[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 409324
> CVE-2026-62118 [HIGH 7.3]
[PUBLISHED: 2026-10-10] [EPSS 0.22%]
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
> CVE-2026-62117 [HIGH 8.5]
[PUBLISHED: 2026-10-10] [EPSS 0.28%]
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
> CVE-2026-62116 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
> CVE-2026-62115 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.28%]
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
> CVE-2026-62100 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
> CVE-2026-62099 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.28%]
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
> CVE-2026-62098 [MEDIUM 6.5]
[PUBLISHED: 2026-10-10] [EPSS 0.21%]
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
> CVE-2026-62096 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.28%]
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
> CVE-2026-62095 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
> CVE-2026-62094 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.28%]
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
> CVE-2026-62093 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
> CVE-2026-62092 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.28%]
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
> CVE-2026-62091 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
> CVE-2026-62090 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
> CVE-2026-62087 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
> CVE-2026-62086 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
> CVE-2026-62082 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.
> CVE-2026-62077 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
> CVE-2026-62076 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
> CVE-2026-62075 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
> CVE-2026-62074 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
> CVE-2026-62070 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
> CVE-2026-62069 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
> CVE-2026-62068 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
> CVE-2026-62067 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.
> CVE-2026-62066 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Volos <= 1.2 versions.
> CVE-2026-62065 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
> CVE-2026-62064 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
> CVE-2026-62054 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
> CVE-2026-62053 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
> CVE-2026-62052 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
> CVE-2026-62051 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
> CVE-2026-62050 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.39%]
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
> CVE-2026-62043 [HIGH 7.5]
[PUBLISHED: 2026-10-10] [EPSS 0.30%]
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
> CVE-2026-62038 [HIGH 7.3]
[PUBLISHED: 2026-10-10] [EPSS 0.27%]
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
> CVE-2026-62037 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
> CVE-2026-62035 [MEDIUM 6.3]
[PUBLISHED: 2026-10-10] [EPSS 0.25%]
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
> CVE-2026-62034 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
> CVE-2026-62033 [HIGH 7.6]
[PUBLISHED: 2026-10-10] [EPSS 0.30%]
Subscriber Settings Change in uListing <= 2.2.0 versions.
> CVE-2026-62032 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
> CVE-2026-62031 [CRITICAL 9.3]
[PUBLISHED: 2026-10-10] [EPSS 0.29%]
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
> CVE-2026-62030 [HIGH 7.2]
[PUBLISHED: 2026-10-10] [EPSS 0.19%]
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
> CVE-2026-62027 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
> CVE-2026-62025 [CRITICAL 9.0]
[PUBLISHED: 2026-10-10] [EPSS 0.29%]
Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.
> CVE-2026-62024 [CRITICAL 9.9]
[PUBLISHED: 2026-10-10] [EPSS 0.45%]
Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.
> CVE-2026-62022 [CRITICAL 9.8]
[PUBLISHED: 2026-10-10] [EPSS 0.33%]
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
> CVE-2026-62021 [HIGH 8.8]
[PUBLISHED: 2026-10-10] [EPSS 0.48%]
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
> CVE-2026-62020 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
> CVE-2026-57742 [HIGH 7.1]
[PUBLISHED: 2026-10-10] [EPSS 0.15%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.
> CVE-2026-48194 [HIGH 8.1]
[PUBLISHED: 2026-10-10] [EPSS 0.35%]
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.