Security Box Score — October 10, 2026

411 CVEs published, led by jeecgboot (76).

411 CVEs published October 10, 2026: 73 critical, 140 high, 178 medium, 13 low; 0 in the KEV catalog at press time; 0 with a public exploit reference; 7 awaiting enrichment. Elevated volume. 25 rendered as box scores below; 375 more in the results table on this page; the remaining 11 on continuation pages.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	3953	53987	—	—
KEV catalog size	1739

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

3511 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	220	6425	532	2691	749	1	15	6	0.1	7.8	.0018	+20 ▲
google	293	3124	382	1205	1395	137	80	9	0.3	7.4	.0026	-67 ▼
microsoft	19	2921	208	2002	694	17	290	31	1.1	7.8	.0047	-956 ▼
red hat	95	994	55	397	486	56	2	0	0.0	6.5	.0033	+29 ▲
apple	0	564	67	166	317	14	89	9	1.6	6.5	.0019	0
suse	0	53	8	27	16	2	0	0	0.0	7.5	.0035	-12 ▼
canonical	2	52	16	12	19	5	0	0	0.0	7.8	.0022	+2 ▲
freebsd	0	48	2	36	7	3	0	0	0.0	7.8	.0016	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	36	218	70	84	63	1	60	17	7.8	8.4	.0044	+24 ▲
ubiquiti	0	65	36	28	1	0	3	3	4.6	9.1	.0051	0
palo alto networks	0	46	1	4	26	15	13	2	4.3	4.7	.0022	-9 ▼
fortinet	1	42	12	10	17	3	30	8	19.0	7.2	.0040	-8 ▼
netgear	0	34	0	0	27	7	0	0	0.0	4.3	.0027	-2 ▼
f5	0	26	7	14	4	1	5	2	7.7	8.7	.0050	-7 ▼
ivanti	0	24	6	16	2	0	25	5	20.8	8.8	.0152	-10 ▼
sonicwall	4	23	8	10	5	0	19	4	17.4	7.8	.0049	-1 ▼

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	141	848	169	380	262	21	33	2	0.2	7.5	.0057	+111 ▲
mozilla	2	381	123	170	87	0	9	0	0.0	8.8	.0031	-33 ▼
gitlab	2	106	8	24	63	11	5	3	2.8	5.3	.0035	+2 ▲
drupal	0	94	11	9	66	8	4	1	1.1	5.7	.0027	-26 ▼
github	2	25	2	12	11	0	0	0	0.0	7.4	.0052	-1 ▼
docker	7	19	1	10	8	0	0	0	0.0	7.2	.0015	+7 ▲
wordpress	0	6	1	4	1	0	3	3	50.0	8.7	.0363	0
eclipse	0	2	2	0	0	0	0	0	0.0	9.3	.0050	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	0	2905	581	1660	563	101	28	4	0.1	7.8	.0036	0
ibm	117	1140	211	543	367	19	6	1	0.1	7.5	.0036	-4 ▼
adobe	0	830	82	364	375	9	21	5	0.6	7.5	.0036	-170 ▼
progress	11	77	16	45	15	1	6	1	1.3	8.0	.0043	+9 ▲
zohocorp	0	42	6	29	7	0	0	0	0.0	8.3	.0117	-5 ▼
solarwinds	0	26	18	5	3	0	10	4	15.4	9.1	.0067	0
veeam	6	25	7	11	7	0	1	0	0.0	8.5	.0036	+6 ▲
atlassian	1	10	2	8	0	0	13	0	0.0	7.8	.0043	+1 ▲

Industrial & Embedded
Vendor	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
d-link	74	22	28	12	12	3	8.5	.0164	-8 ▼
siemens	52	6	33	10	3	0	7.3	.0026	-14 ▼
synology	46	5	10	25	6	0	5.6	.0032	0
rockwell automation	43	5	32	6	0	0	8.6	.0029	-18 ▼
advantech	20	2	17	1	0	0	8.6	.0071	-2 ▼
schneider electric	18	2	11	5	0	0	8.5	.0044	-7 ▼
hitachi energy	12	2	4	6	0	0	7.0	.0025	-4 ▼
abb	11	1	6	4	0	0	7.2	.0018	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
dell	41	419	41	186	167	25	2	1	0.2	7.2	.0025	-93 ▼
nvidia	2	303	25	207	71	0	0	0	0.0	7.8	.0019	-30 ▼
sourcecodester	17	254	0	0	149	105	0	0	0.0	5.5	.0041	-9 ▼
openclaw	0	228	5	117	85	21	0	0	0.0	7.1	.0031	0
hewlett packard enterprise (hpe)	38	204	39	92	64	9	1	1	0.5	7.3	.0042	-53 ▼
mongodb	17	186	6	103	70	7	1	0	0.0	7.1	.0036	-32 ▼
spring	0	170	13	60	83	14	0	0	0.0	6.5	.0033	0
itsourcecode	14	167	0	0	42	125	0	0	0.0	2.1	.0033	-10 ▼

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-85706	.9296	99.8	10.0
CVE-2026-87902	.3998	98.6	8.1
CVE-2026-76461	.2827	98.1	9.8
CVE-2026-93616	.1965	97.3	9.8
CVE-2026-76460	.1403	96.5	10.0
CVE-2026-12269	.0699	94.0	8.8
CVE-2026-77692	.0656	93.7	7.5
CVE-2026-12268	.0473	91.6	8.8
CVE-2026-74849	.0461	91.4	9.8
CVE-2026-76698	.0453	91.3	6.5

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-85706	10.0	.9296	KEV
CVE-2026-76460	10.0	.1403	KEV
CVE-2026-105484	10.0	.0213
CVE-2026-73369	10.0	.0125
CVE-2026-75699	10.0	.0125
CVE-2026-75703	10.0	.0125
CVE-2026-75721	10.0	.0125
CVE-2026-84412	10.0	.0125
CVE-2026-89275	10.0	.0125
CVE-2026-86708	10.0	.0124

Most disclosures (vendor)
Vendor	CVEs
linux	2135
oracle	634
google	595
ibm	400
apache	306
red hat	293
apple	247
mozilla	158
nvidia	137
cisco	122

Most KEV additions (YTD)
Vendor	KEV
microsoft	31
cisco	17
apple	9
google	9
fortinet	8
linux	6
adobe	5
ivanti	5
berriai	4
checkpoint	4

Most-affected ecosystems
Ecosystem	Advisories
Maven	136
NuGet	29
npm	28
Packagist	18
PyPI	18
Go	12
crates.io	10
RubyGems	4

Fastest to KEV
CVE	Vendor	Days
CVE-2026-58704	Google	0
CVE-2026-86950	Apple	0
CVE-2026-88779	NetScaler	0
CVE-2026-93952	Arista Networks	0
CVE-2026-102489	Zammad GmbH	1
CVE-2026-102490	Zammad GmbH	1
CVE-2026-84869	ConnectWise	2
CVE-2026-87902	WordPress	2
CVE-2026-85102	checkpoint	12
CVE-2026-67279	Mikrotik	19

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1788
CVE-2021-27102	n/a	2021-11-17	1788
CVE-2021-27101	n/a	2021-11-17	1788
CVE-2021-27103	n/a	2021-11-17	1788
CVE-2021-21017	Adobe	2021-11-17	1788
CVE-2021-28550	Adobe	2021-11-17	1788
CVE-2021-42013	Apache Software Foundation	2021-11-17	1788
CVE-2021-41773	Apache Software Foundation	2021-11-17	1788
CVE-2021-30858	Apple	2021-11-17	1788
CVE-2021-30860	Apple	2021-11-17	1788

Transactions

RESCORED — IBM Security Verify Access: 6 CVEs (CVE-2026-11888, CVE-2026-12109, CVE-2026-16823, CVE-2026-16916, CVE-2026-19491, CVE-2026-19494). CVSS rescored — before/after on each CVE page.

RESCORED — IBM Guardium Data Protection: 4 CVEs (CVE-2026-82334, CVE-2026-82335, CVE-2026-82344, CVE-2026-84250). CVSS rescored — before/after on each CVE page.

RESCORED — Portabilis i-Diario: 3 CVEs (CVE-2025-8511, CVE-2025-8786, CVE-2025-8787). CVSS rescored — before/after on each CVE page.

Yesterday's Results

How to read these box scores · glossary

411 CVEs published. 25 box scores and 375 table rows below; the remaining 11 continue on page 2 — every CVE is listed, nothing truncated.

CVE-2026-104801CRITICAL

themeisle PPOM – Product Addons & Custom Fields for WooCommerce — PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  H  H    9.1   .0076   53.8     —

AFFECTED
  Product                                                Versions     Fixed
  PPOM – Product Addons & Custom Fields for WooCommerce  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-22 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Received

CVE-2026-103889CRITICAL

expivi 3D Product configurator for WooCommerce — 3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0074   53.3     —

AFFECTED
  Product                                  Versions     Fixed
  3D Product configurator for WooCommerce  unspecified  —

TIMELINE
  Oct 1   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · CVSS v3.1 · 8 references · NVD status: Received

CVE-2026-104763MEDIUM

wpazleen Post Export Import with Media — Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  H  N  N    4.9   .0073   53.0     —

AFFECTED
  Product                        Versions     Fixed
  Post Export Import with Media  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-22 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-97348MEDIUM

gpriday SiteOrigin Widgets Bundle — SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  N  N    6.5   .0073   53.0     —

AFFECTED
  Product                    Versions     Fixed
  SiteOrigin Widgets Bundle  unspecified  —

TIMELINE
  Sep 24  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-22 · CNA: Wordfence · CVSS v3.1 · 9 references · NVD status: Received

CVE-2026-94589CRITICAL

htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) — Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0066   49.9     —

AFFECTED
  Product                                                                           Versions     Fixed
  Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)  unspecified  —

TIMELINE
  Sep 21  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-83526HIGH

foliovision FV Player 8 — FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0064   49.4     —

AFFECTED
  Product      Versions     Fixed
  FV Player 8  unspecified  —

TIMELINE
  Aug 31  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · CVSS v3.1 · 11 references · NVD status: Received

CVE-2026-104722MEDIUM

webilia Listdom: AI-powered Business Directory with Classifieds Ads Listings — Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  H  N  N    4.9   .0064   49.0     —

AFFECTED
  Product                                                               Versions     Fixed
  Listdom: AI-powered Business Directory with Classifieds Ads Listings  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-22 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-104899HIGH

paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings Directory — GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0064   48.9     —

AFFECTED
  Product                                                                        Versions     Fixed
  GeoDirectory – WP Business Directory Plugin and Classified Listings Directory  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-98 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-91136HIGH

Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0056   44.9     —

AFFECTED
  Product    Versions     Fixed
  Divi Plus  unspecified  —

TIMELINE
  Sep 14  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-22 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Received

CVE-2026-93746HIGH

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0053   42.9     —

AFFECTED
  Product                                                                              Versions     Fixed
  WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels  unspecified  —

TIMELINE
  Sep 18  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-639 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Received

CVE-2026-104759HIGH

WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce Verification

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0052   42.1     —

AFFECTED
  Product                                                               Versions     Fixed
  WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-287 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-104732CRITICAL

inilerm Advanced IP Blocker — Advanced IP Blocker <= 8.13.13 - Unauthenticated Authentication Bypass via Missing Step-1 Binding to 2FA Login Handler

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0047   39.0     —

AFFECTED
  Product              Versions     Fixed
  Advanced IP Blocker  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-287 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-104803CRITICAL

whyun WPCOM Member — WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0045   37.1     —

AFFECTED
  Product       Versions     Fixed
  WPCOM Member  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-287 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Received

CVE-2026-104723HIGH

LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0045   36.9     —

AFFECTED
  Product                                                      Versions     Fixed
  LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-502 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Received

CVE-2026-104023MEDIUM

supsysticcom Smart Popup by Supsystic — Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  H  N  N    4.9   .0043   35.6     —

AFFECTED
  Product                   Versions     Fixed
  Smart Popup by Supsystic  unspecified  —

TIMELINE
  Oct 1   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-89 · CNA: Wordfence · CVSS v3.1 · 9 references · NVD status: Received

CVE-2026-89301HIGH

rtcamp rtMedia for WordPress, BuddyPress and bbPress — rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0043   35.2     —

AFFECTED
  Product                                        Versions     Fixed
  rtMedia for WordPress, BuddyPress and bbPress  unspecified  —

TIMELINE
  Sep 11  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-862 · CNA: Wordfence · CVSS v3.1 · 9 references · NVD status: Received

CVE-2026-104797HIGH

nasirahmed Advanced Form Integration — Connect Forms to 300+ Apps — Advanced Form Integration <= 2.9.0 - Unauthenticated Unverified Password Change to Authentication Bypass / Privilege Escalation via Contact Form 7 Submission to Ultimate Member Update Profile Field Action

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0041   33.0     —

AFFECTED
  Product                                                 Versions     Fixed
  Advanced Form Integration — Connect Forms to 300+ Apps  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-287 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Received

CVE-2026-104021HIGH

hostspa Fastcache by Host.it — Fastcache by Host.it <= 1.7.4 - Authenticated (Administrator+) Code Injection via .htaccess Directive Injection via 'cache_cookie_exclude' Setting

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  H  H  H    7.2   .0040   32.2     —

AFFECTED
  Product               Versions     Fixed
  Fastcache by Host.it  unspecified  —

TIMELINE
  Oct 1   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-94 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-96662HIGH

latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress — Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0039   30.8     —

AFFECTED
  Product                                                                       Versions     Fixed
  Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress  unspecified  —

TIMELINE
  Sep 23  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-89 · CNA: Wordfence · CVSS v3.1 · 9 references · NVD status: Received

CVE-2026-100178HIGH

gwin WPAdverts – Classifieds Plugin — WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  L  L  N    7.2   .0037   29.1     —

AFFECTED
  Product                         Versions     Fixed
  WPAdverts – Classifieds Plugin  unspecified  —

TIMELINE
  Sep 25  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-79 · CNA: Wordfence · CVSS v3.1 · 10 references · NVD status: Received

CVE-2026-106606HIGH

YITH YITH WooCommerce Affiliates — WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  H  H  H    7.2   .0037   28.9     —

AFFECTED
  Product                      Versions     Fixed
  YITH WooCommerce Affiliates  unspecified  3.31.1

TIMELINE
  Oct 7   Reserved by CNA
  Oct 10  Published (CNA: Patchstack)

CWE-502 · CNA: Patchstack · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-97670CRITICAL

themefusion Avada (Fusion) Builder — Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  H  H    9.1   .0037   28.8     —

AFFECTED
  Product                 Versions     Fixed
  Avada (Fusion) Builder  unspecified  —

TIMELINE
  Sep 24  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-94 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Received

CVE-2026-92975HIGH

trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation — Groundhogg <= 4.8.3 - Unauthenticated Privilege Escalation to Support User Identity Confusion

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0035   26.8     —

AFFECTED
  Product                                                  Versions     Fixed
  Groundhogg — CRM, Newsletters, and Marketing Automation  unspecified  —

TIMELINE
  Sep 17  Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Received

CVE-2026-104725HIGH

trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation — Groundhogg <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0033   24.8     —

AFFECTED
  Product                                                  Versions     Fixed
  Groundhogg — CRM, Newsletters, and Marketing Automation  unspecified  —

TIMELINE
  Oct 2   Reserved by CNA
  Oct 10  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · CVSS v3.1 · 8 references · NVD status: Received

CVE-2026-93936CRITICAL

ThemeREX Group IPharm — WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0033   24.3     —

AFFECTED
  Product  Versions     Fixed
  IPharm   unspecified  —

TIMELINE
  Sep 19  Reserved by CNA
  Oct 10  Published (CNA: Patchstack)

CWE-502 · CNA: Patchstack · CVSS v3.1 · 1 reference · NVD status: Received

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-93937	9.8	24.3	ThemeREX Group	Hygia	CWE-502	WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability
CVE-2026-93938	9.8	24.3	ThemeREX Group	Hogwords	CWE-502	WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability
CVE-2026-93940	9.8	24.3	ThemeREX Group	Greeny	CWE-502	WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability
CVE-2026-93941	9.8	24.3	ThemeREX Group	Edema	CWE-502	WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability
CVE-2026-93945	9.8	24.3	Axiomthemes	Balance	CWE-502	WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability
CVE-2026-96765	7.2	23.2	wpo365	WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN)	CWE-79	WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 44.1 …
CVE-2026-62045	9.8	23.0	ThemeREX Group	Booklovers	CWE-502	WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability
CVE-2026-62046	9.8	23.0	ThemeREX Group	Gutentype	CWE-502	WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
CVE-2026-93927	9.8	23.0	Axiomthemes	Veto	CWE-502	WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability
CVE-2026-93929	9.8	23.0	ThemeREX Group	Travesia	CWE-502	WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability
CVE-2026-12626	7.2	22.8	ladela	Online Scheduling and Appointment Booking System – Bookly	CWE-502	Online Scheduling and Appointment Booking System <= 28.2 - Authenticated (Cus…
CVE-2026-93930	9.8	22.3	ThemeREX Group	Tantra	CWE-502	WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability
CVE-2026-93931	9.8	22.3	ThemeREX Group	Smash	CWE-502	WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability
CVE-2026-93932	9.8	22.3	ThemeREX Group	Smart Casa	CWE-502	WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability
CVE-2026-93933	9.8	22.3	ThemeREX Group	Rosalinda	CWE-502	WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability
CVE-2026-93934	9.8	22.3	ThemeREX Group	Partiso	CWE-502	WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability
CVE-2026-93935	9.8	22.3	ThemeREX Group	Let's Play	CWE-502	WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability
CVE-2026-93942	9.8	22.3	ThemeREX Group	Dwell	CWE-502	WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability
CVE-2026-93943	9.8	22.3	ThemeREX Group	Convex	CWE-502	WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability
CVE-2026-93944	9.8	22.3	ThemeREX Group	Camelia	CWE-502	WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability
CVE-2026-103482	5.4	22.3	picocodes	Noptin – Newsletter, New Post Notifications & Email Automation	CWE-79	Simple Newsletter Plugin <= 4.3.10 - Unauthenticated Stored Cross-Site Script…
CVE-2026-103478	6.4	21.6	codename065	Premium Packages – Sell Digital Products Securely	CWE-79	Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scr…
CVE-2026-102291	5.4	21.3	themeum	Kirki – Freeform Page Builder, Website Builder & Customizer	CWE-74	Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Authen…
CVE-2026-104766	8.8	21.1	latepoint	Appointment Booking Plugin – LatePoint \| Calendar & Scheduling for WordPress	CWE-269	Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escal…
CVE-2026-100147	7.2	20.6	teamfunnelkit	FunnelKit – Funnel Builder for WooCommerce Checkout	CWE-79	FunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order…
CVE-2026-101920	7.2	20.6	molongui	Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress	CWE-79	Molongui Authorship <= 5.2.12 - Unauthenticated Stored DOM-Based Cross-Site S…
CVE-2026-104728	4.3	20.1	rubengc	AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI	CWE-862	AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) S…
CVE-2026-100196	7.2	20.1	wp_media	LazyLoad Plugin – Lazy Load Images, Videos, and Iframes	CWE-79	LazyLoad Plugin <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via Co…
CVE-2026-96667	7.2	20.0	rameez_iqbal	Real Estate Manager – Property Listing and Agent Management	CWE-79	Real Estate Manager <= 7.3 - Unauthenticated Stored Cross-Site Scripting via …
CVE-2026-77183	8.8	19.8	foosales	FooSales – Point of Sale (POS) for WooCommerce	CWE-269	FooSales <= 1.43.0 - Authenticated (Custom+) Privilege Escalation via create_…
CVE-2026-94375	5.3	19.7	webtoffee	Order Export & Order Import for WooCommerce	CWE-552	Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensit…
CVE-2026-107645	9.1	19.4	creativethemeshq	Blocksy Companion	CWE-269	Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' …
CVE-2026-103365	5.3	18.8	ladela	Online Scheduling and Appointment Booking System – Bookly	CWE-200	Online Scheduling and Appointment Booking System <= 28.4 - Unauthenticated Se…
CVE-2026-107712	6.5	18.3	murgroland	WP Booking System – Booking Calendar	CWE-89	WP Booking System <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection via …
CVE-2026-102774	6.4	18.3	brainstormforce	SureDash – Community, Courses & Member Dashboard	CWE-79	SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site …
CVE-2026-104741	3.1	17.6	senols	AI Puffer – AI Chatbot, AI Writer & Automation	CWE-862	AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Gl…
CVE-2026-104742	3.1	17.6	senols	AI Puffer – AI Chatbot, AI Writer & Automation	CWE-862	AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Se…
CVE-2026-100161	7.2	16.6	villatheme	Photo Reviews for WooCommerce	CWE-79	Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cr…
CVE-2026-104006	3.7	15.9	softaculous	SpeedyCache – Cache, Optimization, Performance	CWE-524	SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Ins…
CVE-2026-93775	7.2	15.6	eteubert	Podlove Podcast Publisher	CWE-79	Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Script…
CVE-2026-96278	7.2	15.6	opajaap	WP Photo Album Plus	CWE-79	WP Photo Album Plus <= 9.3.03.002 - Unauthenticated Stored Cross-Site Scripti…
CVE-2026-104898	6.8	15.6	ladela	Online Scheduling and Appointment Booking System – Bookly	CWE-639	Online Scheduling and Appointment Booking System <= 28.4 - Insecure Direct Ob…
CVE-2026-101921	4.7	15.2	smub	WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More	CWE-79	WPForms <= 2.0.2.1 - Reflected Cross-Site Scripting via 'query_var' Smart Tag…
CVE-2026-96653	6.5	14.9	wpdirectorykit	WP Directory Kit	CWE-89	WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'di…
CVE-2026-94538	8.1	14.8	JoomUnited	WP File Download	CWE-862	WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscribe…
CVE-2026-93949	7.1	14.3	Omegathemes	Grocery Shopping Store	CWE-288	WordPress Grocery Shopping Store theme <= 1.3.3 - Broken Authentication vulne…
CVE-2026-103964	4.3	14.3	codename065	Download Manager	CWE-200	Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Informatio…
CVE-2026-95684	7.2	14.0	e4jvikwp	VikBooking Hotel Booking Engine & PMS	CWE-79	VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cros…
CVE-2026-96558	7.2	14.0	expresstech	Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker	CWE-79	Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cro…
CVE-2026-96572	7.2	14.0	aguidrevitch	WP Meteor Website Speed Optimization Addon	CWE-79	WP Meteor Website Speed Optimization Addon <= 3.4.18 - Unauthenticated Stored…
CVE-2026-96682	7.2	14.0	2winfactor	Presto Player	CWE-79	Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via Comm…
CVE-2026-107657	7.2	14.0	hivepress	HivePress – Business Directory, Listings & Classified Ads Plugin	CWE-79	HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom …
CVE-2026-107742	7.2	14.0	10web	10Web Booster – Website speed optimization, Cache & Page Speed optimizer	CWE-79	10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Com…
CVE-2026-108506	5.5	13.5	ZTE	Z80 Ultra	CWE-269	Unauthorized access vulnerability in ZTE Z80 Ultra product
CVE-2026-96840	7.2	13.5	wpxpo	Post Grid Gutenberg Blocks – PostX	CWE-79	Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scrip…
CVE-2026-104724	5.3	13.4	fireplugins	FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment	CWE-89	FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Di…
CVE-2026-96648	6.4	13.3	supsysticcom	Data Tables Generator by Supsystic	CWE-79	Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) St…
CVE-2026-97630	6.4	13.1	foliovision	FV Flowplayer Video Player	CWE-79	FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Store…
CVE-2026-104915	6.5	12.8	kodezen	Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning	CWE-862	Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbit…
CVE-2026-5727	5.4	12.4	elemntor	Hello Plus	CWE-862	Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to T…
CVE-2026-103424	5.4	11.7	cleantalk	Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA	CWE-79	Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting …
CVE-2026-87869	6.1	11.5	stepasyuk	Filter Everything — WordPress & WooCommerce Filters	CWE-79	Filter Everything — WordPress & WooCommerce Filters <= 1.9.6 - Reflected Cros…
CVE-2026-96574	6.4	11.0	wedevs	User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission	CWE-79	User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scrip…
CVE-2026-104735	6.4	11.0	themeisle	RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator	CWE-79	RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cros…
CVE-2026-104762	6.4	11.0	stellarwp	Kadence Blocks — Page Builder Toolkit for Gutenberg Editor	CWE-79	Kadence Blocks <= 3.7.12 - Authenticated (Author+) Stored Cross-Site Scriptin…
CVE-2026-89100	6.1	11.0	paymentplugins	Payment Plugins for Stripe WooCommerce	CWE-79	Payment Plugins for Stripe WooCommerce <= 4.0.17 - Reflected DOM-Based Cross-…
CVE-2026-103998	6.1	11.0	10web	Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder	CWE-79	Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' …
CVE-2026-18496	5.3	10.8	wpdevelop	Booking Calendar	CWE-200	Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure i…
CVE-2026-97643	6.4	10.6	stellarwp	GiveWP – Donation Plugin and Fundraising Platform	CWE-79	GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting v…
CVE-2026-91050	4.3	10.5	latepoint	Appointment Booking Plugin – LatePoint \| Calendar & Scheduling for WordPress	CWE-639	Appointment Booking Plugin <= 5.7.2 - Insecure Direct Object Reference to Aut…
CVE-2026-103427	6.4	10.4	wpinsider-1	Simple Membership	CWE-79	Simple Membership <= 4.8.4 - Authenticated (Subscriber+) Stored Cross-Site Sc…
CVE-2026-104752	7.2	10.1	Unknown	Rank Math SEO	CWE-434	Rank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Im…
CVE-2026-103897	4.4	10.0	dfactory	Responsive Lightbox & Gallery	CWE-79	Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross…
CVE-2026-93950	7.5	9.3	StylemixThemes	Motors	CWE-862	WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability
CVE-2026-101324	4.7	9.3	wpmanageninja	Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder	CWE-79	Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor …
CVE-2026-16776	6.4	9.2	sonaar	MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar	CWE-79	MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site S…
CVE-2026-96563	6.4	9.2	stylemix	Motors – Car Dealership & Classified Listings Plugin	CWE-79	Motors <= 1.4.123 - Authenticated (Subscriber+) Stored Cross-Site Scripting v…
CVE-2026-97396	6.4	9.2	retainful	Email Marketing for WordPress and WooCommerce – Retainful	CWE-79	Email Marketing for WordPress and WooCommerce <= 1.0.10 - Authenticated (Subs…
CVE-2026-102401	6.4	9.2	codename065	Download Manager	CWE-79	Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site S…
CVE-2026-103520	6.4	9.2	hivepress	HivePress – Business Directory, Listings & Classified Ads Plugin	CWE-79	HivePress <= 1.7.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting…
CVE-2026-104993	6.4	9.2	paoltaia	GeoDirectory – WP Business Directory Plugin and Classified Listings Directory	CWE-79	GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scrip…
CVE-2026-93883	6.4	8.7	pluginsware	Advanced Classifieds & Directory Pro	CWE-79	Advanced Classifieds & Directory Pro <= 3.4.4 - Authenticated (Custom+) Store…
CVE-2026-96743	6.4	8.3	jonua	Table Field Add-on for ACF and SCF	CWE-79	Table Field Add-on for ACF and SCF <= 1.4.1-RC2 - Authenticated (Subscriber+)…
CVE-2026-102402	6.4	8.3	techlabpro1	Team – Team Members Showcase Plugin	CWE-79	Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via …
CVE-2026-103912	4.7	8.3	jetmonsters	JetFormBuilder — Dynamic Blocks Form Builder	CWE-79	JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query…
CVE-2026-14335	7.2	8.0	smub	Easy Digital Downloads – eCommerce Payments and Subscriptions made easy	CWE-79	Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting…
CVE-2026-3717	5.3	7.8	bestwpdeveloper	WP CV Builder	CWE-862	CV Builder – Professional Resume Builder SaaS <= 1.3.1 - Missing Authorizatio…
CVE-2026-6723	5.3	7.8	croixhaug	Simply Schedule Appointments	CWE-863	Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauth…
CVE-2026-4791	6.4	7.6	peprodev	PeproDev Ultimate Profile Solutions	CWE-79	PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) …
CVE-2026-14379	6.4	7.6	rubengc	GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI	CWE-79	GamiPress <= 7.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting …
CVE-2026-17025	6.4	7.6	silverks	Graphene	CWE-79	Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting v…
CVE-2026-87781	8.6	6.7	Unknown	LTL Freight Quotes	CWE-89	LTL Freight Quotes – Old Dominion Edition 4.2.11 - 4.2.18 - Unauthenticated S…
CVE-2026-106138	5.4	6.4	Progress Software	KendoReact	CWE-80	Cross-Site Scripting via Chart Tooltip in KendoReact
CVE-2026-106139	5.4	6.4	Progress Software	Kendo UI for Vue	CWE-80	Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
CVE-2026-5725	6.1	5.6	archetyped	Favicon Rotator	CWE-79	Favicon Rotator <= 1.2.11 - Reflected Cross-Site Scripting via 'fvrt_' prefix
CVE-2026-12054	6.1	5.6	codename065	Download Manager	CWE-79	Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site S…
CVE-2026-104753	4.1	5.5	Unknown	Rank Math SEO	CWE-89	Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter
CVE-2026-6243	6.4	5.4	shabti	Frontend Admin by DynamiApps	CWE-79	Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored…
CVE-2026-107323	6.8	5.1	Unknown	Gallery PhotoBlocks	CWE-79	Gallery PhotoBlocks 1.3.5 - Contributor+ Stored XSS
CVE-2026-104754	3.5	5.1	Unknown	Rank Math SEO	CWE-79	Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL
CVE-2026-108501	5.7	4.8	ZTE	ZTE Z80 Ultra	CWE-269	Unauthorized access vulnerability in ZTE Z80 Ultra product
CVE-2026-107321	5.4	4.7	Unknown	W3 Total Cache	CWE-22	W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import
CVE-2026-87780	8.8	4.2	Unknown	LTL Freight Quotes	CWE-79	LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored X…
CVE-2026-9696	6.4	4.2	codename065	Download Manager	CWE-79	Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site S…
CVE-2026-14877	6.4	4.2	supsysticcom	Data Tables Generator by Supsystic	CWE-79	Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) …
CVE-2026-14882	6.4	4.2	themefusecom	Brizy – Page Builder	CWE-79	Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting vi…
CVE-2026-18558	6.4	4.2	awsmin	Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files	CWE-79	Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site…
CVE-2026-78068	6.4	4.2	jonua	Table Field Add-on for ACF and SCF	CWE-79	Table Field Add-on for ACF and SCF <= 1.3.35 - Authenticated (Contributor+) S…
CVE-2026-91862	6.4	4.2	jetmonsters	Getwid – Gutenberg Blocks	CWE-79	Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vi…
CVE-2026-94421	6.4	4.2	andy_moyle	Church Admin	CWE-79	Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripti…
CVE-2026-97340	6.4	4.2	ThemeFusion	Avada \| Website Builder For WordPress & WooCommerce	CWE-79	Avada \| Website Builder For WordPress & WooCommerce <= 7.16.1 - Authenticated…
CVE-2026-105990	5.3	4.2	Unknown	Accept PayPal Payments using Contact Form 7	CWE-200	Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Dis…
CVE-2026-105995	5.3	4.2	Unknown	Booking Package	CWE-200	Booking Package < 1.7.30 - Unauthenticated Booking Customer PII Disclosure
CVE-2026-15178	5.4	4.1	wpmanageninja	Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder	CWE-862	Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sens…
CVE-2026-93951	7.1	3.4	Bracketweb	Zeinet	CWE-79	WordPress Zeinet theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulner…
CVE-2026-107120	5.3	3.4	Unknown	Contest Gallery	CWE-287	Contest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brut…
CVE-2026-101947	8.4	3.1	CellHubs	ExifTool for photo and video	CWE-78	ExifTool for photo and video 5.0.1 - Local OS command injection through filen…
CVE-2026-105989	5.3	3.1	Unknown	Accept PayPal Payments using Contact Form 7	CWE-862	Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transac…
CVE-2026-105976	4.7	3.0	Unknown	Portfolio Filter Gallery	CWE-863	Portfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Mul…
CVE-2026-105977	2.2	3.0	Unknown	Portfolio Filter Gallery	CWE-639	Portfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbn…
CVE-2026-94256	8.1	2.7	Unknown	SMS Alert	CWE-287	SMS Alert 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP
CVE-2026-94257	8.1	2.7	Unknown	SMS Alert	CWE-269	SMS Alert 3.9.6 - 4.0.0 - Unauthenticated Privilege Escalation via Arbitrary …
CVE-2026-85571	6.5	2.4	Unknown	Tutor LMS	CWE-639	Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR
CVE-2026-108502	3.3	2.2	ZTE	Z80 Ultra	CWE-269	Information disclosure vulnerability in ZTE Z80 Ultra product
CVE-2026-108503	3.3	2.2	ZTE	Z80 Ultra	CWE-276	Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product
CVE-2026-104022	5.4	2.0	kodezen	Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning	CWE-269	Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_ch…
CVE-2026-108504	5.5	1.9	ZTE	Z80 Ultra	CWE-269	Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product
CVE-2026-108505	3.3	1.2	ZTE	Z80 Ultra	CWE-269	Information disclosure vulnerability in ZTE Z80 Ultra product
CVE-2026-42696	10.0	—	Royal Plugins	SiteVault – Backup, Restore, Migration & Cloning	CWE-94	WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 -…
CVE-2026-62024	9.9	—	CodeBard	CodeBard Help Desk	CWE-434	WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerab…
CVE-2026-62129	9.9	—	WPFunnels	Creator LMS	CWE-434	WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability
CVE-2026-39801	9.8	—	Sergey	AIWU	CWE-266	WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability
CVE-2026-42716	9.8	—	payever	Payever - WooCommerce Gateway	CWE-502	WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injectio…
CVE-2026-42718	9.8	—	Pluggabl	Booster for WooCommerce	CWE-502	WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vuln…
CVE-2026-42719	9.8	—	Sarah Giles	Dynamic User Directory	CWE-502	WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnera…
CVE-2026-42723	9.8	—	AncoraThemes	CleanSkin	CWE-502	WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability
CVE-2026-62022	9.8	—	Select-Themes	Tonda Membership	CWE-266	WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
CVE-2026-62032	9.8	—	Designinvento	DirectoryPress	CWE-98	WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability
CVE-2026-62050	9.8	—	ThemeREX	Splendour	CWE-502	WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
CVE-2026-62051	9.8	—	ThemeREX	Stargaze	CWE-502	WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
CVE-2026-62052	9.8	—	ThemeREX	Tipsy	CWE-502	WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
CVE-2026-62053	9.8	—	ThemeREX	Wine House	CWE-502	WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
CVE-2026-62054	9.8	—	ThemeREX	Yacht Rental	CWE-502	WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
CVE-2026-62076	9.8	—	The4	Kalles	CWE-502	WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
CVE-2026-62077	9.8	—	BoldThemes	Avala	CWE-502	WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
CVE-2026-62086	9.8	—	ThemeREX	Juno	CWE-502	WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
CVE-2026-62087	9.8	—	ThemeREX	Equadio	CWE-502	WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability
CVE-2026-62090	9.8	—	ThemeREX	WineShop	CWE-502	WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
CVE-2026-62120	9.8	—	ThemeREX	Law Office	CWE-502	WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability
CVE-2026-62123	9.8	—	ThemeREX	Invetex	CWE-502	WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability
CVE-2026-62124	9.8	—	ThemeREX	N7 \| Golf Club Sports & Events	CWE-502	WordPress N7 \| Golf Club Sports & Events theme <= 2.21 - PHP Object Injection…
CVE-2026-62125	9.8	—	ThemeREX	Asia Garden	CWE-502	WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability
CVE-2026-66482	9.8	—	AncoraThemes	Drone Media	CWE-502	WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability
CVE-2026-66483	9.8	—	ThemeREX	Education Center	CWE-502	WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
CVE-2026-66563	9.8	—	ThemeREX	Windsor	CWE-502	WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability
CVE-2026-66564	9.8	—	ThemeREX	ShiftCV	CWE-502	WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability
CVE-2026-66565	9.8	—	axiomthemes	FC United	CWE-502	WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
CVE-2026-66567	9.8	—	AncoraThemes	Anesta	CWE-502	WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability
CVE-2026-66568	9.8	—	axiomthemes	Original	CWE-502	WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability
CVE-2026-66569	9.8	—	axiomthemes	Kicker	CWE-502	WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability
CVE-2026-78529	9.8	—	ThemeREX	Alliance	CWE-502	WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability
CVE-2026-78531	9.8	—	ThemeREX	Jacqueline	CWE-502	WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability
CVE-2026-78533	9.8	—	AncoraThemes	Qwery	CWE-502	WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability
CVE-2026-78535	9.8	—	ThemeRex	Photolia	CWE-502	WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability
CVE-2026-81797	9.8	—	ThemeRex	Buzz Stone \| Magazine & Viral Blog WordPress Theme	CWE-502	WordPress Buzz Stone \| Magazine & Viral Blog WordPress Theme theme <= 1.0.2 -…
CVE-2026-104398	9.8	—	VillaTheme	AFFI – Affiliate Marketing for WooCommerce	CWE-502	WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP O…
CVE-2026-105892	9.8	—	rtCamp Inc.	rtMedia for WordPress, BuddyPress and bbPress	CWE-22	WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Ar…
CVE-2026-106610	9.8	—	miniOrange	miniorange otp verification	CWE-266	WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation …
CVE-2026-40800	9.3	—	ELEXtensions	ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes	CWE-89	WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes p…
CVE-2026-62031	9.3	—	Stylemix	uListing	CWE-89	WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2026-105889	9.3	—	Tickera	Tickera	CWE-89	WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability
CVE-2026-108551	9.3	—	ferdikoomen	openapi-typescript-codegen	CWE-94	openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templ…
CVE-2026-108598	9.3	—	floci-io	floci	CWE-94	Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates
CVE-2026-108549	9.2	—	chenhg5	cc-connect	CWE-306	cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
CVE-2026-62025	9.0	—	Tailored Media	Tailored Tools	CWE-434	WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability
CVE-2026-62021	8.8	—	rascals	Angio	CWE-502	WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability
CVE-2026-105885	8.8	—	10Web	Slider by 10Web	CWE-502	WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
CVE-2026-108550	8.7	—	iflytek	skillhub	CWE-863	SkillHub before 0.2.22 Account Takeover via Account Merge Flow
CVE-2026-108628	8.6	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endp…
CVE-2026-108657	8.6	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
CVE-2026-42633	8.5	—	Marcus	Events Manager	CWE-89	WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability
CVE-2026-42712	8.5	—	QODE	Qode Tours	CWE-89	WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
CVE-2026-62117	8.5	—	Dmitry V.	Barcode Scanner with Inventory & Order Manager	CWE-89	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - S…
CVE-2026-96341	8.2	—	WPMU DEV	Forminator	CWE-266	WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability
CVE-2026-108545	8.2	—	SillyTavern	SillyTavern	CWE-400	SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via B…
CVE-2026-39802	8.1	—	everestthemes	Everest Backup	CWE-94	WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulne…
CVE-2026-40777	8.1	—	Rashid	WPSection	CWE-862	WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability
CVE-2026-40801	8.1	—	Wordable	Wordable	CWE-862	WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability
CVE-2026-42704	8.1	—	axiomthemes	Kids Care	CWE-98	WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability
CVE-2026-42724	8.1	—	AncoraThemes	CleanSkin	CWE-98	WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability
CVE-2026-42777	8.1	—	Edge-Themes	Aalto	CWE-98	WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
CVE-2026-48193	8.1	—	kutethemes	Uminex	CWE-98	WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability
CVE-2026-48194	8.1	—	kutethemes	DukaMarket	CWE-98	WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2026-62020	8.1	—	Mikado-Themes	TouchUp	CWE-98	WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability
CVE-2026-62065	8.1	—	CocoBasic	Cardea	CWE-98	WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability
CVE-2026-62066	8.1	—	CocoBasic	Volos	CWE-98	WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-62067	8.1	—	CocoBasic	Kaven	CWE-98	WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-62068	8.1	—	CocoBasic	Teoro	CWE-98	WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability
CVE-2026-62069	8.1	—	CocoBasic	Fabius	CWE-98	WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-62070	8.1	—	CKThemes	Flipmart	CWE-98	WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability
CVE-2026-62074	8.1	—	ThemeREX	Ozeum	CWE-98	WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2026-62075	8.1	—	Mymoun	Backhoe	CWE-98	WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability
CVE-2026-62092	8.1	—	kutethemes	Armania	CWE-98	WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability
CVE-2026-62094	8.1	—	kutethemes	TechOne	CWE-98	WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability
CVE-2026-62096	8.1	—	kutethemes	Biolife	CWE-98	WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
CVE-2026-62099	8.1	—	kutethemes	Boutique	CWE-98	WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability
CVE-2026-62115	8.1	—	kutethemes	KuteShop	CWE-98	WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
CVE-2026-66566	8.1	—	Elated-Themes	Ambient	CWE-98	WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability
CVE-2026-40805	7.7	—	PeepSo	PeepSo	CWE-22	WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability
CVE-2026-78530	7.7	—	Chimpstudio	FoodBakery	CWE-22	WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability
CVE-2026-108161	7.7	—	fusionpbx	fusionpbx	CWE-78	FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP D…
CVE-2026-108546	7.7	—	spotweb	spotweb	CWE-78	Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integ…
CVE-2026-108553	7.7	—	OpenRefine	OpenRefine	CWE-352	OpenRefine through 3.10.1 CSRF to RCE via get-rows Command
CVE-2026-40802	7.6	—	pubjet	Pubjet \| پاب‌جت	CWE-862	WordPress Pubjet \| پاب‌جت plugin <= 5.4.8 - Settings Change vulnerability
CVE-2026-42717	7.6	—	VaultDweller	Leyka	CWE-89	WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
CVE-2026-42722	7.6	—	Shabti Kaplan	Frontend Admin by DynamiApps	CWE-89	WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vuln…
CVE-2026-45440	7.6	—	Smackcoders Inc.	WP Ultimate CSV Importer	CWE-89	WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
CVE-2026-62033	7.6	—	Stylemix	uListing	CWE-862	WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability
CVE-2026-42630	7.5	—	Web Plura	Web Plura Backup & Restore Manager	CWE-201	WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Dat…
CVE-2026-42705	7.5	—	ThemeGoods	Grand News	CWE-862	WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability
CVE-2026-42706	7.5	—	ThemeGoods	DK	CWE-862	WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability
CVE-2026-62043	7.5	—	sevenspark	Contact Form 7 – Dynamic Text Extension	CWE-201	WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive…
CVE-2026-65459	7.5	—	WPMU DEV	Forminator	CWE-862	WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability
CVE-2026-103071	7.5	—	VillaTheme	Thank You Page Customizer for WooCommerce	CWE-94	WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content…
CVE-2026-106609	7.5	—	Web Impian	Bayarcash WooCommerce	CWE-862	WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulne…
CVE-2026-62038	7.3	—	DigitalME	eRoom	CWE-288	WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability
CVE-2026-62118	7.3	—	Dmitry V.	Barcode Scanner with Inventory & Order Manager	CWE-862	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - B…
CVE-2026-108593	7.3	—	decolua	9router	CWE-94	9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint
CVE-2026-27350	7.2	—	Builderius.io	Builderius	CWE-918	WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) …
CVE-2026-62030	7.2	—	bPlugins	StreamCast	CWE-918	WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vul…
CVE-2026-62044	7.2	—	bPlugins	Super Video Player	CWE-502	WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerab…
CVE-2026-62130	7.2	—	Amir Helzer	WooCommerce Multilingual & Multicurrency	CWE-502	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Obje…
CVE-2026-94676	7.2	—	Tainacan Community	Tainacan	CWE-502	WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
CVE-2026-106608	7.2	—	Automattic	WooCommerce	CWE-266	WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalatio…
CVE-2026-39799	7.1	—	Joomunited	WP File Download	CWE-79	WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulne…
CVE-2026-39800	7.1	—	Anton Bond	Additional Order Filters for WooCommerce	CWE-79	WordPress Additional Order Filters for WooCommerce plugin <= 1.24 - Cross Sit…
CVE-2026-40803	7.1	—	Jotform	Jotform – AI Chatbot	CWE-79	WordPress Jotform – AI Chatbot plugin <= 3.8.2 - Cross Site Scripting (XSS) v…
CVE-2026-42631	7.1	—	QODE	Qode Music	CWE-79	WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerabi…
CVE-2026-42632	7.1	—	QODE	Qode Real Estate	CWE-79	WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vul…
CVE-2026-42693	7.1	—	TieLabs	Jannah	CWE-79	WordPress Jannah theme <= 7.6.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42697	7.1	—	Inisev	Social Share Icons & Social Share Buttons	CWE-79	WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross S…
CVE-2026-42699	7.1	—	FolioVision	FV Player 8	CWE-79	WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42702	7.1	—	Themeum	Tutor LMS	CWE-79	WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42709	7.1	—	RadiusTheme	Food Menu – Restaurant Menu & Online Ordering for WooCommerce	CWE-79	WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugi…
CVE-2026-42711	7.1	—	10Web	Slider by 10Web	CWE-79	WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulne…
CVE-2026-42715	7.1	—	10Web	Photo Gallery by 10Web	CWE-79	WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS…
CVE-2026-57742	7.1	—	ThemeREX Group	Kids Planet	CWE-79	WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerab…
CVE-2026-57806	7.1	—	drfuri	Martfury - WooCommerce Marketplace WordPress Theme	CWE-79	WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.3.9 -…
CVE-2026-62027	7.1	—	bPlugins	Team Section Block	CWE-79	WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vul…
CVE-2026-62034	7.1	—	bPlugins	Before After Image Comparison – Image comparison for WP	CWE-79	WordPress Before After Image Comparison – Image comparison for WP plugin <= 1…
CVE-2026-62037	7.1	—	bPlugins	Document Embedder	CWE-79	WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vuln…
CVE-2026-62064	7.1	—	Bracketweb	Ambed	CWE-79	WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnera…
CVE-2026-62082	7.1	—	An-Themes	Pin WP	CWE-79	WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerab…
CVE-2026-62091	7.1	—	kutethemes	Armania	CWE-79	WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulne…
CVE-2026-62093	7.1	—	kutethemes	TechOne	CWE-79	WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulne…
CVE-2026-62095	7.1	—	kutethemes	Biolife	CWE-79	WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulne…
CVE-2026-62100	7.1	—	kutethemes	KuteShop	CWE-79	WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vuln…
CVE-2026-62116	7.1	—	Dmitry V.	Barcode Scanner with Inventory & Order Manager	CWE-79	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - C…
CVE-2026-78532	7.1	—	designthemes	LMS	CWE-79	WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78534	7.1	—	Keen IT Solutions	Educavo	CWE-79	WordPress Educavo theme <= 3.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94160	7.1	—	themeStek	ThemeStek Extras for LabtechCO Theme	CWE-79	WordPress ThemeStek Extras for LabtechCO Theme plugin <= 8.4 - Reflected Cros…
CVE-2026-97263	7.1	—	Greg Winiarski	WPAdverts	CWE-79	WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97264	7.1	—	Greg Winiarski	WPAdverts	CWE-79	WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102388	7.1	—	WPMU DEV	Forminator	CWE-79	WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-108164	7.1	—	opensource-socialnetwork	opensource-socialnetwork	CWE-639	Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route
CVE-2026-108547	7.1	—	iflytek	astron-rpa	CWE-639	AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch…
CVE-2026-108581	7.1	—	TencentCloud	Octop	CWE-862	Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /ap…
CVE-2026-108623	7.1	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch
CVE-2026-108648	7.1	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode En…
CVE-2026-108661	7.1	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserT…
CVE-2026-108671	7.1	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryById
CVE-2026-108677	7.1	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName
CVE-2026-97853	6.9	—	ericmj	decimal	CWE-789	Unbounded allocation in decimal Decimal.round/3 driven by the places argument…
CVE-2026-103357	6.9	—	VillaTheme	GIFT4U	CWE-862	WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-108162	6.9	—	smp46	pingvin-share-x	CWE-348	Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For
CVE-2026-108163	6.9	—	smp46	pingvin-share-x	CWE-307	Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Th…
CVE-2026-108548	6.9	—	iflytek	astron-rpa	CWE-287	AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token
CVE-2026-108554	6.9	—	PDFMathTranslate	PDFMathTranslate	CWE-918	PDFMathTranslate through 1.9.11 SSRF via Gradio Web GUI Link Input
CVE-2026-108580	6.9	—	phoenixthrush	AniWorld Downloader	CWE-307	AniWorld Downloader before 5.3.0 WebUI Login Brute Force via /login
CVE-2026-66481	6.8	—	Presto Player	Presto Player Pro	CWE-22	WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnera…
CVE-2026-108582	6.8	—	genspark-ai	GenOffice	CWE-732	GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store
CVE-2026-40808	6.5	—	Automattic	Jetpack VideoPress	CWE-862	WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
CVE-2026-62098	6.5	—	kutethemes	Boutique	CWE-94	WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability
CVE-2026-94590	6.5	—	CodePeople2	Sell Downloads	CWE-940	WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
CVE-2026-62035	6.3	—	upcasted	AWS S3 for WordPress Plugin – Upcasted	CWE-862	WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Acc…
CVE-2026-108592	6.0	—	SWE-agent	mini-swe-agent	CWE-526	mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnviro…
CVE-2026-108595	6.0	—	pulseaiclub	phi	CWE-863	Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir
CVE-2026-108596	6.0	—	openlit	openlit	CWE-639	OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header
CVE-2026-42419	5.9	—	SwishFolio	Swish Migrate and Backup	CWE-201	WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure …
CVE-2026-66435	5.9	—	Devin Walker	WP Rollback	CWE-201	WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability
CVE-2026-108591	5.9	—	innocommerce	InnoShop	CWE-73	InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool
CVE-2026-108597	5.9	—	cohere-ai	cohere-python	CWE-22	Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extra…
CVE-2026-108604	5.8	—	TabularisDB	tabularis	CWE-863	Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classifica…
CVE-2026-108599	5.7	—	pulseaiclub	phi	CWE-59	Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restriction Bypass
CVE-2026-108600	5.7	—	open-multi-agent	open-multi-agent	CWE-59	open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling …
CVE-2026-107434	5.4	—	videowhisper	MicroPayments	CWE-1284	WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability
CVE-2026-66480	5.3	—	YITH	YITH WooCommerce Product Add-Ons	CWE-497	WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data …
CVE-2026-107420	5.3	—	Narinder Singh	Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway	CWE-345	WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway …
CVE-2026-108114	5.3	—	strapi	strapi	CWE-863	Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field…
CVE-2026-108165	5.3	—	immich-app	immich	CWE-862	Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Fol…
CVE-2026-108585	5.3	—	argoproj-labs	argocd-mcp	CWE-22	argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
CVE-2026-108586	5.3	—	1mcp-app	@1mcp/agent	CWE-863	1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter
CVE-2026-108602	5.3	—	Helicone	helicone	CWE-918	Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution
CVE-2026-108605	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint
CVE-2026-108606	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById
CVE-2026-108607	5.3	—	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
CVE-2026-108608	5.3	—	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter
CVE-2026-108609	5.3	—	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter
CVE-2026-108610	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint
CVE-2026-108611	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint
CVE-2026-108612	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
CVE-2026-108613	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint
CVE-2026-108614	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls
CVE-2026-108615	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete
CVE-2026-108616	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch
CVE-2026-108617	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endp…
CVE-2026-108618	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit End…
CVE-2026-108619	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBa…
CVE-2026-108620	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch
CVE-2026-108621	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit
CVE-2026-108622	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint
CVE-2026-108624	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endp…
CVE-2026-108625	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint
CVE-2026-108626	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint
CVE-2026-108627	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint
CVE-2026-108629	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarul…
CVE-2026-108630	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit
CVE-2026-108631	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/de…
CVE-2026-108632	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryBy…
CVE-2026-108633	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add
CVE-2026-108634	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteB…
CVE-2026-108635	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint
CVE-2026-108636	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel
CVE-2026-108637	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint
CVE-2026-108638	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser
CVE-2026-108639	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}
CVE-2026-108640	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById
CVE-2026-108641	5.3	—	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne
CVE-2026-108642	5.3	—	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit
CVE-2026-108643	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch
CVE-2026-108644	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete
CVE-2026-108645	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit
CVE-2026-108646	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel
CVE-2026-108647	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel
CVE-2026-108649	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById
CVE-2026-108650	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet
CVE-2026-108651	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId
CVE-2026-108652	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar
CVE-2026-108653	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list
CVE-2026-108654	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById
CVE-2026-108655	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById
CVE-2026-108656	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers End…
CVE-2026-108658	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuth…
CVE-2026-108659	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenan…
CVE-2026-108660	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus
CVE-2026-108662	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPac…
CVE-2026-108663	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply
CVE-2026-108664	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById
CVE-2026-108665	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit
CVE-2026-108666	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch
CVE-2026-108667	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycl…
CVE-2026-108668	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycl…
CVE-2026-108669	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/…
CVE-2026-108670	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment
CVE-2026-108672	5.3	—	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
CVE-2026-108673	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls
CVE-2026-108674	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById
CVE-2026-108675	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop
CVE-2026-108676	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoad…
CVE-2026-108678	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles
CVE-2026-108679	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement
CVE-2026-108680	5.3	—	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnoun…
CVE-2026-108603	4.8	—	addsumtech	slide-maker	CWE-22	slide-maker through 5.8.0 Path Traversal via generate_images_openai.py
CVE-2026-103685	4.3	—	VillaTheme	ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce	CWE-862	WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce p…
CVE-2026-108115	2.3	—	kortix-ai	suna	CWE-918	Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses

Results continue: ranks 401–411.

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-10-10 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.