# cve.now: CVEs

Every CVE and security advisory, newest first, 100 per page.

- [CVE-2026-112174](https://cve.now/CVE-2026-112174.md): Privilege escalation in Enter’s Iperius Backup (CVSS 9.3, Enter Iperius Backup)
- [CVE-2026-124737](https://cve.now/CVE-2026-124737.md): Busybox: heap buffer overflow in the tftp client on fallback to the default block size (CVSS 7.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-126626](https://cve.now/CVE-2026-126626.md): Overly Restrictive Account Lockout Mechanism in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126621](https://cve.now/CVE-2026-126621.md): Improper Certificate Validation in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-126619](https://cve.now/CVE-2026-126619.md): Misinterpretation of Input in hMailServer (CVSS 4.8, Progressive Robot hMailServer)
- [CVE-2026-126617](https://cve.now/CVE-2026-126617.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in hMailServer (CVSS 8.8, Progressive Robot hMailServer)
- [CVE-2026-126618](https://cve.now/CVE-2026-126618.md): Improper Restriction of Excessive Authentication Attempts in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126616](https://cve.now/CVE-2026-126616.md): Improper Restriction of Excessive Authentication Attempts in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126615](https://cve.now/CVE-2026-126615.md): Authentication Bypass by Alternate Name in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126614](https://cve.now/CVE-2026-126614.md): Improper Restriction of Excessive Authentication Attempts in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126625](https://cve.now/CVE-2026-126625.md): Incorrect Default Permissions in hMailServer (CVSS 6.7, Progressive Robot hMailServer)
- [CVE-2026-126624](https://cve.now/CVE-2026-126624.md): Unverified Ownership in hMailServer (CVSS 7.3, Progressive Robot hMailServer)
- [CVE-2026-126623](https://cve.now/CVE-2026-126623.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-126622](https://cve.now/CVE-2026-126622.md): Incorrect Default Permissions in hMailServer (CVSS 7.3, Progressive Robot hMailServer)
- [CVE-2026-126613](https://cve.now/CVE-2026-126613.md): Allocation of Resources Without Limits or Throttling in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-126612](https://cve.now/CVE-2026-126612.md): Improper Link Resolution Before File Access ('Link Following') in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-126610](https://cve.now/CVE-2026-126610.md): Improper Certificate Validation in hMailServer (CVSS 7.4, Progressive Robot hMailServer)
- [CVE-2026-126611](https://cve.now/CVE-2026-126611.md): Improper Certificate Validation in hMailServer (CVSS 7.0, Progressive Robot hMailServer)
- [CVE-2026-126607](https://cve.now/CVE-2026-126607.md): Uncontrolled Search Path Element in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-126609](https://cve.now/CVE-2026-126609.md): Improper Certificate Validation in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-18769](https://cve.now/CVE-2026-18769.md): Insufficient IOCTL access control allows local relocation of arbitrary physical memory (CVSS 8.5, Beckhoff Automation TcRouter.sys for Windows on x64 · Be… +1)
- [CVE-2026-18768](https://cve.now/CVE-2026-18768.md): Insufficient IOCTL access control allows local access to arbitrary physical memory (CVSS 8.5, Beckhoff Automation TcRouter.sys for Windows on x64 · Be… +1)
- [CVE-2026-18767](https://cve.now/CVE-2026-18767.md): Insufficient IOCTL access control allows local access to I/O ports (CVSS 8.5, Beckhoff Automation TcRouter.sys for Windows on x64 · Be… +1)
- [CVE-2026-116468](https://cve.now/CVE-2026-116468.md): Keycloak-services: keycloak-services: delegated admin escalates to realm-admin via group move (CVSS 6.6, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2025-59847](https://cve.now/CVE-2025-59847.md): HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over… (CVSS 6.8, HCL Software HCL Domino Leap)
- [CVE-2025-59848](https://cve.now/CVE-2025-59848.md): HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a… (CVSS 6.8, HCL Software HCL Leap)
- [CVE-2026-12062](https://cve.now/CVE-2026-12062.md): Authenticated SQL Injection (CVSS 8.8, Zohocorp ADAudit Plus)
- [CVE-2026-92408](https://cve.now/CVE-2026-92408.md): WPS Bookings for WooCommerce \< 3.13.1 - Unauthenticated Price Manipulation via booking\_price (CVSS 5.3, WPS Bookings for WooCommerce)
- [CVE-2026-123668](https://cve.now/CVE-2026-123668.md): GetPaid 2.8.63 - 2.8.64 - Unauthenticated Payment Bypass via Fractional Item Quantity (CVSS 5.3, GetPaid)
- [CVE-2026-123659](https://cve.now/CVE-2026-123659.md): ProfilePress \< 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosure (CVSS 5.3, ProfilePress)
- [CVE-2026-119302](https://cve.now/CVE-2026-119302.md): NotificationX \< 3.3.7 - Unauthenticated Non-Public Content Disclosure and Arbitrary Shortcode Execution via Notification Preview (CVSS 6.5, NotificationX)
- [CVE-2026-119171](https://cve.now/CVE-2026-119171.md): Advanced Product Fields (Product Addons) for WooCommerce 1.6.22 - 1.7.3 - Unauthenticated Paid Option Surcharge Bypass via Add-to-Cart… (CVSS 5.3, Advanced Product Fields (Product Addons) for WooCommerce)
- [CVE-2026-76981](https://cve.now/CVE-2026-76981.md): Authenticated Second-Order SQL Injection (CVSS 8.8, Zohocorp ADAudit Plus)
- [CVE-2026-105948](https://cve.now/CVE-2026-105948.md): In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own… (CVSS 7.7, Octopus Deploy Octopus Server)
- [CVE-2026-111190](https://cve.now/CVE-2026-111190.md): ARForms \<= 7.2.4 - Unauthenticated Arbitrary File Upload to Remote Code Execution via X-FILENAME Header (CVSS 8.1, ARforms)
- [CVE-2026-12427](https://cve.now/CVE-2026-12427.md): ARforms \<= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via 'description' Parameter (CVSS 7.2, ARforms)
- [CVE-2026-12424](https://cve.now/CVE-2026-12424.md): ARforms \<= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via Referer Header (CVSS 7.2, ARforms)
- [CVE-2026-15785](https://cve.now/CVE-2026-15785.md): Joinchat \<= 6.3.1 - Reflected Cross-Site Scripting via '{HREF}' Dynamic Variable (CVSS 6.1, creapuntome Joinchat – Enhanced “click to chat”)
- [CVE-2026-93487](https://cve.now/CVE-2026-93487.md): In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow them to create project… (CVSS 7.1, Octopus Deploy Octopus Server)
- [CVE-2026-96414](https://cve.now/CVE-2026-96414.md): In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of… (CVSS 8.7, Octopus Deploy Octopus Server)
- [CVE-2026-88813](https://cve.now/CVE-2026-88813.md): YITH WooCommerce Gift Cards \<= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted Purchase (no CVSS, YITH WooCommerce Gift Cards)
- [CVE-2026-123705](https://cve.now/CVE-2026-123705.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Server Configuration Information Disclosure (no CVSS, Security For WooCommerce)
- [CVE-2026-123704](https://cve.now/CVE-2026-123704.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Administrator Email Address Disclosure (no CVSS, Security For WooCommerce)
- [CVE-2026-123703](https://cve.now/CVE-2026-123703.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Arbitrary User Logout via usfw\_user\_force\_logout (no CVSS, Security For WooCommerce)
- [CVE-2026-123702](https://cve.now/CVE-2026-123702.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated wp-config Keys and Salts Reset and Denial of Service (no CVSS, Security For WooCommerce)
- [CVE-2026-123701](https://cve.now/CVE-2026-123701.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Plugin Settings Reset (no CVSS, Security For WooCommerce)
- [CVE-2026-123700](https://cve.now/CVE-2026-123700.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Mass Comment Deletion (no CVSS, Security For WooCommerce)
- [CVE-2026-123699](https://cve.now/CVE-2026-123699.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core Updates (no CVSS, Security For WooCommerce)
- [CVE-2026-123698](https://cve.now/CVE-2026-123698.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Plugin Settings Disclosure via REST API (no CVSS, Security For WooCommerce)
- [CVE-2026-123697](https://cve.now/CVE-2026-123697.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Two-Factor Code and Secret Disclosure (no CVSS, Security For WooCommerce)
- [CVE-2026-123696](https://cve.now/CVE-2026-123696.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Two-Factor Authentication Reset (no CVSS, Security For WooCommerce)
- [CVE-2026-123695](https://cve.now/CVE-2026-123695.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Privilege Escalation via REST API Options Update and User Token Disclosure (no CVSS, Security For WooCommerce)
- [CVE-2026-123667](https://cve.now/CVE-2026-123667.md): Photo Engine \< 6.6.2 - Author+ Stored XSS via Keyword Names (no CVSS, Photo Engine)
- [CVE-2026-123666](https://cve.now/CVE-2026-123666.md): Photo Engine \< 6.6.2 - Author+ Media Deletion via Collection Deletion (no CVSS, Photo Engine)
- [CVE-2026-123661](https://cve.now/CVE-2026-123661.md): ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout (no CVSS, ProfilePress)
- [CVE-2026-123657](https://cve.now/CVE-2026-123657.md): ProfilePress \< 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan ID (no CVSS, ProfilePress)
- [CVE-2026-123656](https://cve.now/CVE-2026-123656.md): ProfilePress \< 4.17.6 - Unauthenticated Restricted Content Disclosure via REST API (no CVSS, ProfilePress)
- [CVE-2026-123134](https://cve.now/CVE-2026-123134.md): Smoove Abandoned Cart Trigger for WooCommerce 4.0.0 - 4.3.5 - Unauthenticated Stored XSS (no CVSS, Smoove abandoned cart trigger for WooCommerce)
- [CVE-2026-122087](https://cve.now/CVE-2026-122087.md): Event Tickets \< 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post\_status Filter Bypass in Attendees REST API (no CVSS, Event Tickets and Registration)
- [CVE-2026-122061](https://cve.now/CVE-2026-122061.md): Event Tickets \< 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST Endpoint (no CVSS, Event Tickets and Registration)
- [CVE-2026-121998](https://cve.now/CVE-2026-121998.md): iChart \< 2.2.4 - Subscriber+ Arbitrary Post Read, Update and Deletion via IDOR (no CVSS, iChart)
- [CVE-2026-121873](https://cve.now/CVE-2026-121873.md): Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request Creation (no CVSS, Redirection for Contact Form)
- [CVE-2026-121870](https://cve.now/CVE-2026-121870.md): Simpler Checkout \< 1.5.4 - Subscriber+ Privilege Escalation via Forged Auto-Login Token (no CVSS, Simpler Checkout)
- [CVE-2026-121863](https://cve.now/CVE-2026-121863.md): Knowledge Building \< 0.7.3 - Reflected XSS via Comment Reply Response (no CVSS, Knowledge Building)
- [CVE-2026-121862](https://cve.now/CVE-2026-121862.md): Knowledge Building \< 0.7.3 - Unauthenticated Stored XSS via knbu\_new\_reply AJAX Action (no CVSS, Knowledge Building)
- [CVE-2026-121497](https://cve.now/CVE-2026-121497.md): Askany \< 2.2.0 - Unauthenticated Arbitrary File Upload (no CVSS, AskAny)
- [CVE-2026-121472](https://cve.now/CVE-2026-121472.md): AutomatorWP \< 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRF (no CVSS, AutomatorWP)
- [CVE-2026-119531](https://cve.now/CVE-2026-119531.md): Live Composer \< 2.1.24 - Contributor+ Stored XSS via Module Area Shortcode (no CVSS, Live Composer)
- [CVE-2026-119529](https://cve.now/CVE-2026-119529.md): Gravity Forms \< 3.2.2 - Unauthenticated LFI via Chunked File Upload (no CVSS, Gravity Forms)
- [CVE-2026-119303](https://cve.now/CVE-2026-119303.md): NotificationX \< 3.3.7 - Unauthenticated Settings Update and Email Sending via send-rating REST Route (no CVSS, NotificationX)
- [CVE-2026-119035](https://cve.now/CVE-2026-119035.md): Schema & Structured Data for WP & AMP \< 1.70 - Contributor+ Stored XSS via JSON-LD Pretty Print (no CVSS, Schema & Structured Data for WP & AMP)
- [CVE-2026-119034](https://cve.now/CVE-2026-119034.md): Schema & Structured Data for WP & AMP \< 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter (no CVSS, Schema & Structured Data for WP & AMP)
- [CVE-2026-119033](https://cve.now/CVE-2026-119033.md): Schema & Structured Data for WP & AMP \< 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDOR (no CVSS, Schema & Structured Data for WP & AMP)
- [CVE-2026-119032](https://cve.now/CVE-2026-119032.md): Schema & Structured Data for WP & AMP \< 1.70 - Authenticated Arbitrary Post Modification via Backup Import (no CVSS, Schema & Structured Data for WP & AMP)
- [CVE-2026-118439](https://cve.now/CVE-2026-118439.md): Limit Login Attempts Reloaded \< 3.4.2 - Admin+ SSRF via App Setup Code (no CVSS, Limit Login Attempts Security)
- [CVE-2026-118420](https://cve.now/CVE-2026-118420.md): WP Directory Kit \< 1.6.3 - Listing Admin+ SQL Injection via 'main\_field' Parameter (no CVSS, WP Directory Kit)
- [CVE-2026-118418](https://cve.now/CVE-2026-118418.md): WP Directory Kit \< 1.6.3 - Unauthenticated User Data and Contact Message Disclosure (no CVSS, WP Directory Kit)
- [CVE-2026-118241](https://cve.now/CVE-2026-118241.md): Smush \< 4.3.6 - Author+ Optimization and Restoration of Others' Attachments via IDOR (no CVSS, Smush)
- [CVE-2026-118041](https://cve.now/CVE-2026-118041.md): Contest Gallery \< 34.0.3 - Author+ Arbitrary File Upload via Ecommerce Sale File Replacement (no CVSS, Contest Gallery)
- [CVE-2026-117524](https://cve.now/CVE-2026-117524.md): Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific\_template Shortcode (no CVSS, Dynific Addons for Elementor)
- [CVE-2026-117523](https://cve.now/CVE-2026-117523.md): Dynific Addons for Elementor \< 1.3.1 - Subscriber+ Module Settings Update via aep\_module AJAX Action (no CVSS, Dynific Addons for Elementor)
- [CVE-2026-117522](https://cve.now/CVE-2026-117522.md): Dynific Addons for Elementor \< 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget (no CVSS, Dynific Addons for Elementor)
- [CVE-2026-117521](https://cve.now/CVE-2026-117521.md): Dynific Addons for Elementor \< 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget (no CVSS, Dynific Addons for Elementor)
- [CVE-2026-115735](https://cve.now/CVE-2026-115735.md): Somatic Framework \<= 1.8.14 - Subscriber+ Arbitrary File Deletion (no CVSS, Somatic Framework)
- [CVE-2026-115734](https://cve.now/CVE-2026-115734.md): Pay With a Tweet \<= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path (no CVSS, Pay with a tweet)
- [CVE-2026-115733](https://cve.now/CVE-2026-115733.md): PrintAura WooCommerce API \<= 4.0.2 - Unauthenticated WooCommerce REST API Authentication Bypass (no CVSS, Printaura-Woocommerce)
- [CVE-2026-111597](https://cve.now/CVE-2026-111597.md): Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message via Unpaid Stripe… (no CVSS, Forminator Forms)
- [CVE-2026-111579](https://cve.now/CVE-2026-111579.md): Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable (no CVSS, Forminator Forms)
- [CVE-2026-110949](https://cve.now/CVE-2026-110949.md): Download Manager (Free & Pro) - Unauthenticated Missing Authorization via Password Validation (no CVSS, Download Manager)
- [CVE-2026-110948](https://cve.now/CVE-2026-110948.md): Download Manager (Free & Pro) - Unauthenticated Protected File Download via Media Preview Download Key (no CVSS, Download Manager)
- [CVE-2026-110016](https://cve.now/CVE-2026-110016.md): Data Tables Generator by Supsystic \< 1.15.8 - Unauthenticated Table Content Disclosure via IDOR (no CVSS, Data Tables Generator by Supsystic)
- [CVE-2026-109873](https://cve.now/CVE-2026-109873.md): User Registration & Membership \< 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership Field (no CVSS, User Registration & Membership)
- [CVE-2026-109871](https://cve.now/CVE-2026-109871.md): User Registration & Membership \< 5.3.2 - Subscriber+ Payment Bypass via Membership Renewal (no CVSS, User Registration & Membership)
- [CVE-2026-109870](https://cve.now/CVE-2026-109870.md): User Registration & Membership 5.2.8 - 5.3.1 - Unauthenticated Privilege Escalation via Coupon-Based Payment Bypass (no CVSS, User Registration & Membership)
- [CVE-2026-106468](https://cve.now/CVE-2026-106468.md): Code Snippets \< 4.1.0 - Admin+ Network-Scoped Snippet Injection via Snippet Import (no CVSS, Code Snippets)
- [CVE-2026-104718](https://cve.now/CVE-2026-104718.md): Elementor \< 4.3.6 - Contributor+ Stored XSS via Element ID (no CVSS, Elementor Website Builder)
- [CVE-2025-15714](https://cve.now/CVE-2025-15714.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Button (no CVSS, Live Composer)
- [CVE-2025-15713](https://cve.now/CVE-2025-15713.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Icon (no CVSS, Live Composer)
- [CVE-2025-15712](https://cve.now/CVE-2025-15712.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Staff (no CVSS, Live Composer)
- [CVE-2025-15711](https://cve.now/CVE-2025-15711.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Social (no CVSS, Live Composer)

[Next page](https://cve.now/cves.md?cursor=WyIyMDI2LTExLTExVDA2OjAwOjA0LjU4OVoiLCJDVkUtMjAyNS0xNTcxMSJd)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/cves
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.