CVEs published October 31, 2026
113 CVEs were published on October 31, 2026: 13 critical, 45 high. 1 is now in CISA KEV. 6 early warnings were posted.
- Published
- 113
- Critical
- 13
- High
- 45
- Medium
- 52
- Low
- 1
- Unrated
- 2
- Now in CISA KEV
- 1
- Fix available
- 32
- Early warnings
- 6
Most affected products
- WebDyne
- 5
- konflux-ci
- 4
- kstover Ninja Forms – Contact Form Builder with Calculators…
- 4
- boldgrid W3 Total Cache
- 2
- e4jvikwp VikRentCar Car Rental Management System
- 2
- GNOME Epiphany
- 2
- smub Photo Gallery, Sliders, Proofing and Themes – NextGEN…
- 2
- Thelia
- 2
- uscnanbu Welcart e-Commerce
- 2
- wedevs User Frontend – Membership, User Registration, User…
- 2
Early warnings 6
- SZB-2884815801Japan Airlines says Amadeus passenger system breach exposed about 92,000 customersAmadeus · Passenger Service System
- SZB-a4df36c045Northflank warns breach led to unauthorized use of customers' AI API keysNorthflank cloud hosting platform
- SZB-34aa303ce5BleepingComputer reports public exploit for patched Android flaw CVE-2026-58882Google · Android
- SZB-7d756337c8Chainalysis confirms intrusion exposing non-sensitive customer dataChainalysis · KYT
- SZB-7b2beadb7bMalicious Claude Code extension distributed in Cursor supply chain attackCursor · Claude Code-branded extension
- SZB-31aa1da420CISA adds two Ivanti Connect Secure flaws to KEV after active exploitationIvanti Connect Secure
Critical 13
- CVE-2026-115946XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoderXS-libbrotli
- CVE-2026-118636Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoderApache Software Foundation org.apache.mina:mina-core
- CVE-2026-120209AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Tokenanji-plus AJ-Report
- CVE-2026-120201Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Headerdromara Jpom
- CVE-2026-78191WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pagesWebDyne
- CVE-2026-78189WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route…WebDyne
- CVE-2026-103882Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' ParameterAcadlix LMS – AI Quiz Maker, Online Exam & Course Plugin fo…
- CVE-2026-118235SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_datawpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Po…
- CVE-2026-116512Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injectionwedevs Project Manager – AI Powered Project Management, Tas…
- CVE-2026-119096Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameteruncannyowl Uncanny Toolkit for LearnDash
- CVE-2026-116557WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note…murgroland WP Booking System – Booking Calendar
- CVE-2026-109220PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via…addonsorg PDF Invoice for WooCommerce + Drag and Drop Templ…
- CVE-2026-89270Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id'…popupbuilder Popup Builder – Create highly converting, mobi…
High 45
- CVE-2026-120135Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by defaultApache Software Foundation org.apache.thrift:libthrift
- CVE-2026-118147Visual Studio Spoofing VulnerabilityMicrosoft Visual Studio
- CVE-2026-120208libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoderstrukturag libheif
- CVE-2026-120207Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete RoutesThelia Page Module
- CVE-2026-120205Thelia before 3.1.0 Stored XSS via Coupon Condition Customer NameThelia
- CVE-2026-120203ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock TemplatesShowDoc
- CVE-2026-120202Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pychighflame-ai ramparts
- CVE-2026-102212Pre-Auth Heap Buffer Overflow in the Multipart RequestOpengear IM7200 · Opengear CM7100 +1
- CVE-2026-78192WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default…WebDyne
- CVE-2026-120194Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepRed Hat Enterprise Linux · Red Hat OpenShift AI +1
- CVE-2026-120114Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpointqriouslad Debug Log Manager – Conveniently Monitor and Insp…
- CVE-2026-109197WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameterwpdirectorykit WP Directory Kit
- CVE-2026-76010Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC…smub Photo Gallery, Sliders, Proofing and Themes – NextGEN…
- CVE-2026-117681Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyonekonflux-ci
- CVE-2026-116964Konflux-ci: remote code execution via eval() in manifest scriptskonflux-ci
- CVE-2026-116086Konflux-ci: jq filter injection in github workflow issue managementkonflux-ci
- CVE-2026-114217Konflux-ci: github token plaintext exposure in ci/cd scriptskonflux-ci
- CVE-2026-110530FeedWordPress <= 2026.0517 - Unauthenticated Stored Cross-Site Scripting via Syndicated Feed Contentradgeek FeedWordPress
- CVE-2026-120075WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scriptingmelapress WP Activity Log
- CVE-2026-120070User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameterwedevs User Frontend – Membership, User Registration, User…
- CVE-2026-103898Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social…roxnor Wp Social Login and Register Social Counter
- CVE-2026-107759WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mailWPO365 | MICROSOFT 365 GRAPH MAILER
- CVE-2026-118057Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Logpaultgoodchild Shield Security – Smart Bot Blocking, Brute-…
- CVE-2026-104012Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking'…roxnor Rox Appointment Booking – Event, Calendar & Appointm…
- CVE-2026-119065Shipping Zones by Drawing for WooCommerce <= 3.3.0 - Unauthenticated Stored Cross-Site Scripting via 'szbd-picked' Checkout Parameterarosoft Shipping Zones by Drawing for WooCommerce
Show all 45 entriesShow fewer entries
- CVE-2026-116548VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parametere4jvikwp VikRentCar Car Rental Management System
- CVE-2026-118070Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameteruscnanbu Welcart e-Commerce
- CVE-2026-115840VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parametere4jvikwp VikRentCar Car Rental Management System
- CVE-2026-107750PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name /…wpovernight PDF Invoices & Packing Slips for WooCommerce
- CVE-2026-119162User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via…specialk User Submitted Posts – Enable Users to Submit Post…
- CVE-2026-120040Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer /…wardee Mail logging & Catcher
- CVE-2026-116522Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decodecomesio Relevanssi – A Better Search
- CVE-2026-119089ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tagsupercleanse ThirstyAffiliates – Affiliate Links, Link Bran…
- CVE-2026-107653SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of…SureCart – Ecommerce Made Easy For Selling Physical Product…
- CVE-2026-119163FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameterteamfunnelkit FunnelKit Automations – Email Marketing Autom…
- CVE-2026-111254W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiryboldgrid W3 Total Cache
- CVE-2026-118638Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST RouteMapster WP Maps
- CVE-2026-118185Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate LimitingSecurity Optimizer
- CVE-2026-118043Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path TraversalBulk Media Register
- CVE-2026-116520PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker…buildwps PPWP – Password Protect Pages
- CVE-2026-109997Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key Normalizationkstover Ninja Forms – Contact Form Builder with Calculators…
- CVE-2026-119977WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionWordPress Foundation WordPress
- CVE-2026-109234Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronizationtigroumeow Meow Lightbox
- CVE-2026-116755SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template FieldsSoftIron HyperCloud
- CVE-2026-110176File Force Download for Drupal 7 Access Bypass via Unconditional Download HeadersDrupal File Force Download
Medium, low and unrated 55
- CVE-2026-120185ken678 YznCMS Auth Group Group.php Backend privileges managementken678 YznCMS
- CVE-2026-120210FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP PathFFmpeg
- CVE-2026-120206Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected ActionsThelia
- CVE-2026-120204DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameterdeepseek-ai DeepInfer
- CVE-2026-120200Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routesgnmyt Nexterm
- CVE-2026-120199LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions APIlearnhouse
- CVE-2026-78190WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scriptingWebDyne
- CVE-2026-78188WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributesWebDyne
- RUSTSEC-2026-0432`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)codeq
- RUSTSEC-2026-0434`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)ant-releases
- CVE-2026-15272Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' ParameterShamalli Web 2.0 Directory plugin for WordPress
- CVE-2026-118599epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension installGNOME Epiphany
- CVE-2026-118598epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone accessGNOME Epiphany
- CVE-2026-104926WooCommerce Extra Product Options Pro <= 3.3.2 - Reflected Cross-Site Scripting via '<fieldname>_start' / '<fieldname>_end' ParameterThemeHigh WooCommerce Extra Product Options Pro
- CVE-2026-109231Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via…vendidero Germanized for WooCommerce
- CVE-2026-107711FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpointwppool FlexStock – Product Stock Sync with Google Sheets fo…
- CVE-2026-100151Ninja Forms <= 3.15.5 - Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' URL Parameterkstover Ninja Forms – Contact Form Builder with Calculators…
- CVE-2026-96554BuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group NameBoss Media BuddyBoss Platform
- CVE-2026-116752GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injectionpaoltaia GeoDirectory – WP Business Directory Plugin and Cl…
- CVE-2026-101325Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parametercontrid Newsletters
- CVE-2026-119160Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter blockshapedplugin Smart Post – Post Grid, Post Carousel, Post Sl…
- CVE-2026-109367All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parametersmub All in One SEO – AI SEO Plugin to Boost SEO Rankings &…
- CVE-2026-103915Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parametermelograno Booking for Appointments and Events Calendar – Am…
- CVE-2026-111070Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`pluginever Content Pilot – Autoblogging & Affiliate Marketi…
- CVE-2026-103997Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via…davidanderson Redux Framework
Show all 55 entriesShow fewer entries
- CVE-2025-11455Perfect Images <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacementtigroumeow Perfect Images: Regenerate Thumbnails, Image Siz…
- CVE-2025-9462WP2LEADS <= 3.5.6 - Authenticated (Subscriber+) SQL Injection via order Parametertobias_conrad WP2LEADS | WordPress und KlickTipp einfach v…
- CVE-2026-103962User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameterwedevs User Frontend – Membership, User Registration, User…
- CVE-2026-116535SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template…rainbowgeek SEOPress – AI SEO Plugin & On-site SEO
- CVE-2026-110023WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameterpeterschulznl WP Data Access – App Builder for Tables, Form…
- CVE-2026-111592Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored…Co-Authors, Multiple Authors and Guest Authors in an Author…
- CVE-2026-11396Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via…woobewoo Product Filter for WooCommerce by WBW
- CVE-2026-109386Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via…wpmudev Hustle – Email Marketing, Lead Generation, Optins,…
- CVE-2026-119166Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]'…uscnanbu Welcart e-Commerce
- CVE-2026-109217PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice…wpovernight PDF Invoices & Packing Slips for WooCommerce
- CVE-2026-110251Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parametervillatheme Revopic – Photo Reviews for WooCommerce
- CVE-2026-88942Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameterwoobewoo Product Filter for WooCommerce by WBW
- CVE-2026-119980UsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form Hashstiofansisland UsersWP – Front-end login form, User Registr…
- CVE-2026-90960Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directoryseraphinitesoft Seraphinite Accelerator
- CVE-2026-107765Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Fieldmarketingfire Discussion Board – WordPress Forum Plugin
- CVE-2026-116546WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameterwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2026-120019W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholderboldgrid W3 Total Cache
- CVE-2026-111109Webmention <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tagpfefferle Webmention
- CVE-2026-94361PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned CallbackPayable Payment Gateway for WooCommerce
- CVE-2026-82214Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS DownloadQuick Event Manager
- CVE-2026-118629All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video DisclosureAll-in-One Video Gallery
- CVE-2026-118438Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' AttributeFirelight Lightbox
- CVE-2026-118437BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment DeletionBuddyForms
- CVE-2026-118184Premium Packages < 7.2.2 - Unauthenticated Order Total ManipulationPremium Packages
- CVE-2026-110808Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_roleEssential Addons for Elementor
- CVE-2026-110042Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings PagePayment Forms for Paystack
- CVE-2026-100155Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Tagkstover Ninja Forms – Contact Form Builder with Calculators…
- CVE-2026-92294Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page'…brainstormforce Spectra Legacy – Gutenberg Blocks
- CVE-2026-116563Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute…smub Photo Gallery, Sliders, Proofing and Themes – NextGEN…
- CVE-2026-101326Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_namekstover Ninja Forms – Contact Form Builder with Calculators…