Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-19513 | high | 8.1 | No | The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to in... | 2026-09-01 |
| CVE-2026-84061 | medium | 6.3 | No | A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function _validate_sql_safety... | 2026-09-01 |
| CVE-2026-7877 | medium | 6.4 | No | The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortco... | 2026-09-01 |
| CVE-2026-77194 | medium | 5.3 | No | The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up t... | 2026-09-01 |
| CVE-2026-84059 | high | 7.4 | No | A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the f... | 2026-09-01 |
| CVE-2026-19914 | high | 7.2 | No | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions up... | 2026-09-01 |
| CVE-2026-16788 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_project... | 2026-09-01 |
| CVE-2026-16786 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_testimo... | 2026-09-01 |
| CVE-2026-15101 | medium | 6.4 | No | The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to,... | 2026-09-01 |
| CVE-2026-83772 | critical | 9.9 | No | A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_repor... | 2026-09-01 |
| CVE-2026-75980 | medium | 6.4 | No | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scr... | 2026-09-01 |
| CVE-2026-75964 | medium | 6.1 | No | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored... | 2026-09-01 |
| CVE-2026-18488 | medium | 6.4 | No | The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)... | 2026-09-01 |
| CVE-2026-83743 | medium | 6.3 | No | A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the... | 2026-09-01 |
| CVE-2026-77823 | medium | 4.9 | No | The LearnPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the export_order_csv AJAX action in versio... | 2026-09-01 |
| CVE-2026-75965 | medium | 6.4 | No | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored... | 2026-09-01 |
| CVE-2026-75921 | high | 7.2 | No | The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for Wor... | 2026-09-01 |
| CVE-2026-19952 | high | 7.5 | No | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in t... | 2026-09-01 |
| CVE-2026-19948 | medium | 5.3 | No | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to au... | 2026-09-01 |
| CVE-2026-19796 | high | 7.2 | No | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... | 2026-09-01 |