|
cve-2026-18223
|
5 (v3.1)
|
Mattermost invitation tokens not bound to invited emai…
|
Mattermost
|
Mattermost
|
2026-10-16T07:12:39.911Z |
2026-10-16T14:16:33.994Z |
|
cve-2026-100106
|
|
FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Sto…
|
damian-gora
|
FiboSearch – Ajax Search for WooCommerce
|
2026-10-16T07:44:02.898Z |
2026-10-16T14:15:55.302Z |
|
cve-2026-96870
|
|
SureDash <= 1.12.0 - Authenticated (Subscriber+) Store…
|
brainstormforce
|
SureDash – Community, Courses & Member Dashboard
|
2026-10-16T07:44:03.654Z |
2026-10-16T14:14:58.815Z |
|
cve-2026-111368
|
6.1 (v4.0)
6.4 (v3.1)
|
ClassroomIO through 1.0.0 IDOR via Course Submission U…
|
classroomio
|
ClassroomIO
|
2026-10-15T21:43:51.616Z |
2026-10-16T14:14:38.123Z |
|
cve-2026-111311
|
|
DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated …
|
samuelgallegos
|
DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More
|
2026-10-16T08:27:40.819Z |
2026-10-16T14:14:12.730Z |
|
cve-2026-110703
|
|
GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) …
|
paoltaia
|
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
|
2026-10-16T09:26:37.351Z |
2026-10-16T14:13:09.355Z |
|
cve-2026-109118
|
4.6 (v3.1)
|
Improper Limitation of a Pathname to a Restricted Dire…
|
ikus-soft
|
rdiffweb
|
2026-10-16T10:27:18.156Z |
2026-10-16T14:11:59.360Z |
|
cve-2026-11732
|
6.3 (v4.0)
8.8 (v3.1)
|
Insufficient input validation vulnerability exists in …
|
NETGEAR
|
CAX30
|
2026-10-13T14:42:50.698Z |
2026-10-16T14:10:44.857Z |
|
cve-2026-16754
|
5.9 (v4.0)
4.8 (v3.1)
|
A potential improper certificate validation vulne…
|
Lenovo
|
Smart Camera C33
|
2026-10-15T23:16:59.545Z |
2026-10-16T14:10:12.796Z |
|
cve-2026-16755
|
6 (v4.0)
5.3 (v3.1)
|
A potential vulnerability was reported in Lenovo …
|
Lenovo
|
Smart Camera C33
|
2026-10-15T23:17:07.584Z |
2026-10-16T14:08:33.634Z |
|
cve-2026-75941
|
8.6 (v4.0)
8 (v3.1)
|
A potential vulnerability was reported in the Len…
|
Lenovo
|
Legion Zone Application
|
2026-10-15T23:17:26.930Z |
2026-10-16T14:07:12.156Z |
|
cve-2026-19076
|
4.4 (v3.1)
|
Mattermost fails to reject OAuth application sessions …
|
Mattermost
|
Mattermost
|
2026-10-16T07:11:29.552Z |
2026-10-16T14:06:23.946Z |
|
cve-2026-89062
|
6.8 (v4.0)
5.5 (v3.1)
|
A potential out-of-bounds write vulnerability was…
|
Lenovo
|
Energy Management Driver
|
2026-10-15T23:17:46.990Z |
2026-10-16T14:05:04.916Z |
|
cve-2026-63618
|
|
Apache Kylin: Low-Privilege Config Exposure
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T12:11:35.468Z |
2026-10-16T14:03:00.915Z |
|
cve-2026-111397
|
5.3 (v3.1)
|
WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exp…
|
PT Norther Lights Production
|
MapSVG
|
2026-10-16T12:29:35.561Z |
2026-10-16T14:02:23.262Z |
|
cve-2026-107564
|
8.7 (v4.0)
7.5 (v3.1)
|
gocsaf/csaf: csaf_provider prone to uncontrolled resou…
|
gocsaf Development Community
|
csaf_provider
|
2026-10-16T12:55:24.565Z |
2026-10-16T14:01:53.235Z |
|
cve-2026-110896
|
5.3 (v3.1)
|
WordPress Passster plugin <= 4.3.18 - Broken Access Co…
|
WP Chill
|
Passster
|
2026-10-16T12:57:24.956Z |
2026-10-16T14:01:22.556Z |
|
cve-2026-92629
|
7 (v4.0)
7.3 (v3.1)
|
A potential improper authorization vulnerability …
|
Lenovo
|
Baiying PC Client
|
2026-10-15T23:17:53.551Z |
2026-10-16T14:00:54.243Z |
|
cve-2026-11731
|
6.3 (v4.0)
8.8 (v3.1)
|
Authentication Bypass Vulnerability in Certain NETGEAR…
|
NETGEAR
|
RAX30
|
2026-10-13T14:41:42.298Z |
2026-10-16T13:58:30.825Z |
|
cve-2026-111376
|
2.3 (v4.0)
5 (v3.1)
|
FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Window…
|
FreeRDP
|
FreeRDP
|
2026-10-16T01:17:43.621Z |
2026-10-16T13:58:15.578Z |
|
cve-2026-111386
|
5.3 (v4.0)
4.3 (v3.1)
|
Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enume…
|
nezhahq
|
nezha
|
2026-10-16T01:17:54.995Z |
2026-10-16T13:56:01.330Z |
|
cve-2026-109813
|
8.6 (v4.0)
|
Shared Hard-coded Root CA Private Key
|
Moxa
|
AIG-302 Series
|
2026-10-16T02:57:52.388Z |
2026-10-16T13:54:15.659Z |
|
cve-2026-111391
|
9.2 (v4.0)
8.1 (v3.1)
|
SGLang 0.5.10 through 0.5.22 Code Injection via Debug …
|
sgl-project
|
sglang
|
2026-10-16T11:41:52.009Z |
2026-10-16T13:52:52.818Z |
|
cve-2026-111405
|
6.5 (v3.1)
|
WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripti…
|
PT Norther Lights Production
|
MapSVG
|
2026-10-16T12:30:54.361Z |
2026-10-16T13:46:12.255Z |
|
cve-2026-111396
|
7.1 (v3.1)
|
WordPress Advanced Post Manager plugin <= 4.5.6 - Brok…
|
Liquid Web / StellarWP
|
Advanced Post Manager
|
2026-10-16T12:54:50.256Z |
2026-10-16T13:44:30.141Z |
|
cve-2026-9218
|
4.3 (v4.0)
4.5 (v3.1)
|
Insufficient input validation vulnerability in Certain…
|
NETGEAR
|
CBR40
|
2026-10-13T14:34:34.055Z |
2026-10-16T13:44:29.724Z |
|
cve-2026-111593
|
N/A
|
{'providerMetadata': {'orgId': '1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81', 'shortName': 'WPScan', 'dateUpdated': '2026-10-16T13:43:18.510Z'}, 'rejectedReasons': [{'lang': 'en', 'value': "This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role that could invoke the bulk invoice deletion and renumbering tool already holds the equivalent capability through the plugin's normal per-order invoice controls and through WooCommerce order management, so it crosses no privilege boundary. No CVE record should reference this ID."}]}
|
N/A
|
N/A
|
|
2026-10-16T13:43:18.510Z |
|
cve-2026-111413
|
8.8 (v3.1)
|
WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cro…
|
aThemeArt
|
aThemeArt Theme Helper
|
2026-10-16T13:02:14.161Z |
2026-10-16T13:32:40.971Z |
|
cve-2026-109119
|
8.8 (v3.1)
|
Missing Authorization in rdiffweb
|
ikus-soft
|
rdiffweb
|
2026-10-16T10:27:28.149Z |
2026-10-16T13:31:33.847Z |
|
cve-2026-108798
|
|
ZKTeco BioTime hard-coded key
|
ZKTeco
|
BioTime
|
2026-10-12T04:00:12.485Z |
2026-10-16T12:45:54.553Z |