Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-16788 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_project... | 2026-09-01 |
| CVE-2026-16786 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_testimo... | 2026-09-01 |
| CVE-2026-15101 | medium | 6.4 | No | The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to,... | 2026-09-01 |
| CVE-2026-83772 | critical | 9.9 | No | A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_repor... | 2026-09-01 |
| CVE-2026-75980 | medium | 6.4 | No | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scr... | 2026-09-01 |
| CVE-2026-75964 | medium | 6.1 | No | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored... | 2026-09-01 |
| CVE-2026-18488 | medium | 6.4 | No | The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)... | 2026-09-01 |
| CVE-2026-83743 | medium | 6.3 | No | A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the... | 2026-09-01 |
| CVE-2026-77823 | medium | 4.9 | No | The LearnPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the export_order_csv AJAX action in versio... | 2026-09-01 |
| CVE-2026-75965 | medium | 6.4 | No | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored... | 2026-09-01 |
| CVE-2026-75921 | high | 7.2 | No | The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for Wor... | 2026-09-01 |
| CVE-2026-19952 | high | 7.5 | No | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in t... | 2026-09-01 |
| CVE-2026-19948 | medium | 5.3 | No | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to au... | 2026-09-01 |
| CVE-2026-19796 | high | 7.2 | No | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... | 2026-09-01 |
| CVE-2026-19573 | high | 7.2 | No | The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all... | 2026-09-01 |
| CVE-2026-18752 | medium | 6.5 | No | The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppl_device_id' Cookie in all versions up to, and incl... | 2026-09-01 |
| CVE-2026-17589 | medium | 4.9 | No | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'product_order' parameter in all ver... | 2026-09-01 |
| CVE-2026-13203 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_id' sho... | 2026-09-01 |
| CVE-2026-12747 | medium | 6.4 | No | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all vers... | 2026-09-01 |
| CVE-2026-75865 | critical | 9.8 | No | The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbi... | 2026-09-01 |