Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87404 | high | 7.5 | No | Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). Supported versions that are affected are 12.2.3-... | 2026-10-21 |
| CVE-2026-87403 | high | 7.1 | No | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are... | 2026-10-21 |
| CVE-2026-87402 | high | 7.3 | No | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are... | 2026-10-21 |
| CVE-2026-101808 | critical | 9.1 | No | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected ar... | 2026-10-21 |
| CVE-2026-101767 | critical | 9.8 | No | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are aff... | 2026-10-21 |
| CVE-2026-85683 | high | 8.8 | No | The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by... | 2026-10-21 |
| CVE-2026-14556 | medium | 5.4 | No | The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embedding it in the form... | 2026-10-21 |
| CVE-2026-107447 | medium | 5.3 | No | The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity used to enforce its one-vote-per-entry re... | 2026-10-21 |
| CVE-2026-105256 | medium | 5.3 | No | The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking ag... | 2026-10-21 |
| CVE-2026-104642 | low | 2.7 | No | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set,... | 2026-10-21 |
| CVE-2026-104641 | medium | 5.3 | No | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the s... | 2026-10-21 |
| CVE-2026-103301 | medium | 5.3 | No | The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notifications, because th... | 2026-10-21 |
| CVE-2026-101138 | medium | 5.3 | No | The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whit... | 2026-10-21 |
| CVE-2026-96901 | low | 3.7 | No | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the integrity of its cart-recovery token before... | 2026-10-21 |
| CVE-2026-92999 | medium | 5.3 | No | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler,... | 2026-10-21 |
| CVE-2026-92998 | high | 8.6 | No | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER... | 2026-10-21 |
| CVE-2026-92997 | high | 8.6 | No | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column... | 2026-10-21 |
| CVE-2026-88784 | high | 7.5 | No | The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting link... | 2026-10-21 |
| CVE-2026-87838 | medium | 6.5 | No | The Wava Payment Plugin WordPress plugin before 0.3.10 does not perform any authorisation, nonce or origin verification on one of its public... | 2026-10-21 |
| CVE-2026-87837 | medium | 5.3 | No | The Wava Payment Plugin WordPress plugin before 0.3.10 does not verify the authenticity of incoming payment-provider notifications, nor rest... | 2026-10-21 |