Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91286 | high | 8.2 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-11-02 |
| CVE-2026-118168 | medium | 5.3 | No | The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthent... | 2026-11-02 |
| CVE-2026-113482 | medium | 6.8 | No | The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribut... | 2026-11-02 |
| CVE-2026-113481 | medium | 4.3 | No | The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing... | 2026-11-02 |
| CVE-2026-107343 | medium | 4.3 | No | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check on its test-email h... | 2026-11-02 |
| CVE-2026-94361 | medium | 5.3 | No | The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notificati... | 2026-11-02 |
| CVE-2026-82214 | medium | 5.3 | No | The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details t... | 2026-11-02 |
| CVE-2026-118638 | high | 7.5 | No | The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowi... | 2026-11-02 |
| CVE-2026-118629 | medium | 5.3 | No | The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering it on its player pag... | 2026-11-02 |
| CVE-2026-118438 | medium | 6.8 | No | The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing them in the browser,... | 2026-11-02 |
| CVE-2026-118437 | low | 3.7 | No | The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachments, allowing unauth... | 2026-11-02 |
| CVE-2026-118185 | high | 7.5 | No | The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for... | 2026-11-02 |
| CVE-2026-118184 | medium | 5.3 | No | The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in t... | 2026-11-02 |
| CVE-2026-118043 | high | 7.2 | No | The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, all... | 2026-11-02 |
| CVE-2026-110808 | medium | 4.2 | No | The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts creat... | 2026-11-02 |
| CVE-2026-110042 | medium | 4.9 | No | The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configurat... | 2026-11-02 |
| CVE-2026-120349 | high | 7.3 | No | A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www... | 2026-11-02 |
| CVE-2026-120344 | critical | 10.0 | No | A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /bin/ioos of the... | 2026-11-02 |
| CVE-2026-120341 | high | 7.3 | No | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentde... | 2026-11-02 |
| CVE-2026-120340 | low | 3.7 | No | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the component Globa... | 2026-11-02 |