Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-120236 | medium | 6.3 | No | A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the compone... | 2026-11-02 |
| CVE-2026-66570 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file... | 2026-11-02 |
| CVE-2026-62048 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit a... | 2026-11-02 |
| CVE-2026-119480 | medium | 6.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder all... | 2026-11-02 |
| CVE-2026-120232 | high | 8.8 | No | A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the... | 2026-11-02 |
| CVE-2026-120228 | critical | 9.9 | No | A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the co... | 2026-11-02 |
| CVE-2026-120224 | critical | 9.9 | No | A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the c... | 2026-11-02 |
| CVE-2026-120198 | critical | 10.0 | No | A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. S... | 2026-11-02 |
| CVE-2026-120192 | medium | 5.3 | No | A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the compone... | 2026-11-02 |
| CVE-2026-120185 | medium | 4.7 | No | A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/control... | 2026-11-02 |
| CVE-2026-15272 | medium | 6.5 | No | The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions u... | 2026-11-02 |
| CVE-2026-96554 | medium | 6.4 | No | The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including... | 2026-11-02 |
| CVE-2026-76010 | high | 8.8 | No | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all version... | 2026-11-02 |
| CVE-2026-120114 | high | 7.2 | No | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'm... | 2026-11-02 |
| CVE-2026-116752 | medium | 6.4 | No | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Sc... | 2026-11-02 |
| CVE-2026-107711 | medium | 6.4 | No | The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... | 2026-11-02 |
| CVE-2026-104926 | medium | 6.1 | No | The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_start / _end' param... | 2026-11-02 |
| CVE-2026-100151 | medium | 6.1 | No | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Reflect... | 2026-11-02 |
| CVE-2026-120075 | high | 7.2 | No | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.6.1 due to ins... | 2026-11-02 |
| CVE-2026-119160 | medium | 6.4 | No | The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerable to Stored Cross-S... | 2026-11-02 |