CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-13411Null condition in Playbooks import crashes the pluginMattermost
- CVE-2026-111079Goose: goose: shell history and environment leak via terminal integrationRed Hat Enterprise Linux
- CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directoryRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112313WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerabilityACF Extended
- CVE-2026-112820WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerabilityElated-Themes Academist Core
- CVE-2026-114348webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpointwebpack-dev-server
- CVE-2026-112085webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgradeswebpack-dev-server
- CVE-2026-106017Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictionsOpenVPN 3 Core Library
- CVE-2026-21812Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)HCL Software AppScan Integration with Azure Boards for ASoC…
- CVE-2026-21811Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)HCL Software AppScan Integration with Azure Boards for ASoC…
- CVE-2026-114703WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerabilityhupe13 Extensions for Leaflet Map
- CVE-2026-114702WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerabilitynicdark ND Shortcodes For Visual Composer
- CVE-2026-114701WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerabilityxootix Waitlist Woocommerce
- CVE-2026-114700WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityGloriafood Restaurant Menu – Food Ordering System – Table R…
- CVE-2026-114699WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerabilityyoomoney ЮKassa для WooCommerce
- CVE-2026-110974Uncontrolled Recursion on Nested JSON Allows Denial of Service in android-jsonvaadin android-json
- CVE-2026-114195WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerabilityWP Desk ShopMagic
- CVE-2026-112218WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerabilityAhmad Majestic Support
- CVE-2026-114696WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerabilityminiOrange Page Restriction WordPress
- CVE-2026-111842WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerabilityWP Sunshine Sunshine Photo Cart
- CVE-2026-115253WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log TamperingWatchGuard Agent
- CVE-2026-96293Endpoint Security Cleartext Storage of FileVault Recovery Key in Log FileWatchGuard Agent
- CVE-2026-112311WordPress ACF Extended plugin <= 0.9.2.7 - Arbitrary File Deletion vulnerabilityACF Extended
- CVE-2026-111851WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerabilityWProyal Royal Elementor Addons
- CVE-2026-112312WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerabilityACF Extended
- CVE-2026-111830WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerabilityWP Mailster
- CVE-2026-112241WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerabilityBrainstorm Force SureCart
- CVE-2026-112242WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerabilityCozmoslabs Profile Builder
- CVE-2026-112845WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.9 - Cross Site Scripting (XSS) vulnerabilityJory Hogeveen Off-Canvas Sidebars & Menus
- CVE-2026-110893WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerabilityBrainstorm Force SureDash