Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-95817 | high | 7.2 | No | The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and i... | 2026-10-02 |
| CVE-2026-94636 | not reported | — | No | Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of... | 2026-10-02 |
| CVE-2026-94541 | critical | 9.8 | No | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi... | 2026-10-02 |
| CVE-2026-94180 | medium | 4.3 | No | Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This i... | 2026-10-02 |
| CVE-2026-93880 | medium | 6.1 | No | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '{{GET:}}' Dynam... | 2026-10-02 |
| CVE-2026-91775 | not reported | — | No | LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying impor... | 2026-10-02 |
| CVE-2026-85476 | not reported | — | No | Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: be... | 2026-10-02 |
| CVE-2026-85209 | medium | 6.5 | No | Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) a... | 2026-10-02 |
| CVE-2026-87117 | not reported | — | No | NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommend... | 2026-10-02 |
| CVE-2026-86536 | not reported | — | No | Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings. T... | 2026-10-02 |
| CVE-2026-86535 | not reported | — | No | Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollut... | 2026-10-02 |
| CVE-2026-85088 | not reported | — | No | Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access... | 2026-10-02 |
| CVE-2026-85087 | not reported | — | No | Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thri... | 2026-10-02 |
| CVE-2026-85086 | not reported | — | No | Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This i... | 2026-10-02 |
| CVE-2026-91135 | not reported | — | No | Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the fram... | 2026-10-02 |
| CVE-2026-83745 | not reported | — | No | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and... | 2026-10-02 |
| CVE-2026-83663 | not reported | — | No | Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that... | 2026-10-02 |
| CVE-2026-82459 | not reported | — | No | Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects... | 2026-10-02 |
| CVE-2026-82458 | not reported | — | No | Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd,... | 2026-10-02 |
| CVE-2026-80298 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platfor... | 2026-10-02 |