CVEs
Browse the synced catalog, newest first.
- CVE-2026-16884Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16880Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16854Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16720Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16719Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16718Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16717Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16716Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16715Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16714Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16712Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16711Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16710Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16709Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-16679IBM API Connect Path TraversalIBM API Connect
- CVE-2026-108178Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-105459Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-105002Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-110534Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Scheme Namedavidanderson Redux Framework
- CVE-2026-120043Affiliate Program Suite <= 1.2.14 - Unauthenticated SQL Injection via 'email' Parameteriovamihai Affiliate Program Suite — SliceWP Affiliates
- CVE-2026-93779Tutor LMS <= 4.1.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via REST API Endpointsthemeum Tutor LMS – eLearning and online course solution
- CVE-2026-119167TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE…cozmoslabs TranslatePress – Translate Multilingual sites wi…
- CVE-2026-110705Redux Framework <= 4.5.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via download_options…davidanderson Redux Framework
- CVE-2026-120477Stop Spammers Classic <= 2026.6 - Unauthenticated Stored Cross-Site Scripting via 'author' Parameterwebguyio Stop Spammers Classic
- CVE-2026-9601Stackable <= 3.19.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'save' Parameterbfintal Stackable – Page Builder Gutenberg Blocks
- CVE-2026-93902Soledad <= 8.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fieldspencidesign Soledad
- CVE-2026-123218IBM Aspera Faspex Authorization BypassIBM Aspera Faspex
- CVE-2026-121516QODE Wishlist for WooCommerce <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest…qodeinteractive QODE Wishlist for WooCommerce
- CVE-2026-120677Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment ContentOptimole – Optimize Images | Convert WebP & AVIF | CDN & La…
- CVE-2026-119158Pie Register <= 3.8.4.16 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter via Comment Avatargenetechproducts Pie Register – User Registration, Profiles…