Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109590 | Travelly <= 2.3.6 - Authenticated (Contributor+) Store… |
magepeopleteam |
Travelly – Tour & Travel Booking Manager for WooCommerce |
2026-10-28T06:45:07.717Z | 2026-10-29T01:41:54.301Z | |
| cve-2026-111068 | DesignSetGo <= 2.11.0 - Authenticated (Contributor+) S… |
justinnealey |
DesignSetGo |
2026-10-28T06:45:08.113Z | 2026-10-29T01:41:54.160Z | |
| cve-2026-109978 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) S… |
cozythemes |
Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox |
2026-10-28T06:45:09.376Z | 2026-10-29T01:41:54.013Z | |
| cve-2026-111372 | AI ChatBot for WooCommerce <= 5.0.0 - Missing Authoriz… |
quantumcloud |
AI ChatBot for WooCommerce – WoowBot |
2026-10-28T06:45:09.788Z | 2026-10-29T01:41:53.869Z | |
| cve-2026-104740 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:10.177Z | 2026-10-29T01:41:53.729Z | |
| cve-2026-109979 | Related Posts for WordPress <= 3.0.0 - Missing Authori… |
barrykooij |
Related Posts for WordPress |
2026-10-28T06:45:10.920Z | 2026-10-29T01:41:53.590Z | |
| cve-2026-110020 | Rich Showcase for Google Reviews <= 7.1.6 - Missing Au… |
widgetpack |
Rich Showcase for Google Reviews |
2026-10-28T06:45:11.326Z | 2026-10-29T01:41:53.443Z | |
| cve-2026-77188 | Waitlist Woocommerce ( Back in stock notifier ) <= 2.9… |
xootix |
Waitlist Woocommerce ( Back in stock notifier ) |
2026-10-28T06:45:11.697Z | 2026-10-29T01:41:53.282Z | |
| cve-2026-109384 | The Innovative Form Builder <= 1.5.1 - Authenticated (… |
melograno |
The Innovative Form Builder – IvyForms |
2026-10-28T06:45:12.110Z | 2026-10-29T01:41:53.142Z | |
| cve-2026-100175 | Postie <= 1.9.87 - Unauthenticated Stored Cross-Site S… |
wayneallen-1 |
Postie |
2026-10-28T06:45:12.519Z | 2026-10-29T01:41:52.993Z | |
| cve-2026-104729 | Avada (Fusion) Builder <= 3.16.2 - Authenticated (Cont… |
themefusion |
Avada (Fusion) Builder |
2026-10-28T06:45:13.360Z | 2026-10-29T01:41:52.852Z | |
| cve-2026-116749 | VikRentCar Car Rental Management System <= 1.4.10 - Au… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:14.677Z | 2026-10-29T01:41:52.709Z | |
| cve-2026-111213 | Travelly <= 2.3.6 - Missing Authorization to Authentic… |
magepeopleteam |
Travelly – Tour & Travel Booking Manager for WooCommerce |
2026-10-28T06:45:15.536Z | 2026-10-29T01:41:52.570Z | |
| cve-2026-111111 | Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-S… |
bdthemes |
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons |
2026-10-28T06:45:15.943Z | 2026-10-29T01:41:52.430Z | |
| cve-2026-110071 | Mang Board <= 2.4.5 - Authenticated (Contributor+) Sto… |
kitae-park |
Mang Board |
2026-10-28T06:45:16.337Z | 2026-10-29T01:41:52.280Z | |
| cve-2026-108366 | easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stor… |
wpdevteam |
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution |
2026-10-28T06:45:16.742Z | 2026-10-29T01:41:52.136Z | |
| cve-2026-116761 | CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scr… |
jtsternberg |
CMB2 |
2026-10-28T06:45:17.138Z | 2026-10-29T01:41:51.992Z | |
| cve-2026-2839 | Advanced Custom Fields: Extended <= 0.9.2.7 - Missing … |
hwk-fr |
Advanced Custom Fields: Extended |
2026-10-28T06:45:17.566Z | 2026-10-29T01:41:51.846Z | |
| cve-2026-109988 | Product Addons for Woocommerce <= 3.1.8 - Authenticate… |
acowebs |
Product Addons for Woocommerce – Product Options with Custom Fields |
2026-10-28T06:45:17.956Z | 2026-10-29T01:41:51.709Z | |
| cve-2026-77871 | Post Snippets <= 4.2.4 - Authenticated (Contributor+) … |
saadiqbal |
Post Snippets – Custom WordPress Code Snippets Customizer |
2026-10-28T06:45:18.731Z | 2026-10-29T01:41:51.567Z | |
| cve-2026-109370 | Document Embedder <= 2.4.0 - Authenticated (Contributo… |
bplugins |
Document Embedder – let visitors read files without downloading |
2026-10-28T06:45:19.156Z | 2026-10-29T01:41:51.425Z | |
| cve-2026-109218 | Contact Manager <= 9.1.2 - Unauthenticated Arbitrary F… |
kleor |
Contact Manager |
2026-10-28T06:45:19.576Z | 2026-10-29T01:41:51.263Z | |
| cve-2026-116750 | VikRentCar Car Rental Management System <= 1.4.10 - Au… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:19.953Z | 2026-10-29T01:41:51.112Z | |
| cve-2026-76780 | BeyondSEO <= 1.3.6 - Missing Authorization to Authenti… |
rankingcoach |
BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility |
2026-10-28T06:45:20.777Z | 2026-10-29T01:41:50.965Z | |
| cve-2026-104743 | Tainacan <= 1.3.0 - Authenticated (Editor+) Path Trave… |
tainacan |
Tainacan |
2026-10-28T06:45:21.148Z | 2026-10-29T01:41:50.825Z | |
| cve-2026-118169 | Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Store… |
wpmudev |
Hustle – Email Marketing, Lead Generation, Optins, Popups |
2026-10-28T06:45:21.540Z | 2026-10-29T01:41:50.681Z | |
| cve-2026-76005 | WP Inventory Manager <= 2.5.5 - Authenticated (Contrib… |
chuck1982 |
WP Inventory Manager |
2026-10-28T06:45:21.929Z | 2026-10-29T01:41:50.537Z | |
| cve-2026-109975 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) S… |
cozythemes |
Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox |
2026-10-28T06:45:22.335Z | 2026-10-29T01:41:50.395Z | |
| cve-2026-92797 | Memberpress <= 1.14.1 - Cross-Site Request Forgery via… |
MemberPress |
Memberpress |
2026-10-28T07:48:28.598Z | 2026-10-29T01:41:50.240Z | |
| cve-2026-101935 | Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site… |
echoplugins |
Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search |
2026-10-28T07:48:29.075Z | 2026-10-29T01:41:50.091Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000066 | SX-2000WG vulnerable to denial-of-service (DoS) | 2014-07-02T15:20+09:00 | 2014-07-07T18:34+09:00 |
| jvndb-2014-000065 | SX-2000WG vulnerable to denial-of-service (DoS) | 2014-07-02T15:16+09:00 | 2014-07-07T18:28+09:00 |
| jvndb-2013-000096 | RockDisk vulnerable to cross-site scripting | 2013-10-29T14:40+09:00 | 2014-07-02T14:36+09:00 |
| jvndb-2014-000063 | Web Kyukincho vulnerable to cross-site scripting | 2014-06-25T14:53+09:00 | 2014-07-01T16:08+09:00 |
| jvndb-2014-000064 | Web Kyukincho vulnerable to cross-site request forgery | 2014-06-25T15:01+09:00 | 2014-07-01T16:07+09:00 |
| jvndb-2014-000061 | Sophos Disk Encryption vulnerable to authentication bypass | 2014-06-24T14:21+09:00 | 2014-06-26T17:46+09:00 |
| jvndb-2014-000062 | Login rebuilder vulnerable to cross-site request forgery | 2014-06-24T14:22+09:00 | 2014-06-24T14:22+09:00 |
| jvndb-2014-000057 | Usermin vulnerable to OS command injection | 2014-06-20T13:56+09:00 | 2014-06-24T13:44+09:00 |
| jvndb-2014-000050 | JR East Japan App for Android. contains an issue where it fails to verify SSL server certificates | 2014-06-18T14:57+09:00 | 2014-06-23T11:06+09:00 |
| jvndb-2014-000049 | 050 plus for Android information management vulnerability | 2014-06-17T14:50+09:00 | 2014-06-23T11:03+09:00 |
| jvndb-2014-000053 | JustSystems Online Update Program bundled with JustSystems products vulnerable to arbitrary code execution | 2014-06-11T12:22+09:00 | 2014-06-17T16:25+09:00 |
| jvndb-2014-000051 | C-BOARD Moyuku vulnerable to cross-site scripting | 2014-06-11T14:22+09:00 | 2014-06-17T16:22+09:00 |
| jvndb-2014-000055 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-06-13T12:44+09:00 | 2014-06-17T16:11+09:00 |
| jvndb-2014-000046 | CN8000 vulnerable to denial-of-service (DoS) | 2014-06-04T14:37+09:00 | 2014-06-06T18:35+09:00 |
| jvndb-2014-000047 | SOY CMS vulnerable to cross-site scripting | 2014-06-04T14:32+09:00 | 2014-06-06T18:34+09:00 |
| jvndb-2012-000079 | Adobe Reader fails to properly handle signatures | 2012-08-30T13:57+09:00 | 2014-05-23T18:34+09:00 |
| jvndb-2007-000772 | Hitachi Web Server SSL Client Authentication Vulnerability | 2008-05-21T00:00+09:00 | 2014-05-23T18:32+09:00 |
| jvndb-2005-000601 | OpenSSL version rollback vulnerability | 2008-05-21T00:00+09:00 | 2014-05-22T18:04+09:00 |
| jvndb-2006-000992 | Multiple Vulnerabilities Concerning Hitachi Web Server | 2009-02-04T17:42+09:00 | 2014-05-22T18:03+09:00 |
| jvndb-2005-000727 | mod_imap cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2014-05-22T18:03+09:00 |
| jvndb-2007-000773 | Hitachi Web Server Cross-Site Scripting Vulnerability with Server-Status Page | 2008-05-21T00:00+09:00 | 2014-05-21T18:27+09:00 |
| jvndb-2009-001740 | Hitachi Web Server Reverse Proxy Denial of Service (DoS) Vulnerability | 2009-07-14T10:17+09:00 | 2014-05-21T18:24+09:00 |
| jvndb-2011-001633 | Header Customization by Hitachi Web Server RequetHeader Directive Could Allow Attacker to Access Data Deleted from Memory | 2011-06-29T17:54+09:00 | 2014-05-21T18:21+09:00 |
| jvndb-2008-001513 | Cross-Site Scripting Vulnerability in Hitachi Web Server Status Information Display Function | 2008-07-30T13:45+09:00 | 2014-05-21T18:19+09:00 |
| jvndb-2009-001741 | Hitachi Web Server Vulnerability in SSL Client Authentication | 2009-07-14T10:17+09:00 | 2014-05-21T18:16+09:00 |
| jvndb-2011-000053 | Android vulnerability where an incorrect SSL certificate is displayed | 2011-07-29T14:26+09:00 | 2014-05-19T17:19+09:00 |
| jvndb-2014-000042 | Cybozu Garoon Phone Messages vulnerable to denial-of-service (DoS) | 2014-04-30T15:14+09:00 | 2014-05-14T10:50+09:00 |
| jvndb-2014-000044 | intra-mart vulnerable to open redirect | 2014-05-08T12:46+09:00 | 2014-05-12T17:45+09:00 |
| jvndb-2014-000043 | Cybozu Garoon API access restriction bypass vulnerability | 2014-04-30T15:08+09:00 | 2014-05-08T18:06+09:00 |
| jvndb-2014-000040 | Cybozu Remote Service Manager vulnerable to session fixation | 2014-04-18T13:35+09:00 | 2014-04-28T18:14+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0242 | Multiples vulnérabilités dans Moodle | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0241 | Vulnérabilité dans Google Chrome | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0240 | Vulnérabilité dans les produits VMware | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0239 | Multiples vulnérabilités dans Microsoft Azure Kubernetes Service | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| certfr-2025-avi-0238 | Multiples vulnérabilités dans Laravel | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| certfr-2025-avi-0237 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| certfr-2025-avi-0236 | Vulnérabilité dans Qnap NAKIVO Backup & Replication | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| certfr-2025-avi-0235 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0234 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0233 | Multiples vulnérabilités dans les produits IBM | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0232 | Vulnérabilité dans Liferay | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0231 | Vulnérabilité dans Microsoft Office | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0230 | Vulnérabilité dans Tenable Nessus Agent | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0229 | Vulnérabilité dans Veeam Backup & Replication | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0228 | Multiples vulnérabilités dans Spring Security | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0227 | Vulnérabilité dans Liferay | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0226 | Vulnérabilité dans Google Chrome | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0225 | Vulnérabilité dans Drupal | 2025-03-20T00:00:00.000000 | 2025-03-20T00:00:00.000000 |
| certfr-2025-avi-0224 | Multiples vulnérabilités dans les produits Synology | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0223 | Multiples vulnérabilités dans Suricata | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0222 | Vulnérabilité dans MongoDB C Driver | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0221 | Multiples vulnérabilités dans HPE Aruba Networking AOS-CX | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0219 | Multiples vulnérabilités dans GLPI | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0218 | Multiples vulnérabilités dans Atlassian Jira | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0216 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| certfr-2025-avi-0215 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| certfr-2025-avi-0214 | Multiples vulnérabilités dans les produits IBM | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0213 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0212 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0211 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |