Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-87081 N/A Net::IDN::UTS46 versions before 2.590 for Perl allow C…

2026-09-22T07:25:22.090Z 2026-09-22T17:07:31.325Z
cve-2026-87080 N/A Net::IDN::Punycode::PP versions before 2.590 for Perl …

2026-09-22T07:25:03.236Z 2026-09-22T17:07:30.035Z
cve-2026-87079 N/A Net::IDN::Punycode versions before 2.590 for Perl allo…

2026-09-22T07:24:47.784Z 2026-09-22T17:07:28.687Z
cve-2026-87078 N/A Net::IDN::Punycode versions from 2.302 before 2.590 fo…

2026-09-22T07:19:33.195Z 2026-09-22T17:07:27.357Z
cve-2026-74766 N/A Net::IDN::Punycode versions from 2.301 before 2.590 fo…

2026-09-22T07:19:09.359Z 2026-09-22T12:41:52.010Z
cve-2026-74765 N/A Net::IDN::Punycode versions before 2.590 for Perl allo…

2026-09-22T07:18:46.087Z 2026-09-22T17:07:26.038Z
cve-2016-15059 N/A Net::IDN::Punycode versions before 2.301 for Perl allo…

2026-09-22T07:18:19.518Z 2026-09-22T17:07:23.412Z
cve-2026-91827 Ninja Forms 3.15.3 - Unauthenticated PHP Object Inject… Unknown
Ninja Forms
2026-09-22T06:58:01.461Z 2026-09-22T10:05:56.864Z
cve-2026-92438 Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Pa… Unknown
Ninja Forms
2026-09-22T06:58:00.819Z 2026-09-22T10:06:03.491Z
cve-2026-94504 Ninja Forms – The Contact Form Builder That Grows With… kstover
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder
2026-09-22T06:39:41.379Z 2026-09-22T14:13:49.472Z
cve-2026-89412 TranslatePress <= 3.3.5 - Unauthenticated Stored Cross… cozmoslabs
TranslatePress – Translate Multilingual sites with AI Translation
2026-09-22T06:39:40.880Z 2026-09-23T18:46:53.988Z
cve-2026-88788 N/A Text Styler <= 1.1.1 - Contributor+ Stored XSS Unknown
Text Styler
2026-09-22T06:00:15.529Z 2026-09-22T10:06:13.406Z
cve-2026-93655 Booking Calendar <= 11.8.3 - Reflected Cross-Site Scri… wpdevelop
Booking Calendar
2026-09-22T05:30:43.607Z 2026-09-22T12:44:10.086Z
cve-2026-12470 CMP <= 4.1.17 - Authenticated (Editor+) Privilege Esca… niteo
CMP – Coming Soon & Maintenance Plugin by NiteoThemes
2026-09-22T05:30:43.263Z 2026-09-22T13:23:05.752Z
cve-2026-85653 Contextual Related Posts <= 4.4.1 - Authenticated (Aut… ajay
Contextual Related Posts
2026-09-22T05:30:42.725Z 2026-09-22T15:38:16.401Z
cve-2026-19658 Give Tributes <= 2.3.1 - Unauthenticated PHP Object In… LiquidWeb
Give Tributes
2026-09-22T04:27:38.713Z 2026-09-22T10:25:33.429Z
cve-2026-13355 Meta Box AIO <= 3.11.0 And Standalone Plugin Extension… Meta Box
Meta Box Frontend Submission
2026-09-22T04:27:37.491Z 2026-09-22T10:25:33.585Z
cve-2026-94493 Gigatech PDV5701 WebSocket Service index.html missing … Gigatech
PDV5701
2026-09-22T01:00:18.544Z 2026-09-24T22:55:54.918Z
cve-2026-93712 N/A Dancer2 versions from 2.1.0 before 2.2.0 for Perl serv…

2026-09-22T00:52:36.047Z 2026-09-22T19:19:59.077Z
cve-2026-93711 N/A Dancer2 versions before 2.2.0 for Perl do not strip CR…

2026-09-22T00:52:11.643Z 2026-09-22T19:22:25.244Z
cve-2026-93710 N/A Dancer2 versions from 2.0.0 before 2.2.0 for Perl disp…

2026-09-22T00:51:37.356Z 2026-09-22T19:25:34.768Z
cve-2026-93709 N/A Dancer2 versions before 2.2.0 for Perl serve a layout …

2026-09-22T00:50:45.117Z 2026-09-23T19:45:35.340Z
cve-2026-94492 Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection Yonyou
U8cloud
2026-09-22T00:30:14.854Z 2026-09-22T12:45:31.289Z
cve-2026-76974 5.3 (v3.1) Information Disclosure vulnerability in SAP Fiori Launchpad SAP_SE
SAP Fiori Launchpad
2026-09-22T00:28:40.930Z 2026-09-22T10:25:33.735Z
cve-2026-94491 Yonyou KSOA search_list.jsp sql injection Yonyou
KSOA
2026-09-22T00:15:12.972Z 2026-09-22T18:11:14.685Z
cve-2026-94490 N/A {'providerMetadata': {'orgId': '1af790b2-7ee1-4545-860a-a788eba489b5', 'shortName': 'VulDB', 'dateUpdated': '2026-10-13T15:01:06.206Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: In the versions that have this feature, they are an admin-gated, admin-defined, by-design shell-command feature that is not an exploitable injection.'}], 'x_generator': ['VulDB PVTS v202610']} N/A N/A 2026-09-22T00:00:15.361Z 2026-10-13T15:01:06.206Z
cve-2026-88624 N/A Missing path validation in the Worktree.remove co… n/a
n/a
2026-09-22T00:00:00.000Z 2026-09-23T14:52:43.416Z
cve-2026-88419 N/A An unrestricted upload of files with a dangerous … n/a
n/a
2026-09-22T00:00:00.000Z 2026-09-22T19:43:01.271Z
cve-2026-88418 N/A CMSimple 5.24 ships with CSRF protection disabled… n/a
n/a
2026-09-22T00:00:00.000Z 2026-09-25T23:25:58.203Z
cve-2026-88416 N/A MCMS 6.1.1 through 6.2.1 has a SQL injection vuln… n/a
n/a
2026-09-22T00:00:00.000Z 2026-10-06T17:43:09.712Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description