Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-109388 | medium | 6.4 | No | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... | 2026-10-16 |
| CVE-2026-109382 | medium | 6.5 | No | The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9... | 2026-10-16 |
| CVE-2026-109513 | high | 7.2 | No | The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification... | 2026-10-16 |
| CVE-2026-109447 | high | 8.1 | No | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privile... | 2026-10-16 |
| CVE-2026-109414 | medium | 6.5 | No | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / sr... | 2026-10-16 |
| CVE-2026-109232 | high | 7.2 | No | The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Script... | 2026-10-16 |
| CVE-2026-109515 | critical | 9.8 | No | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege E... | 2026-10-16 |
| CVE-2026-109512 | medium | 6.4 | No | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and incl... | 2026-10-16 |
| CVE-2026-109224 | high | 7.2 | No | The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPre... | 2026-10-16 |
| CVE-2026-109193 | high | 7.2 | No | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... | 2026-10-16 |
| CVE-2026-109191 | medium | 4.3 | No | The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Ex... | 2026-10-16 |
| CVE-2026-109207 | high | 7.2 | No | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Store... | 2026-10-16 |
| CVE-2026-108497 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL In... | 2026-10-16 |
| CVE-2026-107918 | medium | 4.5 | No | Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected t... | 2026-10-16 |
| CVE-2026-107917 | medium | 4.5 | No | Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected... | 2026-10-16 |
| CVE-2026-107648 | high | 7.2 | No | The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action (also funct... | 2026-10-16 |
| CVE-2026-107649 | medium | 5.4 | No | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versi... | 2026-10-16 |
| CVE-2026-107770 | medium | 6.8 | No | The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi... | 2026-10-16 |
| CVE-2026-107768 | high | 7.2 | No | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... | 2026-10-16 |
| CVE-2026-107646 | medium | 5.3 | No | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all version... | 2026-10-16 |