[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 412463
> CVE-2026-97246 [MEDIUM 4.9]
[PUBLISHED: 2026-09-30] [EPSS 0.21%]
Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.
> CVE-2026-97245 [HIGH 7.2]
[PUBLISHED: 2026-09-30] [EPSS 0.34%]
Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.
> CVE-2026-97244 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.30%]
Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
> CVE-2026-97243 [MEDIUM 5.4]
[PUBLISHED: 2026-09-30] [EPSS 0.22%]
Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.
> CVE-2026-97242 [MEDIUM 6.8]
[PUBLISHED: 2026-09-30] [EPSS 0.36%]
Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.
> CVE-2026-97241 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.30%]
Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.
> CVE-2026-97240 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.30%]
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.
> CVE-2026-97239 [MEDIUM 6.5]
[PUBLISHED: 2026-09-30] [EPSS 0.28%]
Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.
> CVE-2026-97238 [MEDIUM 5.5]
[PUBLISHED: 2026-09-30] [EPSS 0.17%]
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
> CVE-2026-97237 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
> CVE-2026-97236 [MEDIUM 6.5]
[PUBLISHED: 2026-09-30] [EPSS 0.21%]
Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
> CVE-2026-97235 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
> CVE-2026-97197 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.29%]
Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.
> CVE-2026-97079 [MEDIUM 4.3]
[PUBLISHED: 2026-09-30] [EPSS 0.28%]
Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.
> CVE-2026-97078 [MEDIUM 5.3]
[PUBLISHED: 2026-09-30] [EPSS 0.23%]
Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.
> CVE-2026-97077 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.20%]
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.
> CVE-2026-97074 [MEDIUM 4.3]
[PUBLISHED: 2026-09-30] [EPSS 0.25%]
Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.
> CVE-2026-97067 [MEDIUM 6.5]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.
> CVE-2026-97066 [MEDIUM 5.3]
[PUBLISHED: 2026-09-30] [EPSS 0.23%]
Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.
> CVE-2026-97065 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.
> CVE-2026-96838 [HIGH 8.8]
[PUBLISHED: 2026-09-30] [EPSS 0.14%]
Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.
> CVE-2026-96837 [HIGH 8.8]
[PUBLISHED: 2026-09-30] [EPSS 0.54%]
Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.
> CVE-2026-96836 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.20%]
Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.
> CVE-2026-96835 [MEDIUM 6.5]
[PUBLISHED: 2026-09-30] [EPSS 0.16%]
Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.
> CVE-2026-96834 [MEDIUM 6.5]
[PUBLISHED: 2026-09-30] [EPSS 0.33%]
Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.
> CVE-2026-96833 [HIGH 7.2]
[PUBLISHED: 2026-09-30] [EPSS 0.40%]
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.
> CVE-2026-96832 [HIGH 7.2]
[PUBLISHED: 2026-09-30] [EPSS 0.37%]
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
> CVE-2026-96831 [HIGH 8.8]
[PUBLISHED: 2026-09-30] [EPSS 0.36%]
Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.
> CVE-2026-96830 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.20%]
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.
> CVE-2026-96829 [MEDIUM 6.5]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.
> CVE-2026-96828 [HIGH 7.6]
[PUBLISHED: 2026-09-30] [EPSS 0.28%]
Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.
> CVE-2026-96827 [HIGH 7.6]
[PUBLISHED: 2026-09-30] [EPSS 0.28%]
Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.
> CVE-2026-96825 [MEDIUM 4.2]
[PUBLISHED: 2026-09-30] [EPSS 0.20%]
Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.
> CVE-2026-96824 [MEDIUM 6.8]
[PUBLISHED: 2026-09-30] [EPSS 0.39%]
Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.
> CVE-2026-96823 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.32%]
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.
> CVE-2026-96822 [CRITICAL 9.3]
[PUBLISHED: 2026-09-30] [EPSS 0.29%]
Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.
> CVE-2026-96821 [MEDIUM 6.3]
[PUBLISHED: 2026-09-30] [EPSS 0.25%]
Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.
> CVE-2026-96820 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.24%]
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
> CVE-2026-96819 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.24%]
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
> CVE-2026-96818 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.25%]
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
> CVE-2026-96817 [HIGH 8.2]
[PUBLISHED: 2026-09-30] [EPSS 0.37%]
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
> CVE-2026-96816 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.
> CVE-2026-96815 [HIGH 7.2]
[PUBLISHED: 2026-09-30] [EPSS 0.32%]
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
> CVE-2026-96814 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.
> CVE-2026-96450 [MEDIUM 5.4]
[PUBLISHED: 2026-09-30] [EPSS 0.16%]
Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.
> CVE-2026-96352 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
> CVE-2026-96351 [HIGH 7.1]
[PUBLISHED: 2026-09-30] [EPSS 0.18%]
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
> CVE-2026-96350 [CRITICAL 9.8]
[PUBLISHED: 2026-09-30] [EPSS 0.45%]
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
> CVE-2026-96349 [CRITICAL 10.0]
[PUBLISHED: 2026-09-30] [EPSS 0.60%]
Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.
> CVE-2026-96348 [HIGH 7.5]
[PUBLISHED: 2026-09-30] [EPSS 0.27%]
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.