Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-115840 | high | 7.2 | No | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poplink' parameter in... | 2026-11-02 |
| CVE-2026-111254 | high | 7.2 | No | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and... | 2026-11-02 |
| CVE-2026-111109 | medium | 6.1 | No | The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a webmention source... | 2026-11-02 |
| CVE-2026-107765 | medium | 6.4 | No | The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and inclu... | 2026-11-02 |
| CVE-2026-107750 | high | 7.2 | No | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_address.... | 2026-11-02 |
| CVE-2026-107653 | high | 7.2 | No | The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPre... | 2026-11-02 |
| CVE-2026-116563 | medium | 5.4 | No | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scriptin... | 2026-11-02 |
| CVE-2026-116520 | high | 7.2 | No | The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment / shortcode attribute d... | 2026-11-02 |
| CVE-2026-109997 | high | 7.2 | No | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Stored... | 2026-11-02 |
| CVE-2026-109234 | high | 7.2 | No | The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in... | 2026-11-02 |
| CVE-2026-100155 | medium | 6.5 | No | The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to arb... | 2026-11-02 |
| CVE-2026-68590 | medium | 5.3 | No | In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE h... | 2026-11-02 |
| CVE-2026-68588 | medium | 5.3 | No | In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has co... | 2026-11-02 |
| CVE-2026-20600 | medium | 5.3 | No | In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to... | 2026-11-02 |
| CVE-2026-20598 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connec... | 2026-11-02 |
| CVE-2026-20597 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has con... | 2026-11-02 |
| CVE-2026-20596 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has... | 2026-11-02 |
| CVE-2026-20594 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has con... | 2026-11-02 |
| CVE-2026-20593 | medium | 5.3 | No | In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has c... | 2026-11-02 |
| CVE-2026-20592 | medium | 4.1 | No | In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclo... | 2026-11-02 |