CVE-2026-47588 - NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause

CVE-2026-47587 - NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause

CVE-2026-47586 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where

CVE-2026-47585 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke

CVE-2026-47584 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke

CVE-2026-47583 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke

CVE-2026-47582 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke

CVE-2026-47581 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user cou

CVE-2026-47580 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke

CVE-2026-47579 - The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through

CVE-2026-47578 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an att

CVE-2026-47577 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke

CVE-2026-47576 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module through which an

CVE-2026-47575 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape han

CVE-2026-47574 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause inc

CVE-2026-47573 - NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds wri

CVE-2026-47572 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user c

CVE-2026-47571 - NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where

CVE-2026-47570 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker

CVE-2026-47569 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user c

CVE-2026-47568 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user c

CVE-2026-47567 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user

CVE-2026-47566 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri

CVE-2026-47565 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privil

CVE-2026-47563 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user c

CVE-2026-47562 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user c

CVE-2026-47561 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size

CVE-2026-47560 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri

CVE-2026-47559 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47558 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri

CVE-2026-47557 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri

CVE-2026-47556 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47555 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47554 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper

CVE-2026-47553 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47552 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri

CVE-2026-47551 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47550 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unp

CVE-2026-47549 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivile

CVE-2026-47548 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47547 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at

CVE-2026-47546 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at

CVE-2026-47545 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47544 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47543 - VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer whe

CVE-2026-47542 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47541 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47540 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47539 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47538 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at

CVE-2026-47537 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attac

CVE-2026-47536 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47535 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker

CVE-2026-47534 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47533 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47532 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47531 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47530 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47529 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attac

CVE-2026-47528 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at

CVE-2026-47527 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at

CVE-2026-47526 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at

CVE-2026-47525 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47524 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47523 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47522 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47521 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47520 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47519 - NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an

CVE-2026-47518 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller

CVE-2026-47517 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local

CVE-2026-47516 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user

CVE-2026-47515 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47514 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47513 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47512 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47511 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47510 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47509 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47508 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47507 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47506 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform pa

CVE-2026-47505 - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an att

CVE-2026-47504 - NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedd

CVE-2026-47503 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin

CVE-2026-47502 - NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode la

CVE-2026-47501 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user c

CVE-2026-47500 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh

CVE-2026-47499 - NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode la

CVE-2026-47498 - NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest

CVE-2026-47497 - NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing compon

CVE-2026-47496 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin

CVE-2026-47495 - NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode la

CVE-2026-47494 - NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a f

CVE-2026-47493 - NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a

CVE-2026-47492 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, w

CVE-2026-47491 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri

CVE-2026-47489 - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissi

CVE-2026-103470 - In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit

CVE-2026-103442 - External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaW

CVE-2026-103441 - Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase exten

CVE-2026-103436 - apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (u

CVE-2026-103432 - apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch

CVE-2026-103231 - A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-103230 - A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-103229 - A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e

CVE-2026-102427 - Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3

CVE-2026-100280 - In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was

CVE-2026-100279 - In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials

CVE-2026-100278 - In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other

CVE-2026-100277 - In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification

CVE-2026-100276 - In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility re

CVE-2026-100275 - In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was po

CVE-2026-100274 - In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification templat

CVE-2026-100273 - In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbit

CVE-2026-100272 - In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview

CVE-2026-100271 - In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authent

CVE-2026-100270 - In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integ

CVE-2026-100269 - In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypa

CVE-2026-100268 - In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other proj

CVE-2026-100267 - In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filt

CVE-2026-100266 - In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbit

CVE-2026-100265 - In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user co

CVE-2026-100264 - In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by chang

CVE-2026-100263 - In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possib

CVE-2026-100262 - In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project

CVE-2026-100261 - In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without

CVE-2026-100260 - In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a passwor

CVE-2026-100259 - In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by us

CVE-2026-100258 - In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read proj

CVE-2026-100257 - In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF ex

CVE-2026-100256 - In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible

CVE-2026-100255 - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possib

CVE-2026-100254 - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute command

CVE-2026-100253 - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution

CVE-2026-97259 - Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for W

CVE-2026-94545 - Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version

CVE-2026-76570 - Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTable

CVE-2026-62097 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-62084 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-47097 - AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows una

CVE-2026-18783 - Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Syste

CVE-2026-18782 - Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i

CVE-2026-103398 - OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifes

CVE-2026-103397 - OpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN relay requests, allowing unpai

CVE-2026-103396 - bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization

CVE-2026-103395 - LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pic

CVE-2026-103389 - MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. Th

CVE-2026-103388 - MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value

CVE-2026-103270 - LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without a

CVE-2026-103243 - LightLLM through 1.2.0 fails to validate image_url and audio_url parameters in multimodal endpoints,

CVE-2026-103227 - A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash

CVE-2026-103226 - A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_

CVE-2026-103222 - A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_deco

CVE-2026-102984 - Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter bui

CVE-2026-102983 - Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify a

CVE-2026-102717 - MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash

CVE-2026-101295 - Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirrori

CVE-2026-93903 - LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a ce

CVE-2026-93547 - A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an

CVE-2026-91860 - A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Com

CVE-2026-82307 - Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i

CVE-2026-103118 - A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the f

CVE-2026-97302 - Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.

CVE-2026-97301 - Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

CVE-2026-97299 - Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5

CVE-2026-97298 - Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions.

CVE-2026-97293 - Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

CVE-2026-97292 - Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

CVE-2026-97289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-97288 - Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.

CVE-2026-97287 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-97286 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-97285 - Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.

CVE-2026-97282 - Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.

CVE-2026-97279 - Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

CVE-2026-97274 - Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.

CVE-2026-97272 - Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13

CVE-2026-97271 - Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

CVE-2026-97270 - Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.

CVE-2026-97267 - Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.

CVE-2026-97266 - Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

CVE-2026-97262 - Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

CVE-2026-97261 - Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.

CVE-2026-97253 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-97250 - Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

CVE-2026-97249 - Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.

CVE-2026-97248 - Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions.

CVE-2026-97247 - Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.

CVE-2026-97246 - Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.

CVE-2026-97245 - Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

CVE-2026-97244 - Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

CVE-2026-97243 - Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

CVE-2026-97242 - Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.

CVE-2026-97241 - Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.

CVE-2026-97240 - Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.

CVE-2026-97239 - Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.

CVE-2026-97238 - Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

CVE-2026-97237 - Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

CVE-2026-97236 - Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

CVE-2026-97235 - Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

CVE-2026-97197 - Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.

CVE-2026-97079 - Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

CVE-2026-97078 - Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 2

CVE-2026-97077 - Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

CVE-2026-97074 - Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups

CVE-2026-97067 - Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

CVE-2026-97066 - Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

CVE-2026-97065 - Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

CVE-2026-96838 - Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Frau

CVE-2026-96837 - Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

CVE-2026-96836 - Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

CVE-2026-96835 - Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

CVE-2026-96834 - Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

CVE-2026-96833 - Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

CVE-2026-96832 - Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

CVE-2026-96831 - Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

CVE-2026-96830 - Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

CVE-2026-96829 - Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 v

CVE-2026-96828 - Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

CVE-2026-96827 - Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

CVE-2026-96825 - Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.

CVE-2026-96824 - Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

CVE-2026-96823 - Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

CVE-2026-96822 - Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

CVE-2026-96821 - Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

CVE-2026-96820 - Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

CVE-2026-96819 - Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

CVE-2026-96818 - Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versi

CVE-2026-96817 - Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.

CVE-2026-96816 - Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.

CVE-2026-96815 - Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

CVE-2026-96814 - Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.

CVE-2026-96450 - Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.

CVE-2026-96352 - Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

CVE-2026-96351 - Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

CVE-2026-96350 - Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.

CVE-2026-96349 - Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.

CVE-2026-96348 - Unauthenticated Broken Access Control in Bookly <= 28.2 versions.

CVE-2026-96347 - Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.

CVE-2026-96346 - Author SQL Injection in WP ERP <= 1.17.9 versions.

CVE-2026-96345 - Administrator SQL Injection in Estatik <= 4.3.5 versions.

CVE-2026-96344 - Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.

CVE-2026-96343 - Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.

CVE-2026-96338 - Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.

CVE-2026-95616 - An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An una

CVE-2026-95587 - Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.

CVE-2026-95531 - Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.

CVE-2026-94683 - Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.

CVE-2026-94681 - Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.