Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83490 | high | 8.5 | No | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-09-22 |
| CVE-2026-83491 | medium | 6.8 | No | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-09-22 |
| CVE-2026-87127 | high | 7.7 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87124 | high | 7.7 | No | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-09-22 |
| CVE-2026-95656 | high | 7.3 | No | A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add_watch_ui_snapshot of th... | 2026-09-22 |
| CVE-2026-95500 | high | 7.3 | No | A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file_put_contents of the... | 2026-09-22 |
| CVE-2026-95499 | high | 7.3 | No | A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_uploaded_file of the... | 2026-09-22 |
| CVE-2026-95273 | medium | 4.3 | No | A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function static_content of the file changedetec... | 2026-09-22 |
| CVE-2026-95272 | low | 3.7 | No | A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function static_content of the file changedetectioni... | 2026-09-22 |
| CVE-2026-95271 | high | 7.3 | No | A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function check_authentication of the... | 2026-09-22 |
| CVE-2026-95270 | low | 3.7 | No | A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function check_password of the file changedet... | 2026-09-22 |
| CVE-2026-94117 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notificat... | 2026-09-22 |
| CVE-2026-9231 | high | 7.5 | No | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versio... | 2026-09-22 |
| CVE-2026-93928 | high | 7.3 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authen... | 2026-09-22 |
| CVE-2026-15095 | medium | 4.9 | No | The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Director... | 2026-09-22 |
| CVE-2026-9004 | medium | 4.3 | No | The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,... | 2026-09-22 |
| CVE-2026-93836 | high | 7.2 | No | The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qty' parameter in all ver... | 2026-09-22 |
| CVE-2026-93778 | high | 7.2 | No | The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_downlo... | 2026-09-22 |
| CVE-2026-92969 | high | 8.1 | No | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, a... | 2026-09-22 |
| CVE-2026-92235 | high | 8.1 | No | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2.... | 2026-09-22 |