z | |
| cve-2026-3002 | Gutenverse <= 4.0.2 - Authenticated (Contributor+) Sto… |
jegstudio |
Gutenverse – WordPress Blocks, Page Builder & Site Editor |
2026-08-26T06:08:27.892Z | 2026-08-26T12:06:42.055Z | |
| cve-2026-78146 | N/A | Noptin < 4.3.3 - Unauthenticated Subscriber PII and co… |
Unknown |
Simple Newsletter Plugin |
2026-08-26T06:00:22.661Z | 2026-08-26T14:43:06.910Z |
| cve-2026-77790 | N/A | RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sort… |
Unknown |
RegistrationMagic |
2026-08-26T06:00:22.488Z | 2026-08-26T06:00:22.488Z |
| cve-2026-77789 | N/A | Stripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Cu… |
Unknown |
Stripe Payment Forms by WP Full Pay |
2026-08-26T06:00:22.315Z | 2026-08-26T14:43:07.191Z |
| cve-2026-77758 | N/A | Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthen… |
Unknown |
Stripe Payment Forms by WP Full Pay |
2026-08-26T06:00:22.143Z | 2026-08-26T14:43:07.348Z |
| cve-2026-77757 | N/A | Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image … |
Unknown |
Directorist: AI-Powered Business Directory, Listings & Classified Ads |
2026-08-26T06:00:21.970Z | 2026-08-26T14:43:07.510Z |
| cve-2026-77754 | N/A | Kirki < 6.0.14 - Unauthenticated User and Comment Auth… |
Unknown |
Kirki |
2026-08-26T06:00:21.798Z | 2026-08-26T14:43:07.672Z |
| cve-2026-77695 | N/A | Woo Refund And Exchange Lite < 4.6.4 - Unauthenticated… |
Unknown |
Return Refund and Exchange For WooCommerce |
2026-08-26T06:00:21.617Z | 2026-08-26T14:43:07.838Z |
| cve-2026-77694 | N/A | Eventin < 4.1.19 - Unauthenticated Order Completion Wi… |
Unknown |
Eventin |
2026-08-26T06:00:21.437Z | 2026-08-26T14:43:08.015Z |
| cve-2026-77693 | N/A | Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbi… |
Unknown |
Order Tip for WooCommerce |
2026-08-26T06:00:21.254Z | 2026-08-26T14:43:08.192Z |
| cve-2026-75798 | N/A | AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI… |
Unknown |
AI Engine |
2026-08-26T06:00:21.050Z | 2026-08-26T14:43:08.353Z |
| cve-2026-75797 | N/A | AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File R… |
Unknown |
AI Engine |
2026-08-26T06:00:20.867Z | 2026-08-26T14:43:08.518Z |
| cve-2026-74930 | N/A | WP Project Manager 2.2.0 - 4.0.6 - Subscriber+ User Ac… |
Unknown |
Project Manager |
2026-08-26T06:00:20.688Z | 2026-08-26T14:43:08.693Z |
| cve-2026-74929 | N/A | WP Project Manager < 4.0.7 - Subscriber+ Cross-Project… |
Unknown |
Project Manager |
2026-08-26T06:00:20.513Z | 2026-08-26T14:43:08.852Z |
| cve-2026-74928 | N/A | WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Sub… |
Unknown |
Project Manager |
2026-08-26T06:00:20.344Z | 2026-08-26T14:43:09.020Z |
| cve-2026-74851 | N/A | Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback |
Unknown |
Pods |
2026-08-26T06:00:20.171Z | 2026-08-26T14:43:09.184Z |
| cve-2026-19718 | N/A | BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthe… |
Unknown |
BlogVault Backup & Staging |
2026-08-26T06:00:19.992Z | 2026-08-26T14:43:09.346Z |
| cve-2026-19226 | N/A | Royal Elementor Addons < 1.7.1066 - Contributor+ Store… |
Unknown |
Royal Addons for Elementor |
2026-08-26T06:00:19.818Z | 2026-08-26T14:43:09.512Z |
| cve-2026-19220 | N/A | Forminator Forms < 1.57.1 - Unauthenticated Multisite … |
Unknown |
Forminator Forms |
2026-08-26T06:00:19.642Z | 2026-08-26T14:43:09.681Z |
| cve-2026-19094 | N/A | Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' … |
Unknown |
Tutor LMS |
2026-08-26T06:00:19.470Z | 2026-08-26T14:43:09.843Z |
| cve-2026-16986 | N/A | Booking Package < 1.7.25 - Unauthenticated Price Manip… |
Unknown |
Booking Package |
2026-08-26T06:00:19.289Z | 2026-08-26T14:43:10.015Z |
| cve-2026-16984 | N/A | WP Legal Pages < 3.7.1 - Unauthenticated API Secret Di… |
Unknown |
Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates |
2026-08-26T06:00:19.071Z | 2026-08-26T14:43:10.172Z |
| cve-2026-14550 | N/A | WPCafe < 3.0.18 - Unauthenticated Reservation Approval… |
Unknown |
WPCafe |
2026-08-26T06:00:18.876Z | 2026-08-26T14:43:10.333Z |
| cve-2026-14216 | N/A | Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch |
Unknown |
Booking for Appointments and Events Calendar |
2026-08-26T06:00:18.648Z | 2026-08-26T14:43:10.496Z |
| cve-2026-14212 | N/A | Amelia Pro < 9.8 - Provider+ Arbitrary Provider Passwo… |
Unknown |
Booking for Appointments and Events Calendar |
2026-08-26T06:00:18.461Z | 2026-08-26T14:43:10.666Z |
| cve-2026-13406 | N/A | Royal Elementor Addons < 1.7.1066 - Unauthenticated Ta… |
Unknown |
Royal Addons for Elementor |
2026-08-26T06:00:18.287Z | 2026-08-26T14:36:36.786Z |
| cve-2026-13404 | N/A | Royal Elementor Addons < 1.7.1066 - Unauthenticated Li… |
Unknown |
Royal Addons for Elementor |
2026-08-26T06:00:18.118Z | 2026-08-26T14:43:10.829Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000082 | FuelPHP vulnerable to remote code execution | 2014-07-18T13:50+09:00 | 2014-07-23T11:03+09:00 |
| jvndb-2014-000081 | File Explorer vulnerable to directory traversal | 2014-07-18T13:48+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000080 | Meridian vulnerable to cross-site scripting | 2014-07-18T13:47+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000079 | Multifunctional MailForm Free vulnerable to cross-site scripting | 2014-07-16T15:13+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000078 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:47+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000077 | Cybozu Garoon vulnerable to access restriction bypass | 2014-07-15T14:46+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000076 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:46+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000075 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:45+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000074 | Cybozu Garoon 3 API access restriction bypass vulnerability | 2014-07-15T14:45+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000073 | Cybozu Garoon CGI vulnerable to remote command execution | 2014-07-15T14:44+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000072 | Seasar S2Struts vulnerable to ClassLoader manipulation | 2014-07-15T14:44+09:00 | 2014-07-15T14:44+09:00 |
| jvndb-2014-000071 | Becky! Internet Mail vulnerable to buffer overflow | 2014-07-08T14:53+09:00 | 2014-07-10T17:05+09:00 |
| jvndb-2014-000066 | SX-2000WG vulnerable to denial-of-service (DoS) | 2014-07-02T15:20+09:00 | 2014-07-07T18:34+09:00 |
| jvndb-2014-000065 | SX-2000WG vulnerable to denial-of-service (DoS) | 2014-07-02T15:16+09:00 | 2014-07-07T18:28+09:00 |
| jvndb-2014-000069 | RockDisk vulnerable to cross-site scripting | 2014-07-02T14:40+09:00 | 2017-05-17T17:07+09:00 |
| jvndb-2014-000064 | Web Kyukincho vulnerable to cross-site request forgery | 2014-06-25T15:01+09:00 | 2014-07-01T16:07+09:00 |
| jvndb-2014-000063 | Web Kyukincho vulnerable to cross-site scripting | 2014-06-25T14:53+09:00 | 2014-07-01T16:08+09:00 |
| jvndb-2014-000062 | Login rebuilder vulnerable to cross-site request forgery | 2014-06-24T14:22+09:00 | 2014-06-24T14:22+09:00 |
| jvndb-2014-000061 | Sophos Disk Encryption vulnerable to authentication bypass | 2014-06-24T14:21+09:00 | 2014-06-26T17:46+09:00 |
| jvndb-2014-000060 | Webmin vulnerable to cross-site scripting | 2014-06-20T13:58+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000059 | Webmin vulnerable to cross-site scripting | 2014-06-20T13:58+09:00 | 2014-07-23T10:59+09:00 |
| jvndb-2014-000058 | Usermin vulnerable to cross-site scripting | 2014-06-20T13:56+09:00 | 2014-07-23T10:59+09:00 |
| jvndb-2014-000057 | Usermin vulnerable to OS command injection | 2014-06-20T13:56+09:00 | 2014-06-24T13:44+09:00 |
| jvndb-2014-000050 | JR East Japan App for Android. contains an issue where it fails to verify SSL server certificates | 2014-06-18T14:57+09:00 | 2014-06-23T11:06+09:00 |
| jvndb-2014-000056 | TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation | 2014-06-17T15:01+09:00 | 2015-01-22T15:50+09:00 |
| jvndb-2014-000049 | 050 plus for Android information management vulnerability | 2014-06-17T14:50+09:00 | 2014-06-23T11:03+09:00 |
| jvndb-2014-000055 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-06-13T12:44+09:00 | 2014-06-17T16:11+09:00 |
| jvndb-2014-000054 | Spring Framework vulnerable to directory traversal | 2014-06-13T12:40+09:00 | 2016-06-23T13:45+09:00 |
| jvndb-2014-002802 | Xml eXternal Entity Vulnerability in XML link function of Hitachi COBOL2002 | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-002800 | Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1104 | Vulnérabilité dans les produits NetApp | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| certfr-2024-avi-1103 | Multiples vulnérabilités dans les produits IBM | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1102 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1101 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1100 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1099 | Multiples vulnérabilités dans Sophos Firewall | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1098 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1097 | Vulnérabilité dans Trend Micro Deep Security Agent | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| certfr-2024-avi-1096 | Multiples vulnérabilités dans les produits Fortinet | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| certfr-2024-avi-1095 | Multiples vulnérabilités dans Google Chrome | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| certfr-2024-avi-1094 | Vulnérabilité dans les produits Elastic | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| certfr-2024-avi-1093 | Multiples vulnérabilités dans Xen | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| certfr-2024-avi-1092 | Vulnérabilité dans Traefik | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| certfr-2024-avi-1091 | Multiples vulnérabilités dans Apache Tomcat | 2024-12-18T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| certfr-2024-avi-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2024-avi-1089 | Vulnérabilité dans les produits StormShield Management Center | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1088 | Multiples vulnérabilités dans les produits Foxit | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1087 | Vulnérabilité dans les produits Siemens | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1086 | Multiples vulnérabilités dans Trend Micro Apex One | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1085 | Multiples vulnérabilités dans Moodle | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1084 | Vulnérabilité dans SolarWinds Web Help Desk | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| certfr-2024-avi-1083 | Multiples vulnérabilités dans Mozilla Thunderbird | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| certfr-2024-avi-1082 | Multiples vulnérabilités dans les produits Synology | 2024-12-16T00:00:00.000000 | 2024-12-16T00:00:00.000000 |
| certfr-2024-avi-1081 | Multiples vulnérabilités dans les produits IBM | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1080 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1079 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1078 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1077 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1076 | Multiples vulnérabilités dans Suricata | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |
| certfr-2024-avi-1075 | Multiples vulnérabilités dans Nagios XI | 2024-12-13T00:00:00.000000 | 2024-12-13T00:00:00.000000 |