CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-111731Infinite loop when reading PDPortDataCheck record of subslot 0RT-Labs P-Net
- CVE-2026-111730Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name lengthRT-Labs P-Net
- CVE-2026-112256Logon bypass (trust of attacker-controlled completed-methods list)OpenText Advanced Authentication Server
- CVE-2026-112255Endpoint credential minting (insecure default allow-list)OpenText Advanced Authentication Server
- CVE-2026-118084WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerabilitynicdark Hotel Booking
- CVE-2026-118083WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerabilityThemeum WP Crowdfunding
- CVE-2026-118082WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerabilityBuddyboss Platform
- CVE-2026-118081WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability10Web Social Photo Feed
- CVE-2026-118080WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerabilitySocial Snap
- CVE-2026-118079WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerabilityFolioVision FV Flowplayer Video Player
- CVE-2026-118078WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerabilityProduct Catalog Feed by PixelYourSite
- CVE-2026-118077WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerabilityFast Themes Sastra Essential Addons for Elementor
- CVE-2026-118076WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerabilityFrisbii Pay
- CVE-2026-118075WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerabilitydbarrere WP Media folders
- CVE-2026-118074WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerabilityDaman Jeet Finale Lite
- CVE-2026-118073WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerabilityblazethemes News Kit Elementor Addons
- CVE-2026-116869WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerabilitymyPOS Payments myPOS Checkout
- CVE-2026-116868WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerabilityBuddyDev BuddyPress Xprofile Custom Field Types
- CVE-2026-116867WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerabilitysosidee Dynamic QR Code – generator
- CVE-2026-116866WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerabilityDotstore Extra Fees Plugin for WooCommerce
- CVE-2026-116865WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerabilityGesundheit Bewegt Zippy
- CVE-2026-116864WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerabilityArni Cinco WPCargo Track & Trace
- CVE-2026-108494WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerabilityBob Chained Quiz
- CVE-2026-62131WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerabilityZoho Flow
- CVE-2026-62018WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerabilityThemeREX Gunslinger
- CVE-2026-62017WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerabilityThemeREX Good Homes
- CVE-2026-62016WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerabilityThemeREX Gamic
- CVE-2026-62015WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerabilityThemeREX Gamezone
- CVE-2026-62014WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerabilityThemeREX EmojiNation
- CVE-2026-62013WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerabilityThemeREX Edge Decor