|
cve-2026-66619
|
7.6 (v3.1)
|
WordPress Newsletters plugin <= 4.18 - SQL Injection v…
|
Tribulant Software
|
Newsletters
|
2026-09-17T13:24:47.029Z |
2026-09-19T02:22:48.512Z |
|
cve-2026-66618
|
7.6 (v3.1)
|
WordPress WP Maps plugin <= 4.9.9 - SQL Injection vuln…
|
Flipper Code
|
WP Maps
|
2026-09-17T13:24:46.386Z |
2026-09-17T14:05:51.372Z |
|
cve-2026-66617
|
6.5 (v3.1)
|
WordPress PublishPress Series plugin <= 3.1.3 - Cross …
|
PublishPress
|
PublishPress Series
|
2026-09-17T13:24:45.744Z |
2026-09-19T14:21:54.044Z |
|
cve-2026-66608
|
6.4 (v3.1)
|
WordPress Unlimited Elements For Elementor (Free Widge…
|
Unlimited Elements
|
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
|
2026-09-17T13:24:45.051Z |
2026-09-17T14:33:50.066Z |
|
cve-2026-66580
|
8.5 (v3.1)
|
WordPress Product Feed Manager plugin <= 7.12.0 - SQL …
|
RexTheme
|
Product Feed Manager
|
2026-09-17T13:24:44.347Z |
2026-09-17T19:21:55.178Z |
|
cve-2026-66579
|
6.5 (v3.1)
|
WordPress JetElements For Elementor plugin <= 2.9.2.1 …
|
Crocoblock. Jetimpex Inc.
|
JetElements For Elementor
|
2026-09-17T13:24:43.688Z |
2026-09-19T02:22:13.087Z |
|
cve-2026-66578
|
6.5 (v3.1)
|
WordPress PropertyHive plugin <= 2.2.6 - Cross Site Sc…
|
Property Hive
|
PropertyHive
|
2026-09-17T13:24:43.035Z |
2026-09-17T14:05:02.237Z |
|
cve-2026-66577
|
6.5 (v3.1)
|
WordPress JetSearch plugin <= 3.6.3 - Cross Site Scrip…
|
Crocoblock. Jetimpex Inc.
|
JetSearch
|
2026-09-17T13:24:42.357Z |
2026-09-19T14:21:54.197Z |
|
cve-2026-66576
|
6.5 (v3.1)
|
WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cr…
|
Crocoblock. Jetimpex Inc.
|
JetBlocks For Elementor
|
2026-09-17T13:24:41.678Z |
2026-09-17T14:39:34.318Z |
|
cve-2026-66575
|
5.3 (v3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.81 …
|
KingAddons.com
|
King Addons for Elementor
|
2026-09-17T13:24:41.005Z |
2026-09-17T19:22:10.042Z |
|
cve-2026-66574
|
6.5 (v3.1)
|
WordPress Element Pack Elementor Addons plugin <= 8.8.…
|
bdthemes
|
Element Pack Elementor Addons
|
2026-09-17T13:24:40.352Z |
2026-09-19T02:21:38.543Z |
|
cve-2026-66573
|
6.5 (v3.1)
|
WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scrip…
|
Crocoblock. Jetimpex Inc.
|
JetTabs
|
2026-09-17T13:24:39.688Z |
2026-09-17T14:04:42.971Z |
|
cve-2026-66572
|
6.5 (v3.1)
|
WordPress JetBlog plugin <= 2.4.10 - Cross Site Script…
|
Crocoblock. Jetimpex Inc.
|
JetBlog
|
2026-09-17T13:24:39.046Z |
2026-09-19T14:21:54.344Z |
|
cve-2026-66571
|
7.1 (v3.1)
|
WordPress Asset CleanUp: Page Speed Booster plugin <= …
|
Gabe Livan
|
Asset CleanUp: Page Speed Booster
|
2026-09-17T13:24:38.306Z |
2026-09-17T14:41:12.773Z |
|
cve-2026-62108
|
9.8 (v3.1)
|
WordPress Headless Single Sign On plugin <= 1.7.0 - Br…
|
miniOrange
|
Headless Single Sign On
|
2026-09-17T13:24:37.654Z |
2026-09-17T19:22:16.573Z |
|
cve-2026-62104
|
10 (v3.1)
|
WordPress Migratico Lite plugin <= 2.6.8 - Remote Code…
|
superweby
|
Migratico Lite
|
2026-09-17T13:24:37.003Z |
2026-09-19T02:18:44.706Z |
|
cve-2026-62101
|
9.8 (v3.1)
|
WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Au…
|
Chris Åkerfeldt Wendel
|
EduAdmin Booking
|
2026-09-17T13:24:36.362Z |
2026-09-17T14:04:06.181Z |
|
cve-2026-90986
|
7.1 (v3.1)
|
WordPress Visitor Traffic Real Time Statistics Pro plu…
|
CODEPRESS IT Solutions LLC
|
Visitor Traffic Real Time Statistics Pro
|
2026-09-17T13:24:35.727Z |
2026-09-17T14:42:47.713Z |
|
cve-2026-85500
|
9.1 (v4.0)
|
`require_confirmed_with` is not enforced on the action…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:43.000Z |
2026-09-17T18:12:54.127Z |
|
cve-2026-86533
|
9.1 (v4.0)
|
Revoked session accepted because the session jti is ne…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:37.963Z |
2026-09-17T18:17:21.199Z |
|
cve-2026-81632
|
7.2 (v4.0)
|
Single-use sign-in token placed in a redirect query st…
|
team-alembic
|
ash_authentication_phoenix
|
2026-09-17T13:09:31.601Z |
2026-09-17T18:29:20.271Z |
|
cve-2026-80218
|
7.6 (v4.0)
|
Sign-in token minted for one resource accepted by anot…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:25.585Z |
2026-09-17T18:28:47.571Z |
|
cve-2026-78223
|
6.9 (v4.0)
|
Token revocation record built from unverified JWT clai…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:19.591Z |
2026-09-17T18:28:20.821Z |
|
cve-2026-86522
|
6.3 (v4.0)
|
Log injection via an unescaped password reset identity…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:11.572Z |
2026-09-17T18:27:51.681Z |
|
cve-2026-81637
|
2.3 (v4.0)
|
Replayable OAuth2 CSRF state retained after a failed c…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:06.571Z |
2026-09-17T18:26:58.389Z |
|
cve-2026-82761
|
9.1 (v4.0)
|
Magic link single-use tokens replayable via TOCTOU rac…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:01.534Z |
2026-09-17T18:26:08.563Z |
|
cve-2026-82685
|
7.6 (v4.0)
|
Confirmation token accepted on any record in AshAuthen…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:56.491Z |
2026-09-17T18:23:51.075Z |
|
cve-2026-82760
|
8.2 (v4.0)
|
Superlinear base62 decoding exhausts CPU and memory in…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:46.382Z |
2026-09-17T18:21:26.238Z |
|
cve-2026-82759
|
1.8 (v4.0)
|
Reversible IP address pseudonymisation in AshAuthentic…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:21.929Z |
2026-09-17T18:19:18.209Z |
|
cve-2026-82723
|
1.8 (v4.0)
|
Actor record with password digest stored in AshAuthent…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:05.355Z |
2026-09-24T20:47:32.536Z |