Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-92554 ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting v… devitemsllc
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
2026-09-18T07:39:59.000Z 2026-09-19T14:21:52.320Z
cve-2026-17586 VK All in One Expansion Unit <= 9.118.0 - Authenticate… kurudrive
VK All in One Expansion Unit
2026-09-18T07:39:58.497Z 2026-09-18T14:42:33.350Z
cve-2026-93494 7.5 (v3.1) Io.netty/netty-codec-stomp: netty: bytebuf leak in sto… Red Hat
Red Hat build of Apache Camel for Spring Boot 4
2026-09-18T07:39:17.069Z 2026-09-25T08:02:02.576Z
cve-2026-89058 7.4 (v3.1) Resteasy-core: resteasy: corsfilter reflects arbitrary… Red Hat

2026-09-18T07:20:29.162Z 2026-11-09T01:47:30.054Z
cve-2026-89059 7.5 (v3.1) Resteasy-core: resteasy: iioimageprovider unbounded im… Red Hat

2026-09-18T07:13:39.763Z 2026-11-09T01:47:30.044Z
cve-2024-38639 4.8 (v3.1) QTS QNAP Systems Inc.
QTS
2026-09-18T06:51:06.187Z 2026-09-18T14:31:44.689Z
cve-2024-27123 5.2 (v4.0) QcalAgent QNAP Systems Inc.
QcalAgent
2026-09-18T06:49:37.920Z 2026-09-18T14:31:44.541Z
cve-2026-92561 Booking Calendar <= 11.8.2 - Reflected Cross-Site Scri… wpdevelop
Booking Calendar
2026-09-18T06:38:56.753Z 2026-09-18T14:31:43.589Z
cve-2026-89330 EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting v… wpdevteam
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
2026-09-18T06:38:56.396Z 2026-09-18T11:35:19.335Z
cve-2026-89278 GPTranslate <= 2.34.6 - Unauthenticated Sensitive Info… john-dagelmore
GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI
2026-09-18T06:38:56.059Z 2026-09-18T14:31:43.944Z
cve-2026-84909 Custom Twitter Feeds <= 2.8.0 - Authenticated (Contrib… smub
Custom Twitter Feeds – A Tweets Widget or X Feed Widget
2026-09-18T06:38:55.694Z 2026-09-18T14:31:44.098Z
cve-2026-12106 Auto Upload Images <= 3.3.2 - Authenticated (Contribut… airani
Auto Upload Images
2026-09-18T06:38:55.343Z 2026-09-18T14:31:43.772Z
cve-2026-92619 Booking Calendar <= 11.8.2 - Authenticated (Editor+) P… wpdevelop
Booking Calendar
2026-09-18T06:38:54.974Z 2026-09-18T18:32:21.018Z
cve-2026-75017 Magazine Blocks <= 1.8.6 - Missing Authorization to Au… wpblockart
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid
2026-09-18T06:38:54.045Z 2026-09-18T14:31:44.242Z
cve-2026-91707 Divi <= 5.11.1 - Missing Authorization to Unauthentica… Elegant Themes
Divi
2026-09-18T06:38:53.658Z 2026-09-18T14:31:43.410Z
cve-2026-89138 Filter Gallery <= 1.1.4 - Missing Authorization to Aut… farazfrank
Filter Gallery
2026-09-18T06:38:53.296Z 2026-09-18T14:31:43.226Z
cve-2026-92714 Download Manager <= 3.3.68 - Insecure Direct Object Re… codename065
Download Manager
2026-09-18T06:38:52.943Z 2026-09-18T11:37:21.876Z
cve-2026-75016 Magazine Blocks <= 1.8.6 - Authenticated (Contributor+… wpblockart
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid
2026-09-18T06:38:52.584Z 2026-09-18T12:38:16.427Z
cve-2026-18317 Foxtool All-in-One: Contact chat button, Custom login,… foxtheme
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images
2026-09-18T06:38:52.219Z 2026-09-18T14:42:42.583Z
cve-2026-17576 InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) S… revmakx
InfiniteWP Client
2026-09-18T06:38:51.870Z 2026-09-18T14:31:43.041Z
cve-2026-89413 Filter Gallery <= 1.1.4 - Missing Authorization to Aut… farazfrank
Filter Gallery
2026-09-18T06:38:51.386Z 2026-09-18T14:31:44.393Z
cve-2026-90977 Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass vi… Unknown
Clean Login
2026-09-18T06:11:40.229Z 2026-09-18T10:59:55.405Z
cve-2026-90976 Clean Login < 1.19 - Unauthenticated Account Creation … Unknown
Clean Login
2026-09-18T06:11:39.561Z 2026-09-18T10:59:55.567Z
cve-2026-88994 All Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LF… Unknown
All Bootstrap Blocks
2026-09-18T06:11:38.882Z 2026-09-18T10:59:55.738Z
cve-2026-86800 WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated… Unknown
Hide My WP Ghost
2026-09-18T06:11:38.193Z 2026-09-18T10:59:55.898Z
cve-2026-86796 WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated F… Unknown
Hide My WP Ghost
2026-09-18T06:11:37.505Z 2026-09-18T10:59:56.068Z
cve-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Po… Unknown
Breeze Cache
2026-09-18T06:11:36.838Z 2026-09-18T10:59:56.236Z
cve-2026-90984 N/A Generate PDF using Contact Form 7 < 4.2.2 - Unauthenti… Unknown
Generate PDF using Contact Form 7
2026-09-18T06:00:17.762Z 2026-09-18T11:07:30.667Z
cve-2026-90978 N/A Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Ov… Unknown
Filter Gallery
2026-09-18T06:00:17.588Z 2026-09-18T11:07:45.179Z
cve-2026-89008 N/A Bookit < 2.6.0.5 - Bookit Staff+ Appointment PII Disclosure Unknown
Bookit — Booking & Appointment Calendar
2026-09-18T06:00:16.893Z 2026-09-18T11:07:59.693Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description