Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105096 | medium | 6.3 | No | A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the componen... | 2026-10-06 |
| CVE-2026-104983 | medium | 6.3 | No | A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file shell/ev-window.c of... | 2026-10-06 |
| CVE-2026-92767 | medium | 6.4 | No | The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all ve... | 2026-10-06 |
| CVE-2026-92084 | critical | 9.1 | No | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in a... | 2026-10-06 |
| CVE-2026-97660 | high | 7.2 | No | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipar... | 2026-10-06 |
| CVE-2026-97343 | medium | 4.3 | No | The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Improper Authenticati... | 2026-10-06 |
| CVE-2026-96267 | high | 7.5 | No | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all... | 2026-10-06 |
| CVE-2026-94505 | high | 8.1 | No | The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all version... | 2026-10-06 |
| CVE-2026-93896 | medium | 6.1 | No | The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.1. T... | 2026-10-06 |
| CVE-2026-93889 | high | 7.2 | No | The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Me... | 2026-10-06 |
| CVE-2026-92974 | medium | 6.1 | No | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'thu... | 2026-10-06 |
| CVE-2026-87115 | critical | 9.1 | No | The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path va... | 2026-10-06 |
| CVE-2026-75028 | high | 7.5 | No | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all... | 2026-10-06 |
| CVE-2026-18443 | high | 8.8 | No | The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via th... | 2026-10-06 |
| CVE-2026-15795 | medium | 6.4 | No | The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode At... | 2026-10-06 |
| CVE-2026-11601 | medium | 5.3 | No | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authorization bypass in all... | 2026-10-06 |
| CVE-2026-104313 | medium | 6.1 | No | The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'rule_data' par... | 2026-10-06 |
| CVE-2026-103519 | medium | 5.4 | No | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3.... | 2026-10-06 |
| CVE-2026-103421 | medium | 5.4 | No | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path... | 2026-10-06 |
| CVE-2026-100157 | medium | 6.5 | No | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3.... | 2026-10-06 |