Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104417 | medium | 4.9 | No | Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administ... | 2026-10-02 |
| CVE-2026-104415 | low | 3.1 | No | Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine... | 2026-10-02 |
| CVE-2026-104413 | high | 7.3 | No | Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to hos... | 2026-10-02 |
| CVE-2026-59668 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59667 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59666 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59673 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59672 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59665 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-39444 | medium | 5.4 | No | Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorre... | 2026-10-02 |
| CVE-2026-39439 | medium | 6.5 | No | Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Lev... | 2026-10-02 |
| CVE-2026-32584 | medium | 5.3 | No | Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export... | 2026-10-02 |
| CVE-2026-104638 | medium | 5.3 | No | A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The i... | 2026-10-02 |
| CVE-2026-104637 | high | 7.3 | No | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected elem... | 2026-10-02 |
| CVE-2026-93875 | high | 7.2 | No | The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to,... | 2026-10-02 |
| CVE-2026-104614 | medium | 6.3 | No | A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /S... | 2026-10-02 |
| CVE-2026-104613 | medium | 6.3 | No | A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /Simp... | 2026-10-02 |
| CVE-2026-27872 | not reported | — | No | - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects Easy IO FG: before 2.... | 2026-10-02 |
| CVE-2026-58567 | high | 8.8 | No | Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this... | 2026-10-02 |
| CVE-2026-79682 | high | 8.8 | No | Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vul... | 2026-10-02 |