|
cve-2026-89051
|
|
Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cr…
|
johndarrel
|
Hide My WP Ghost – Security & Firewall
|
2026-10-16T05:30:25.377Z |
2026-10-16T14:39:04.042Z |
|
cve-2026-111122
|
|
SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-B…
|
gpriday
|
SiteOrigin CSS
|
2026-10-16T05:30:25.740Z |
2026-10-16T14:39:03.885Z |
|
cve-2026-88963
|
|
Tutor LMS <= 4.0.8 - Authenticated (Subscriber+) Refle…
|
themeum
|
Tutor LMS – eLearning and online course solution
|
2026-10-16T05:30:27.816Z |
2026-10-16T14:39:03.737Z |
|
cve-2026-100186
|
|
User Profile Builder <= 4.0.3 - Unauthenticated Stored…
|
cozmoslabs
|
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
|
2026-10-16T05:30:28.153Z |
2026-10-16T14:39:03.586Z |
|
cve-2026-110664
|
|
Premium Packages <= 7.2.8 - Authenticated (Subscriber+…
|
codename065
|
Premium Packages – Sell Digital Products Securely
|
2026-10-16T06:41:00.954Z |
2026-10-16T14:39:03.424Z |
|
cve-2026-111069
|
|
GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) …
|
paoltaia
|
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
|
2026-10-16T06:41:02.462Z |
2026-10-16T14:39:03.255Z |
|
cve-2026-110290
|
|
WebberZone Top 10 <= 4.5.2 - Authenticated (Contributo…
|
ajay
|
WebberZone Top 10 — Popular Posts
|
2026-10-16T06:41:03.815Z |
2026-10-16T14:39:03.035Z |
|
cve-2026-109388
|
|
HivePress <= 1.7.32 - Authenticated (Subscriber+) Stor…
|
hivepress
|
HivePress – Business Directory, Listings & Classified Ads Plugin
|
2026-10-16T06:41:04.192Z |
2026-10-16T14:39:02.831Z |
|
cve-2026-107768
|
|
TranslatePress <= 3.3.7 - Unauthenticated Stored Cross…
|
cozmoslabs
|
TranslatePress – Translate Multilingual sites with AI Translation
|
2026-10-16T06:41:04.583Z |
2026-10-16T14:39:02.658Z |
|
cve-2026-109193
|
|
HivePress <= 1.7.32 - Unauthenticated Stored Cross-Sit…
|
hivepress
|
HivePress – Business Directory, Listings & Classified Ads Plugin
|
2026-10-16T06:41:06.532Z |
2026-10-16T14:39:02.457Z |
|
cve-2026-110252
|
|
WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated St…
|
etruel
|
WPeMatico RSS Feed Fetcher
|
2026-10-16T06:41:06.918Z |
2026-10-16T14:39:02.268Z |
|
cve-2026-97640
|
|
WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site…
|
smub
|
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)
|
2026-10-16T06:41:07.314Z |
2026-10-16T14:39:02.103Z |
|
cve-2026-87111
|
|
User Registration PRO <= 6.2.9 - Unauthenticated Store…
|
WPEverest
|
User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin
|
2026-10-16T07:44:01.961Z |
2026-10-16T14:39:01.949Z |
|
cve-2026-100108
|
|
Social Share Buttons <= 1.30 - Authenticated (Subscrib…
|
maxfoundry
|
Social Share Buttons
|
2026-10-16T07:44:03.268Z |
2026-10-16T14:39:01.800Z |
|
cve-2026-93681
|
|
Tutor LMS <= 4.1.0 - Authenticated (Subscriber+) Store…
|
themeum
|
Tutor LMS – eLearning and online course solution
|
2026-10-16T08:27:41.284Z |
2026-10-16T14:39:01.644Z |
|
cve-2026-109224
|
|
SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site …
|
surecart
|
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
|
2026-10-16T08:27:42.175Z |
2026-10-16T14:39:01.492Z |
|
cve-2026-104726
|
|
Name Directory <= 1.34.2 - Authenticated (Contributor+…
|
jeroenpeters1986
|
Name Directory
|
2026-10-16T08:27:42.514Z |
2026-10-16T14:39:01.336Z |
|
cve-2026-96768
|
|
GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Sit…
|
softaculous
|
GoSMTP Pro
|
2026-10-16T09:26:36.859Z |
2026-10-16T14:39:01.181Z |
|
cve-2026-107649
|
|
Events Made Easy <= 3.2.22 - Unauthenticated Stored Cr…
|
liedekef
|
Events Made Easy
|
2026-10-16T09:26:38.264Z |
2026-10-16T14:39:01.019Z |
|
cve-2026-107648
|
|
WP Sessions Time Monitoring Full Automatic <= 1.1.5 - …
|
switcorp
|
WP Sessions Time Monitoring Full Automatic
|
2026-10-16T11:28:51.492Z |
2026-10-16T14:39:00.868Z |
|
cve-2026-110903
|
6.5 (v3.1)
|
WordPress The Events Calendar plugin <= 6.18.1 - Cross…
|
Liquid Web / StellarWP
|
The Events Calendar
|
2026-10-16T12:51:28.928Z |
2026-10-16T14:39:00.735Z |
|
cve-2026-97470
|
|
Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored …
|
themefic
|
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
|
2026-10-16T13:28:15.060Z |
2026-10-16T14:39:00.593Z |
|
cve-2026-111277
|
8.7 (v4.0)
7.5 (v3.1)
|
NivoCart through 2.5.1 Guest Order Invoice Disclosure …
|
nivocart
|
nivocart
|
2026-10-15T21:43:22.473Z |
2026-10-16T14:36:04.161Z |
|
cve-2026-107918
|
4.3 (v4.0)
4.5 (v3.1)
|
Insufficient input validation vulnerability in NETGEAR R7300
|
NETGEAR
|
R7300DST
|
2026-10-13T14:50:33.244Z |
2026-10-16T14:31:46.667Z |
|
cve-2026-111320
|
6.9 (v4.0)
6.5 (v3.1)
|
ValueCell through 0.1.20 Unauthenticated SSRF via /api…
|
ValueCell-ai
|
ValueCell
|
2026-10-15T21:43:29.519Z |
2026-10-16T14:31:07.040Z |
|
cve-2026-107764
|
|
SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-B…
|
gpriday
|
SiteOrigin CSS
|
2026-10-16T05:30:26.095Z |
2026-10-16T14:30:23.414Z |
|
cve-2026-49950
|
9.3 (v4.0)
9.8 (v3.1)
|
Xorbits Xoscar 0.11.2 Unauthenticated Deserialization …
|
xorbitsai
|
xoscar
|
2026-10-13T20:20:36.251Z |
2026-10-16T14:30:16.304Z |
|
cve-2026-109513
|
|
NotificationX <= 3.3.3 - Unauthenticated Stored Cross-…
|
wpdevteam
|
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
|
2026-10-16T05:30:26.784Z |
2026-10-16T14:29:18.061Z |
|
cve-2026-111329
|
9.3 (v4.0)
9.8 (v3.1)
|
JuggleIM im-server through 1.8.16 Default Admin Creden…
|
juggleim
|
JuggleIM
|
2026-10-15T21:43:33.035Z |
2026-10-16T14:29:03.954Z |
|
cve-2026-85659
|
|
PilotPress <= 2.0.43 - Authenticated (Subscriber+) Pri…
|
ontraport
|
PilotPress
|
2026-10-16T05:30:27.472Z |
2026-10-16T14:28:39.370Z |