|
cve-2026-66574
|
6.5 (v3.1)
|
WordPress Element Pack Elementor Addons plugin <= 8.8.…
|
bdthemes
|
Element Pack Elementor Addons
|
2026-09-17T13:24:40.352Z |
2026-09-19T02:21:38.543Z |
|
cve-2026-66573
|
6.5 (v3.1)
|
WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scrip…
|
Crocoblock. Jetimpex Inc.
|
JetTabs
|
2026-09-17T13:24:39.688Z |
2026-09-17T14:04:42.971Z |
|
cve-2026-66572
|
6.5 (v3.1)
|
WordPress JetBlog plugin <= 2.4.10 - Cross Site Script…
|
Crocoblock. Jetimpex Inc.
|
JetBlog
|
2026-09-17T13:24:39.046Z |
2026-09-19T14:21:54.344Z |
|
cve-2026-66571
|
7.1 (v3.1)
|
WordPress Asset CleanUp: Page Speed Booster plugin <= …
|
Gabe Livan
|
Asset CleanUp: Page Speed Booster
|
2026-09-17T13:24:38.306Z |
2026-09-17T14:41:12.773Z |
|
cve-2026-62108
|
9.8 (v3.1)
|
WordPress Headless Single Sign On plugin <= 1.7.0 - Br…
|
miniOrange
|
Headless Single Sign On
|
2026-09-17T13:24:37.654Z |
2026-09-17T19:22:16.573Z |
|
cve-2026-62104
|
10 (v3.1)
|
WordPress Migratico Lite plugin <= 2.6.8 - Remote Code…
|
superweby
|
Migratico Lite
|
2026-09-17T13:24:37.003Z |
2026-09-19T02:18:44.706Z |
|
cve-2026-62101
|
9.8 (v3.1)
|
WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Au…
|
Chris Åkerfeldt Wendel
|
EduAdmin Booking
|
2026-09-17T13:24:36.362Z |
2026-09-17T14:04:06.181Z |
|
cve-2026-90986
|
7.1 (v3.1)
|
WordPress Visitor Traffic Real Time Statistics Pro plu…
|
CODEPRESS IT Solutions LLC
|
Visitor Traffic Real Time Statistics Pro
|
2026-09-17T13:24:35.727Z |
2026-09-17T14:42:47.713Z |
|
cve-2026-85500
|
9.1 (v4.0)
|
`require_confirmed_with` is not enforced on the action…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:43.000Z |
2026-09-17T18:12:54.127Z |
|
cve-2026-86533
|
9.1 (v4.0)
|
Revoked session accepted because the session jti is ne…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:37.963Z |
2026-09-17T18:17:21.199Z |
|
cve-2026-81632
|
7.2 (v4.0)
|
Single-use sign-in token placed in a redirect query st…
|
team-alembic
|
ash_authentication_phoenix
|
2026-09-17T13:09:31.601Z |
2026-09-17T18:29:20.271Z |
|
cve-2026-80218
|
7.6 (v4.0)
|
Sign-in token minted for one resource accepted by anot…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:25.585Z |
2026-09-17T18:28:47.571Z |
|
cve-2026-78223
|
6.9 (v4.0)
|
Token revocation record built from unverified JWT clai…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:19.591Z |
2026-09-17T18:28:20.821Z |
|
cve-2026-86522
|
6.3 (v4.0)
|
Log injection via an unescaped password reset identity…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:11.572Z |
2026-09-17T18:27:51.681Z |
|
cve-2026-81637
|
2.3 (v4.0)
|
Replayable OAuth2 CSRF state retained after a failed c…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:06.571Z |
2026-09-17T18:26:58.389Z |
|
cve-2026-82761
|
9.1 (v4.0)
|
Magic link single-use tokens replayable via TOCTOU rac…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:09:01.534Z |
2026-09-17T18:26:08.563Z |
|
cve-2026-82685
|
7.6 (v4.0)
|
Confirmation token accepted on any record in AshAuthen…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:56.491Z |
2026-09-17T18:23:51.075Z |
|
cve-2026-82760
|
8.2 (v4.0)
|
Superlinear base62 decoding exhausts CPU and memory in…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:46.382Z |
2026-09-17T18:21:26.238Z |
|
cve-2026-82759
|
1.8 (v4.0)
|
Reversible IP address pseudonymisation in AshAuthentic…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:21.929Z |
2026-09-17T18:19:18.209Z |
|
cve-2026-82723
|
1.8 (v4.0)
|
Actor record with password digest stored in AshAuthent…
|
team-alembic
|
ash_authentication
|
2026-09-17T13:08:05.355Z |
2026-09-24T20:47:32.536Z |
|
cve-2026-92904
|
4.3 (v3.1)
|
Rubygem-foreman_remote_execution: job output readable …
|
Red Hat
|
Red Hat Satellite 6
|
2026-09-17T12:42:57.041Z |
2026-09-17T14:47:25.790Z |
|
cve-2026-92932
|
5.1 (v4.0)
|
MISP sachertortephp Xml::build() Operator Precedence B…
|
misp
|
sachertortephp
|
2026-09-17T12:33:44.852Z |
2026-09-17T18:30:42.720Z |
|
cve-2026-92921
|
4.9 (v3.1)
6.9 (v4.0)
|
admin3 through 3.0.0 Weak Password Hashing via Single-…
|
cjbi
|
admin3
|
2026-09-17T12:33:25.228Z |
2026-09-24T14:22:58.598Z |
|
cve-2026-92920
|
5.4 (v3.1)
5.3 (v4.0)
|
admin3 through 3.0.0 Session Not Invalidated When a Us…
|
cjbi
|
admin3
|
2026-09-17T12:33:24.541Z |
2026-09-24T14:22:57.685Z |
|
cve-2026-92919
|
8.1 (v3.1)
7.2 (v4.0)
|
admin3 through 3.0.0 Arbitrary File Write via Path Tra…
|
cjbi
|
admin3
|
2026-09-17T12:33:23.853Z |
2026-09-24T14:22:56.749Z |
|
cve-2026-92918
|
8.8 (v3.1)
8.7 (v4.0)
|
admin3 through 3.0.0 Session Token Disclosure via Audit Log
|
cjbi
|
admin3
|
2026-09-17T12:33:23.125Z |
2026-09-24T14:22:55.629Z |
|
cve-2026-81481
|
7.5 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T12:14:52.062Z |
2026-09-17T19:22:38.939Z |
|
cve-2026-81480
|
7.2 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T12:05:20.810Z |
2026-09-18T03:55:39.068Z |
|
cve-2026-92860
|
|
rcourtman Pulse Quick Security Setup quick-setup fmt.S…
|
rcourtman
|
Pulse
|
2026-09-17T12:00:15.798Z |
2026-09-19T02:17:54.387Z |
|
cve-2026-90823
|
9.8 (v3.1)
|
FatPipe MPVPN, WARP, and IPVPN appliances running…
|
FatPipe Networks
|
MPVPN
|
2026-09-17T11:57:54.936Z |
2026-09-17T14:10:27.493Z |