[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 409880
> CVE-2026-39772 [MEDIUM 5.3]
[PUBLISHED: 2026-10-06] [EPSS 0.36%]
Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.
> CVE-2026-39771 [HIGH 8.5]
[PUBLISHED: 2026-10-06] [EPSS 0.29%]
Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
> CVE-2026-39770 [CRITICAL 10.0]
[PUBLISHED: 2026-10-06] [EPSS 0.42%]
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
> CVE-2026-39769 [HIGH 7.5]
[PUBLISHED: 2026-10-06] [EPSS 0.49%]
Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.
> CVE-2026-39768 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.19%]
Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.
> CVE-2026-39767 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.41%]
Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.
> CVE-2026-39766 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.25%]
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.
> CVE-2026-39765 [HIGH 7.2]
[PUBLISHED: 2026-10-06] [EPSS 0.46%]
Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
> CVE-2026-39764 [CRITICAL 9.3]
[PUBLISHED: 2026-10-06] [EPSS 0.30%]
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments &amp; Services <= 1.0.19 versions.
> CVE-2026-39762 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.33%]
Unauthenticated Broken Access Control in Autoship Cloud for WooCommerce Subscription Products <= 2.17.0 versions.
> CVE-2026-39761 [CRITICAL 9.8]
[PUBLISHED: 2026-10-06] [EPSS 0.48%]
Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
> CVE-2026-39759 [CRITICAL 9.9]
[PUBLISHED: 2026-10-06] [EPSS 0.48%]
Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
> CVE-2026-39758 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.25%]
Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.
> CVE-2026-39757 [CRITICAL 9.9]
[PUBLISHED: 2026-10-06] [EPSS 0.48%]
Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.
> CVE-2026-39756 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.26%]
Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.
> CVE-2026-39755 [CRITICAL 9.9]
[PUBLISHED: 2026-10-06] [EPSS 0.45%]
Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.
> CVE-2026-39754 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.33%]
Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.
> CVE-2026-39753 [CRITICAL 9.8]
[PUBLISHED: 2026-10-06] [EPSS 0.45%]
Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
> CVE-2026-39752 [HIGH 7.7]
[PUBLISHED: 2026-10-06] [EPSS 0.45%]
Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.
> CVE-2026-39751 [HIGH 7.5]
[PUBLISHED: 2026-10-06] [EPSS 0.32%]
Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
> CVE-2026-39750 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.
> CVE-2026-39749 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.28%]
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
> CVE-2026-39748 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
> CVE-2026-39747 [HIGH 8.5]
[PUBLISHED: 2026-10-06] [EPSS 0.34%]
Subscriber SQL Injection in Woffice <= 5.4.35 versions.
> CVE-2026-39746 [CRITICAL 9.3]
[PUBLISHED: 2026-10-06] [EPSS 0.38%]
Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
> CVE-2026-39745 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
> CVE-2026-39731 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
> CVE-2026-39730 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.31%]
Subscriber Broken Access Control in Wise Chat <= 3.4.1 versions.
> CVE-2026-39729 [HIGH 7.2]
[PUBLISHED: 2026-10-06] [EPSS 0.34%]
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
> CVE-2026-39728 [HIGH 7.2]
[PUBLISHED: 2026-10-06] [EPSS 0.26%]
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
> CVE-2026-39727 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.21%]
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.
> CVE-2026-39726 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.
> CVE-2026-39725 [HIGH 8.8]
[PUBLISHED: 2026-10-06] [EPSS 0.74%]
Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.
> CVE-2026-39724 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.
> CVE-2026-39722 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
> CVE-2026-39720 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
> CVE-2026-39719 [HIGH 7.2]
[PUBLISHED: 2026-10-06] [EPSS 0.26%]
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
> CVE-2026-32581 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.27%]
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
> CVE-2026-32580 [HIGH 7.5]
[PUBLISHED: 2026-10-06] [EPSS 0.31%]
Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.
> CVE-2026-32579 [CRITICAL 10.0]
[PUBLISHED: 2026-10-06] [EPSS 0.49%]
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.
> CVE-2026-32578 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.31%]
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
> CVE-2026-32577 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
> CVE-2026-32575 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
> CVE-2026-32574 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.
> CVE-2026-32572 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
> CVE-2026-32571 [MEDIUM 6.5]
[PUBLISHED: 2026-10-06] [EPSS 0.21%]
Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
> CVE-2026-32570 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
> CVE-2026-32569 [HIGH 7.1]
[PUBLISHED: 2026-10-06] [EPSS 0.24%]
Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
> CVE-2026-32568 [CRITICAL 9.9]
[PUBLISHED: 2026-10-06] [EPSS 0.74%]
Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.
> CVE-2026-32557 [CRITICAL 9.3]
[PUBLISHED: 2026-10-06] [EPSS 0.38%]
Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.