|
cve-2026-110039
|
N/A
|
Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Up…
|
Unknown
|
Smush
|
2026-10-16T06:00:15.049Z |
2026-10-16T14:49:20.298Z |
|
cve-2026-110135
|
N/A
|
OTP Login & Register Woocommerce < 2.7.3 - Unauthentic…
|
Unknown
|
OTP Login & Register Woocommerce
|
2026-10-16T06:00:15.231Z |
2026-10-16T14:49:20.138Z |
|
cve-2026-110179
|
N/A
|
affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via …
|
Unknown
|
affiliate-toolkit
|
2026-10-16T06:00:15.410Z |
2026-10-16T14:49:19.976Z |
|
cve-2026-110191
|
N/A
|
Product Delivery Date for WooCommerce – Lite < 3.3.2 -…
|
Unknown
|
Product Delivery Date for WooCommerce
|
2026-10-16T06:00:15.743Z |
2026-10-16T14:49:19.792Z |
|
cve-2026-109930
|
|
MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclo…
|
Unknown
|
MAIO
|
2026-10-16T11:08:03.380Z |
2026-10-16T14:49:19.618Z |
|
cve-2026-110029
|
|
Squeeze < 1.8.1 - Subscriber+ Missing Authorization vi…
|
Unknown
|
Squeeze
|
2026-10-16T11:08:04.000Z |
2026-10-16T14:49:19.421Z |
|
cve-2026-94135
|
|
Apache Airflow SFTP provider: Async SFTP hook disables…
|
Apache Software Foundation
|
Apache Airflow SFTP provider
|
2026-10-15T21:40:24.810Z |
2026-10-16T14:46:22.385Z |
|
cve-2026-111271
|
6.8 (v4.0)
5.5 (v3.1)
|
libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via…
|
Konstanty Bialkowski
|
libmodplug
|
2026-10-15T21:43:18.348Z |
2026-10-16T14:39:25.166Z |
|
cve-2026-109685
|
7.1 (v3.1)
|
WordPress Link Whisper Free plugin <= 0.9.7 - Cross Si…
|
Link Whisper INC
|
Link Whisper Free
|
2026-10-15T13:00:23.963Z |
2026-10-16T14:39:07.227Z |
|
cve-2026-105065
|
7.1 (v3.1)
|
WordPress XStore theme < 9.7.9 - Cross Site Scripting …
|
8theme.com
|
XStore
|
2026-10-15T17:00:15.222Z |
2026-10-16T14:39:07.063Z |
|
cve-2026-106604
|
6.5 (v3.1)
|
WordPress YITH WooCommerce Compare plugin <= 3.15.0 - …
|
YITH
|
YITH WooCommerce Compare
|
2026-10-15T18:01:28.361Z |
2026-10-16T14:39:06.911Z |
|
cve-2026-93535
|
|
WP Dark Mode – Improve Accessibility with AI Powered D…
|
wppool
|
Dark Mode – Improve Accessibility with AI Powered Dark Theme
|
2026-10-16T03:38:39.317Z |
2026-10-16T14:39:06.770Z |
|
cve-2026-109990
|
|
Flying Scripts: Delay JavaScript to Improve Site Speed…
|
gijo
|
Flying Scripts: Delay JavaScript to Improve Site Speed & Performance
|
2026-10-16T03:38:40.465Z |
2026-10-16T14:39:06.625Z |
|
cve-2026-109207
|
|
RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated S…
|
themeisle
|
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
|
2026-10-16T03:38:42.150Z |
2026-10-16T14:39:06.482Z |
|
cve-2026-107758
|
|
Colibri Page Builder <= 1.0.390 - Unauthenticated Stor…
|
extendthemes
|
Colibri Page Builder
|
2026-10-16T03:38:42.502Z |
2026-10-16T14:39:06.338Z |
|
cve-2026-109512
|
|
Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stor…
|
kitae-park
|
Mang Board
|
2026-10-16T04:26:59.633Z |
2026-10-16T14:39:06.105Z |
|
cve-2026-109998
|
|
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Sit…
|
kitae-park
|
Mang Board
|
2026-10-16T04:27:02.743Z |
2026-10-16T14:39:05.628Z |
|
cve-2026-103481
|
|
Gwolle Guestbook <= 5.1.1 - Reflected Cross-Site Scrip…
|
mpol
|
Gwolle Guestbook
|
2026-10-16T04:27:04.530Z |
2026-10-16T14:39:05.468Z |
|
cve-2026-96570
|
|
Schema & Structured Data for WP & AMP <= 1.67 - Unauth…
|
magazine3
|
Schema & Structured Data for WP & AMP
|
2026-10-16T05:30:18.814Z |
2026-10-16T14:39:05.295Z |
|
cve-2026-100158
|
|
SQL Chart Builder <= 3.0.6 - Authenticated (Subscriber…
|
elvinhaci
|
SQL Chart Builder
|
2026-10-16T05:30:19.302Z |
2026-10-16T14:39:05.141Z |
|
cve-2026-110017
|
|
Quick PayPal Payments: Payment Button & Form <= 6.0.4 …
|
fullworks
|
Quick PayPal Payments: Payment Button & Form
|
2026-10-16T05:30:19.662Z |
2026-10-16T14:39:04.958Z |
|
cve-2026-103999
|
|
Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenti…
|
themefic
|
Ultra Addons for Contact Form 7
|
2026-10-16T05:30:20.027Z |
2026-10-16T14:39:04.802Z |
|
cve-2026-107748
|
|
User Profile Builder <= 4.0.3 - Authenticated (Subscri…
|
cozmoslabs
|
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
|
2026-10-16T05:30:20.376Z |
2026-10-16T14:39:04.655Z |
|
cve-2026-95686
|
|
Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-…
|
optiuser
|
Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights
|
2026-10-16T05:30:21.426Z |
2026-10-16T14:39:04.505Z |
|
cve-2026-95809
|
|
Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-…
|
optiuser
|
Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights
|
2026-10-16T05:30:23.365Z |
2026-10-16T14:39:04.367Z |
|
cve-2026-109232
|
|
Salon Booking System <= 10.31.9 - Unauthenticated Stor…
|
wordpresschef
|
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas
|
2026-10-16T05:30:24.038Z |
2026-10-16T14:39:04.204Z |
|
cve-2026-89051
|
|
Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cr…
|
johndarrel
|
Hide My WP Ghost – Security & Firewall
|
2026-10-16T05:30:25.377Z |
2026-10-16T14:39:04.042Z |
|
cve-2026-111122
|
|
SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-B…
|
gpriday
|
SiteOrigin CSS
|
2026-10-16T05:30:25.740Z |
2026-10-16T14:39:03.885Z |
|
cve-2026-88963
|
|
Tutor LMS <= 4.0.8 - Authenticated (Subscriber+) Refle…
|
themeum
|
Tutor LMS – eLearning and online course solution
|
2026-10-16T05:30:27.816Z |
2026-10-16T14:39:03.737Z |
|
cve-2026-100186
|
|
User Profile Builder <= 4.0.3 - Unauthenticated Stored…
|
cozmoslabs
|
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
|
2026-10-16T05:30:28.153Z |
2026-10-16T14:39:03.586Z |