Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-101575 | Vulnerability in the Helidon product of Oracle Fu… |
Oracle Corporation |
Helidon |
2026-10-20T21:21:38.789Z | 2026-10-29T01:52:02.230Z | |
| cve-2026-101583 | Vulnerability in the Helidon product of Oracle Fu… |
Oracle Corporation |
Helidon |
2026-10-20T21:21:41.695Z | 2026-10-29T01:52:02.060Z | |
| cve-2026-101593 | Vulnerability in the Oracle Agile Product Lifecyc… |
Oracle Corporation |
Oracle Agile Product Lifecycle Management for Process |
2026-10-20T21:21:45.940Z | 2026-10-29T01:52:01.890Z | |
| cve-2026-91238 | Vulnerability in the Oracle SOA Suite product of … |
Oracle Corporation |
Oracle SOA Suite |
2026-10-20T21:24:49.282Z | 2026-10-29T01:52:01.738Z | |
| cve-2026-91247 | Vulnerability in the Oracle WebCenter Portal prod… |
Oracle Corporation |
Oracle WebCenter Portal |
2026-10-20T21:24:52.512Z | 2026-10-29T01:52:01.597Z | |
| cve-2026-115807 | User Profile Builder – Beautiful User Registration For… |
cozmoslabs |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor |
2026-10-24T04:32:09.994Z | 2026-10-29T01:52:01.385Z | |
| cve-2026-115806 | Prime Mover <= 2.2.1 - Unauthenticated PHP Object Inje… |
codexonics |
Prime Mover – Backup and Migration |
2026-10-24T04:32:10.565Z | 2026-10-29T01:52:01.233Z | |
| cve-2026-57184 | Asterisk: Out-of-Bounds Read in Q.931 Information Elem… |
asterisk |
asterisk |
2026-10-26T19:53:10.021Z | 2026-10-29T01:52:01.081Z | |
| cve-2026-111820 | Analytics Insights <= 6.3.12 - Unauthenticated Stored … |
deconf |
Analytics Insights – Google Analytics Dashboard for WordPress |
2026-10-27T05:30:30.909Z | 2026-10-29T01:52:00.940Z | |
| cve-2026-75891 | Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Objec… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-27T06:40:42.359Z | 2026-10-29T01:52:00.797Z | |
| cve-2026-10511 | Jupiter X Core <= 4.61.0 - Authenticated (Contributor+… |
artbees |
Jupiter X Core |
2026-10-27T07:42:53.188Z | 2026-10-29T01:52:00.657Z | |
| cve-2026-109995 | Advanced Views <= 3.9.6 - Unauthenticated Stored Cross… |
wplakeorg |
Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode |
2026-10-27T11:32:03.735Z | 2026-10-29T01:52:00.520Z | |
| cve-2026-10752 | Advanced Custom Fields: Extended <= 0.9.2.6 - Missing … |
hwk-fr |
Advanced Custom Fields: Extended |
2026-10-27T11:32:04.243Z | 2026-10-29T01:52:00.370Z | |
| cve-2026-106013 | Jupiter X Core <= 4.61.0 - Unauthenticated Authenticat… |
artbees |
Jupiter X Core |
2026-10-28T01:30:48.320Z | 2026-10-29T01:52:00.079Z | |
| cve-2026-84999 | Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbi… |
Pie Register |
Pie Register Premium |
2026-10-28T02:29:57.638Z | 2026-10-29T01:51:59.919Z | |
| cve-2026-109974 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Con… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:57.994Z | 2026-10-29T01:51:59.778Z | |
| cve-2026-97019 | AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Si… |
mohammed_kaludi |
AMP for WP – Accelerated Mobile Pages |
2026-10-28T02:29:58.709Z | 2026-10-29T01:51:59.638Z | |
| cve-2026-111314 | affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cr… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T02:29:59.059Z | 2026-10-29T01:51:59.496Z | |
| cve-2026-109209 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Sub… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:59.405Z | 2026-10-29T01:51:59.353Z | |
| cve-2026-107745 | AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limit… |
tigroumeow |
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini |
2026-10-28T02:29:59.766Z | 2026-10-29T01:51:59.196Z | |
| cve-2026-101584 | Vulnerability in the Helidon product of Oracle Fu… |
Oracle Corporation |
Helidon |
2026-10-20T21:21:42.483Z | 2026-10-29T01:46:08.121Z | |
| cve-2026-101488 | Vulnerability in the PeopleSoft Enterprise People… |
Oracle Corporation |
PeopleSoft Enterprise PeopleTools |
2026-10-20T21:21:09.041Z | 2026-10-29T01:45:51.039Z | |
| cve-2026-116613 | Animated Text Block <= 1.2.6 - Missing Authorization t… |
bplugins |
Animated Text Block – Add Typing and Looping Text Effects |
2026-10-28T03:42:54.035Z | 2026-10-29T01:41:55.485Z | |
| cve-2026-1928 | Rank Math SEO <= 1.0.276 - Authenticated (Contributor+… |
rankmath |
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings |
2026-10-28T03:42:54.378Z | 2026-10-29T01:41:55.325Z | |
| cve-2026-111727 | Appointment Booking Calendar <= 1.4.05 - Authenticated… |
codepeople |
Appointment Booking Calendar |
2026-10-28T03:42:54.736Z | 2026-10-29T01:41:55.179Z | |
| cve-2026-15323 | Product Designer for WooCommerce WordPress | Lumise <=… |
King-Theme |
Product Designer for WooCommerce WordPress | Lumise |
2026-10-28T05:33:31.729Z | 2026-10-29T01:41:55.027Z | |
| cve-2026-116609 | WP Visitor Statistics (Real Time Traffic) <= 8.8 - Aut… |
osamaesh |
WP Visitor Statistics (Real Time Traffic) |
2026-10-28T06:45:04.986Z | 2026-10-29T01:41:54.871Z | |
| cve-2026-103370 | Awesome Support <= 6.4.1 - Authenticated (Custom+) Sto… |
awesomesupport |
Awesome Support – WordPress HelpDesk & Support Plugin |
2026-10-28T06:45:05.565Z | 2026-10-29T01:41:54.736Z | |
| cve-2026-110662 | MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cr… |
mxchat |
MxChat – AI Chatbot & Content Generation for WordPress |
2026-10-28T06:45:06.494Z | 2026-10-29T01:41:54.592Z | |
| cve-2026-109385 | UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored… |
posimyththemes |
UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks |
2026-10-28T06:45:07.291Z | 2026-10-29T01:41:54.439Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000100 | Cakifo vulnerable to cross-site scripting | 2014-08-18T13:32+09:00 | 2014-08-20T16:30+09:00 |
| jvndb-2014-000099 | Advance-Flow vulnerable to SQL injection | 2014-08-19T12:35+09:00 | 2014-08-20T16:26+09:00 |
| jvndb-2014-000093 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:52+09:00 | 2014-08-19T16:48+09:00 |
| jvndb-2014-000096 | Shutter vulnerable to cross-site scripting | 2014-08-15T13:27+09:00 | 2014-08-19T16:27+09:00 |
| jvndb-2014-000098 | Ameba for Android contains an issue where it fails to verify SSL server certificates | 2014-08-14T12:32+09:00 | 2014-08-18T12:22+09:00 |
| jvndb-2014-000086 | Outlook.com for Android contains an issue where it fails to verify SSL server certificates | 2014-07-30T15:11+09:00 | 2014-08-18T10:09+09:00 |
| jvndb-2014-000091 | ServerView Operations Manager vulnerable to cross-site scripting | 2014-08-01T15:42+09:00 | 2014-08-18T10:05+09:00 |
| jvndb-2014-000097 | Dominion KX2-101 vulnerable to denial-of-service (DoS) | 2014-08-12T14:03+09:00 | 2014-08-18T09:44+09:00 |
| jvndb-2014-000092 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:49+09:00 | 2014-08-15T13:35+09:00 |
| jvndb-2014-000085 | GOM Player vulnerable to denial-of-service (DoS) | 2014-08-06T15:22+09:00 | 2014-08-13T18:29+09:00 |
| jvndb-2014-000094 | Piwigo vulnerable to SQL injection | 2014-08-08T13:57+09:00 | 2014-08-08T13:57+09:00 |
| jvndb-2014-000087 | Multiple I-O DATA IP Cameras vulnerable to authentication bypass | 2014-07-29T14:24+09:00 | 2014-08-01T18:30+09:00 |
| jvndb-2014-000089 | acmailer contains a cross-site request forgery vulnerability | 2014-07-29T14:15+09:00 | 2014-08-01T18:29+09:00 |
| jvndb-2014-000088 | PerlMailer vulnerable to cross-site scripting | 2014-07-29T14:20+09:00 | 2014-08-01T18:28+09:00 |
| jvndb-2013-002240 | Arbitrary program execution vulnerability in TrendLink ActiveX control | 2014-07-25T14:44+09:00 | 2014-07-25T14:44+09:00 |
| jvndb-2014-000082 | FuelPHP vulnerable to remote code execution | 2014-07-18T13:50+09:00 | 2014-07-23T11:03+09:00 |
| jvndb-2014-000081 | File Explorer vulnerable to directory traversal | 2014-07-18T13:48+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000080 | Meridian vulnerable to cross-site scripting | 2014-07-18T13:47+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000079 | Multifunctional MailForm Free vulnerable to cross-site scripting | 2014-07-16T15:13+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000078 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:47+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000077 | Cybozu Garoon vulnerable to access restriction bypass | 2014-07-15T14:46+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000076 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:46+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000075 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:45+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000074 | Cybozu Garoon 3 API access restriction bypass vulnerability | 2014-07-15T14:45+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000073 | Cybozu Garoon CGI vulnerable to remote command execution | 2014-07-15T14:44+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000060 | Webmin vulnerable to cross-site scripting | 2014-06-20T13:58+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000059 | Webmin vulnerable to cross-site scripting | 2014-06-20T13:58+09:00 | 2014-07-23T10:59+09:00 |
| jvndb-2014-000058 | Usermin vulnerable to cross-site scripting | 2014-06-20T13:56+09:00 | 2014-07-23T10:59+09:00 |
| jvndb-2014-000072 | Seasar S2Struts vulnerable to ClassLoader manipulation | 2014-07-15T14:44+09:00 | 2014-07-15T14:44+09:00 |
| jvndb-2014-000071 | Becky! Internet Mail vulnerable to buffer overflow | 2014-07-08T14:53+09:00 | 2014-07-10T17:05+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0274 | Multiples vulnérabilités dans MISP | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0273 | Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0272 | Multiples vulnérabilités dans les produits Splunk | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0271 | Vulnérabilité dans Tenable Nessus Agent | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0270 | Multiples vulnérabilités dans les produits Cisco | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0269 | Multiples vulnérabilités dans les produits Moxa | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0268 | Vulnérabilité dans les produits VMware | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0267 | Multiples vulnérabilités dans MongoDB Server | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0266 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0264 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0263 | Multiples vulnérabilités dans HPE Aruba Networking Virtual Intranet Access | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0262 | Multiples vulnérabilités dans les produits Kaspersky | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0261 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0260 | Multiples vulnérabilités dans Zabbix | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0259 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0257 | Vulnérabilité dans Synology Mail Server | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2025-avi-0256 | Multiples vulnérabilités dans Broadcom VMware Tanzu Greenplum | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2025-avi-0255 | Multiples vulnérabilités dans les produits IBM | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0254 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0253 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0252 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0251 | Vulnérabilité dans Mozilla Firefox | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0250 | Multiples vulnérabilités dans StormShield Network Security | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0249 | Vulnérabilité dans StormShield Network Security | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0248 | Multiples vulnérabilités dans GitLab | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0247 | Vulnérabilité dans Microsoft Edge | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0246 | Vulnérabilité dans Mitel MiContact Center Business | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0245 | Multiples vulnérabilités dans les produits Splunk | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0244 | Vulnérabilité dans Exim | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0243 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |