Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-96660 |
7.2 (3.1)
|
User Registration & Membership <= 5.2.8 - Unauthentica… |
wpeverest |
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder |
2026-10-17T03:43:28.389Z | 2026-10-17T03:43:28.389Z |
| CVE-2026-92978 |
4.3 (3.1)
|
User Registration & Membership <= 5.2.8 - Cross-Site R… |
wpeverest |
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder |
2026-10-17T03:43:29.067Z | 2026-10-17T03:43:29.067Z |
| CVE-2026-92798 |
8.1 (3.1)
|
User Registration & Membership <= 5.2.8 - Authenticate… |
wpeverest |
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder |
2026-10-17T03:43:31.068Z | 2026-10-17T03:43:31.068Z |
| CVE-2026-92715 |
4.3 (3.1)
|
Tutor LMS <= 4.1.0 - Insecure Direct Object Reference … |
themeum |
Tutor LMS – eLearning and online course solution |
2026-10-17T03:43:27.343Z | 2026-10-17T03:43:27.343Z |
| CVE-2026-111726 |
6.4 (3.1)
|
Themify Builder <= 7.8.2 - Authenticated (Contributor+… |
themifyme |
Themify Builder |
2026-10-17T03:43:29.731Z | 2026-10-17T03:43:29.731Z |
| CVE-2026-110268 |
4.9 (3.1)
|
Post Export Import with Media <= 1.17.2 - Authenticate… |
wpazleen |
Post Export Import with Media |
2026-10-17T03:43:26.196Z | 2026-10-17T03:43:26.196Z |
| CVE-2026-109989 |
6.4 (3.1)
|
Themify Popup <= 1.4.7 - Authenticated (Author+) Store… |
themifyme |
Themify Popup |
2026-10-17T03:43:30.393Z | 2026-10-17T03:43:30.393Z |
| CVE-2026-109985 |
6.4 (3.1)
|
xSpeed Cache: AI-Powered Performance Hub with MCP, Cac… |
wpdevteam |
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN |
2026-10-17T03:43:26.663Z | 2026-10-17T03:43:26.663Z |
| CVE-2026-109369 |
6.8 (3.1)
|
WP Booking System <= 2.1.0.3 - Missing Authorization t… |
murgroland |
WP Booking System – Booking Calendar |
2026-10-17T03:43:28.717Z | 2026-10-17T03:43:28.717Z |
| CVE-2026-109368 |
6.5 (3.1)
|
WP Booking System <= 2.1.0.3 - Missing Authorization t… |
murgroland |
WP Booking System – Booking Calendar |
2026-10-17T03:43:27.683Z | 2026-10-17T03:43:27.683Z |
| CVE-2026-108123 |
7.5 (3.1)
|
WP Booking System <= 2.1.0.3 - Missing Authorization t… |
murgroland |
WP Booking System – Booking Calendar |
2026-10-17T03:43:29.401Z | 2026-10-17T03:43:29.401Z |
| CVE-2026-107752 |
4.9 (3.1)
|
Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+)… |
uscnanbu |
Welcart e-Commerce |
2026-10-17T03:43:27.014Z | 2026-10-17T03:43:27.014Z |
| CVE-2026-107744 |
6.5 (3.1)
|
LearnPress <= 4.4.10 - Missing Authorization to Authen… |
thimpress |
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses |
2026-10-17T03:43:30.064Z | 2026-10-17T03:43:30.064Z |
| CVE-2026-104736 |
9.8 (3.1)
|
LearnPress <= 4.4.10 - Unauthenticated PHP Object Inje… |
thimpress |
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses |
2026-10-17T03:43:28.046Z | 2026-10-17T03:43:28.046Z |
| CVE-2026-103899 |
7.2 (3.1)
|
EU VAT Assistant for WooCommerce <= 2.1.30.260413 - Un… |
daigo75 |
EU VAT Assistant for WooCommerce |
2026-10-17T03:43:30.740Z | 2026-10-17T03:43:30.740Z |
| CVE-2026-111602 |
3.7 (3.1)
|
Appointment Booking Plugin <= 5.7.4 - Unauthenticated … |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-17T02:31:07.048Z | 2026-10-17T02:31:07.048Z |
| CVE-2026-111601 |
6.1 (3.1)
|
Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflecte… |
hippooo |
Hippoo Mobile App for WooCommerce |
2026-10-17T02:31:06.019Z | 2026-10-17T02:31:06.019Z |
| CVE-2026-110653 |
9.1 (3.1)
|
Appointment Booking Plugin <= 5.7.4 - Unauthenticated … |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-17T02:31:06.697Z | 2026-10-17T02:31:06.697Z |
| CVE-2026-109208 |
7.2 (3.1)
|
LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Si… |
thimpress |
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses |
2026-10-17T02:31:06.356Z | 2026-10-17T02:31:06.356Z |
| CVE-2026-107763 |
4.3 (3.1)
|
Fastcache by Host.it <= 1.7.5 - Missing Authorization … |
hostspa |
Fastcache by Host.it |
2026-10-17T02:31:04.849Z | 2026-10-17T02:31:04.849Z |
| CVE-2026-107762 |
7.5 (3.1)
|
Kirki <= 6.3.2 - Insecure Direct Object Reference to U… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-17T02:31:05.352Z | 2026-10-17T02:31:05.352Z |
| CVE-2026-104734 |
7.2 (3.1)
|
Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Ob… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-17T02:31:05.687Z | 2026-10-17T02:31:05.687Z |
| CVE-2026-111855 |
7.5 (3.1)
|
An issue was discovered on Tektronix 3 Series MDO… |
Tektronix |
3 Series MDO |
2026-10-17T02:09:21.352Z | 2026-10-17T02:09:21.352Z |
| CVE-2026-111854 |
8.1 (3.1)
|
An issue was discovered on Tektronix 3 Series MDO… |
Tektronix |
3 Series MDO |
2026-10-17T02:08:50.037Z | 2026-10-17T02:08:50.037Z |
| CVE-2026-111853 |
8.8 (3.1)
|
An issue was discovered on Tektronix 3 Series MDO… |
Tektronix |
3 Series MDO |
2026-10-17T02:08:13.787Z | 2026-10-17T02:08:13.787Z |
| CVE-2026-111823 |
9.8 (3.1)
|
Mage OSS through 0.9.80 before 76c4f46 can procee… |
Mage |
mage-ai |
2026-10-16T23:16:29.244Z | 2026-10-16T23:16:29.244Z |
| CVE-2026-89096 |
5.9 (3.1)
|
Nfs-utils: nfs-utils: denial of service via memory lea… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T23:06:19.924Z | 2026-10-16T23:06:19.924Z |
| CVE-2026-89088 |
5.5 (3.1)
|
Parted: parted: denial of service via heap buffer over… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T23:06:18.907Z | 2026-10-16T23:06:18.907Z |
| CVE-2026-89085 |
6.6 (3.1)
|
Parted: parted: heap-based buffer overflow via crafted… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T23:04:28.673Z | 2026-10-16T23:04:28.673Z |
| CVE-2026-17591 |
3.6 (3.1)
|
Libarchive: libarchive: use-after-free via aliased mac… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T22:03:40.603Z | 2026-10-16T22:03:40.603Z |