[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93512 | 30 Sep 2026 | CVSS 7.1 | ilGhera JW Player for WordPressUnauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. | |
| CVE-2026-74865 | 30 Sep 2026 | CVSS 9.2 | YunoHost-Apps sogo_yhnsogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic… | |
| CVE-2026-76504 | 30 Sep 2026 | CVSS 9.8 | Authentication bypass gives admin access to Cisco SD-WAN ManagerA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker… | ExploitedFix |
| CVE-2026-62078 | 30 Sep 2026 | CVSS 6.5 | Leap13 Premium Addons for ElementorContributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. | |
| CVE-2026-62079 | 30 Sep 2026 | CVSS 6.5 | Qode Qi Addons For ElementorContributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions. | |
| CVE-2026-62080 | 30 Sep 2026 | CVSS 6.5 | Leevio Happy Addons for ElementorContributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions. | |
| CVE-2026-62081 | 30 Sep 2026 | CVSS 5.4 | wpdesk Flexible PDF CouponsContributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions. | |
| CVE-2026-62083 | 30 Sep 2026 | CVSS 5.4 | WPFunnels Creator LMSSubscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. | |
| CVE-2026-62085 | 30 Sep 2026 | CVSS 7.6 | Melapress WP Activity LogAdministrator SQL Injection in WP Activity Log <= 5.6.6 versions. | |
| CVE-2026-74864 | 30 Sep 2026 | CVSS 9.3 | YunoHost-Apps sogo_yhnsogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified… | |
| CVE-2026-103116 | 30 Sep 2026 | CVSS 6.3 | OS4ED openSIS-ClassicA weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the… | |
| CVE-2026-103117 | 30 Sep 2026 | CVSS 4.7 | OS4ED openSIS-ClassicA security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file… | |
| CVE-2026-103321 | 30 Sep 2026 | CVSS 8.3 | MISPMISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview image field was accepted and… | |
| CVE-2026-27085 | 30 Sep 2026 | CVSS 2.7 | Brainstorm Force Astra WordPress ThemeShop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. | |
| CVE-2026-27371 | 30 Sep 2026 | CVSS 7.1 | WPFunnelsUnauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. | |
| CVE-2026-102385 | 30 Sep 2026 | CVSS 7.1 | Kevin Stover Ninja FormsUnauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. | |
| CVE-2026-102386 | 30 Sep 2026 | CVSS 6.5 | Jacob N. Breetvelt WP Photo Album PlusSubscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions. | |
| CVE-2026-102395 | 30 Sep 2026 | CVSS 7.1 | supsystic Easy Google MapsUnauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions. | |
| CVE-2026-102396 | 30 Sep 2026 | CVSS 7.1 | supsystic Ultimate Maps by SupsysticUnauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions. | |
| CVE-2026-102398 | 30 Sep 2026 | CVSS 7.1 | supsystic Popup by SupsysticUnauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions. | |
| CVE-2026-102399 | 30 Sep 2026 | CVSS 5.4 | supsystic Photo Gallery by SupsysticUnauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions. | |
| CVE-2026-103115 | 30 Sep 2026 | CVSS 6.3 | OS4ED openSIS-ClassicA security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of… | |
| CVE-2026-102384 | 30 Sep 2026 | CVSS 5.9 | Supreme Modules LiteAuthor Cross Site Scripting (XSS) in Supreme Modules Lite <= 2.5.63 versions. | |
| CVE-2026-100508 | 30 Sep 2026 | CVSS 5.3 | WordPress.org Two FactorUnauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versions. | |
| CVE-2026-100513 | 30 Sep 2026 | CVSS 6.5 | Aman CF7 Views – Complete Entry Management for Contact Form 7Contributor Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.5 versions. | |
| CVE-2026-100507 | 30 Sep 2026 | CVSS 7.1 | If-So Dynamic Content PersonalizationImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content… | |
| CVE-2026-87830 | 30 Sep 2026 | CVSS 9.1 | Apache Software Foundation Apache WSS4JIn the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the… | |
| CVE-2026-88920 | 30 Sep 2026 | CVSS 9.8 | Apache Software Foundation Apache WSS4JAn authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages… | |
| CVE-2026-62146 | 30 Sep 2026 | CVSS 7.8 | Red Hat OpenShift Container Platform 4A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox… | |
| CVE-2026-85532 | 30 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache WSS4JApache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or… | |
| CVE-2026-103012 | 30 Sep 2026 | CVSS 2.0 | Anthropic @anthropic-ai/claude-codeClaude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the… | |
| CVE-2026-103114 | 30 Sep 2026 | CVSS 6.3 | OS4ED openSIS-ClassicA vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery_assignment of the file… | |
| CVE-2026-103242 | 30 Sep 2026 | CVSS 7.1 | Red Hat Enterprise Linux 10A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong… | |
| CVE-2026-10726 | 30 Sep 2026 | CVSS 6.8 | Cato Networks SDP ClientCato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows… | |
| CVE-2026-10739 | 30 Sep 2026 | CVSS 8.5 | Cato Networks SDP ClientCato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a… | |
| CVE-2026-96342 | 30 Sep 2026 | CVSS 6.9 | Amauri.IO WPMobile.AppMissing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App… | |
| CVE-2026-76992 | 30 Sep 2026 | CVSS 7.5 | CODESYS Development System 3The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An… | |
| CVE-2026-103113 | 30 Sep 2026 | CVSS 4.7 | OS4ED openSIS-ClassicA vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file… | |
| CVE-2026-103239 | 30 Sep 2026 | CVSS 8.6 | MISPMISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full… | |
| CVE-2026-13719 | 30 Sep 2026 | CVSS 4.3 | Grafana EnterpriseAn authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of… | |
| CVE-2026-13720 | 30 Sep 2026 | CVSS 5.4 | Grafana OSSAn Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating… | |
| CVE-2026-94029 | 30 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache MINA SSHDServer-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6… | |
| CVE-2026-94052 | 30 Sep 2026 | CVSS 9.1 | Apache Software Foundation Apache MINA SSHDA missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed… | |
| CVE-2026-94053 | 30 Sep 2026 | CVSS 9.1 | Apache Software Foundation Apache MINA SSHDAuthentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA… | |
| CVE-2026-77185 | 30 Sep 2026 | CVSS 9.1 | Apache Software Foundation Apache MINA SSHDAuthentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to… | |
| CVE-2026-79625 | 30 Sep 2026 | CVSS 8.1 | CODESYS Control RTE (SL)Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead… | |
| CVE-2026-93994 | 30 Sep 2026 | CVSS 8.1 | Apache Software Foundation Apache MINA SSHDApache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for… | |
| CVE-2026-93995 | 30 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache MINA SSHDImproper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for… | |
| CVE-2026-93996 | 30 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache MINA SSHDUncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java… | |
| CVE-2026-94002 | 30 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache MINA SSHDPossible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to… | |
| CVE-2026-103235 | 30 Sep 2026 | CVSS 8.7 | MISPMISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request… | |
| CVE-2026-103237 | 30 Sep 2026 | CVSS 8.3 | MISPMISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute… | |
| CVE-2026-10764 | 30 Sep 2026 | CVSS 8.7 | IQSIGHT BVMSInformation disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data. | |
| CVE-2026-102587 | 30 Sep 2026 | CVSS 2.7 | moodleA flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager… | Fix |
| CVE-2026-102588 | 30 Sep 2026 | CVSS 6.5 | moodleA flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an… | Fix |
| CVE-2026-75098 | 30 Sep 2026 | CVSS 7.5 | productdesignerapp Product Designer AppThe Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg'… | |
| CVE-2026-92712 | 30 Sep 2026 | CVSS 6.4 | rockiger ReactPress – Create React App for WordPressThe ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in… | |
| CVE-2026-93908 | 30 Sep 2026 | CVSS 6.4 | rameez_iqbal Real Estate Manager – Property Listing and Agent ManagementThe Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | |
| CVE-2026-97347 | 30 Sep 2026 | CVSS 7.2 | kazukiyanamoto Post Views Stats CounterThe Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and… | |
| CVE-2026-102580 | 30 Sep 2026 | CVSS 4.3 | moodleA flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component… | Fix |
| CVE-2026-102581 | 30 Sep 2026 | CVSS 5.4 | moodleA flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS)… | Fix |
| CVE-2026-102582 | 30 Sep 2026 | CVSS 4.3 | moodleA flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing… | Fix |
| CVE-2026-102583 | 30 Sep 2026 | CVSS 2.7 | moodleA flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows… | Fix |
| CVE-2026-102584 | 30 Sep 2026 | CVSS 4.3 | moodleA flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties… | Fix |
| CVE-2026-102585 | 30 Sep 2026 | CVSS 4.3 | moodleA flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected… | Fix |
| CVE-2026-102586 | 30 Sep 2026 | CVSS 6.1 | moodleA flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site… | Fix |
| CVE-2026-102509 | 30 Sep 2026 | CVSS 8.7 | Apache Software Foundation Apache PLC4XMemory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache… | |
| CVE-2026-102510 | 30 Sep 2026 | CVSS 8.7 | Apache Software Foundation Apache PLC4XInteger Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation… | |
| CVE-2026-102511 | 30 Sep 2026 | CVSS 8.5 | Apache Software Foundation Apache PLC4XImproper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X (PLC4Go) allows an attacker… | |
| CVE-2026-102577 | 30 Sep 2026 | CVSS 4.3 | moodleA flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated… | Fix |
| CVE-2026-102578 | 30 Sep 2026 | CVSS 8.8 | moodleA flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into… | Fix |
| CVE-2026-102579 | 30 Sep 2026 | CVSS 4.3 | moodleA flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of… | Fix |
| CVE-2026-102454 | 30 Sep 2026 | CVSS 7.2 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell… | |
| CVE-2026-102455 | 30 Sep 2026 | CVSS 9.8 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the… | |
| CVE-2026-102456 | 30 Sep 2026 | CVSS 6.5 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read… | |
| CVE-2026-102457 | 30 Sep 2026 | CVSS 6.5 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to… | |
| CVE-2026-102458 | 30 Sep 2026 | CVSS 9.8 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext… | |
| CVE-2026-102459 | 30 Sep 2026 | CVSS 6.1 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary… | |
| CVE-2025-14564 | 30 Sep 2026 | CVSS 6.4 | ahsangadit Viable URL Media UploaderThe Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and… | |
| CVE-2026-93464 | 30 Sep 2026 | CVSS 5.1 | baserCMS User Community baserCMSA stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary… | |
| CVE-2026-97150 | 30 Sep 2026 | CVSS 8.6 | baserCMS Users Community BcAddonMigratorWhen converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the… | |
| CVE-2026-92870 | 30 Sep 2026 | CVSS 8.7 | Pgpool Global Development Group Pgpool-IIA stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. | |
| CVE-2026-92871 | 30 Sep 2026 | CVSS 8.7 | Pgpool Global Development Group Pgpool-IIA NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the… | |
| CVE-2026-92872 | 30 Sep 2026 | CVSS 5.3 | Pgpool Global Development Group Pgpool-IIPgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. | |
| CVE-2026-92873 | 30 Sep 2026 | CVSS 6.9 | Pgpool Global Development Group Pgpool-IIPgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary… | |
| CVE-2026-93460 | 30 Sep 2026 | CVSS 5.1 | baserCMS User Community baserCMSA stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an… | |
| CVE-2026-93462 | 30 Sep 2026 | CVSS 6.9 | baserCMS User Community baserCMSA missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain… | |
| CVE-2026-93463 | 30 Sep 2026 | CVSS 5.1 | baserCMS User Community baserCMSA cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be… | |
| CVE-2026-6806 | 30 Sep 2026 | CVSS 7.5 | stylemix Motors – Car Dealership & Classified Listings PluginThe Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the… | |
| CVE-2026-88037 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the `bt_bb_service` shortcode in… | |
| CVE-2026-92867 | 30 Sep 2026 | CVSS 8.7 | Pgpool Global Development Group Pgpool-IIAn out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or… | |
| CVE-2026-92868 | 30 Sep 2026 | CVSS 6.9 | Pgpool Global Development Group Pgpool-IIAn improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate… | |
| CVE-2026-92869 | 30 Sep 2026 | CVSS 7.1 | Pgpool Global Development Group Pgpool-IIAn out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. | |
| CVE-2026-6170 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's… | |
| CVE-2026-6171 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the plugin's bt_bb_icon… | |
| CVE-2026-6172 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter of the plugin's bt_bb_image… | |
| CVE-2026-6173 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background_image' parameter of the plugin's… | |
| CVE-2026-11895 | 30 Sep 2026 | CVSS 6.4 | devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template BuilderThe HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data… | |
| CVE-2026-14876 | 30 Sep 2026 | CVSS 6.4 | nextendweb Smart Slider 3The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and… | |
| CVE-2026-16596 | 30 Sep 2026 | CVSS 6.5 | wpdirectorykit WP Directory KitThe WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'data_fields_list' parameter in all versions up to, and… |
Page 136 of 168