# CVEs published 2026-01-06

185 CVEs were published on January 6, 2026: 12 critical, 64 high. Days are UTC.

- [CVE-2026-0628](https://cve.now/CVE-2026-0628.md): Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install (CVSS 8.8, Google Chrome)
- [CVE-2026-0643](https://cve.now/CVE-2026-0643.md): projectworlds House Rental and Property Listing Signup register.php unrestricted upload (CVSS 6.9, projectworlds House Rental and Property Listing)
- [CVE-2025-47396](https://cve.now/CVE-2025-47396.md): Double Free in Graphics (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47395](https://cve.now/CVE-2025-47395.md): Buffer Over-read in WLAN Firmware (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2025-47394](https://cve.now/CVE-2025-47394.md): Buffer Copy Without Checking Size of Input in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47393](https://cve.now/CVE-2025-47393.md): Improper Validation of Array Index in Automotive Linux OS (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47388](https://cve.now/CVE-2025-47388.md): Buffer Copy without Checking Size of Input in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47380](https://cve.now/CVE-2025-47380.md): Untrusted Pointer Dereference in Camera (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47369](https://cve.now/CVE-2025-47369.md): Information Exposure in Computer Vision (CVSS 5.5, Qualcomm Snapdragon)
- [CVE-2025-47356](https://cve.now/CVE-2025-47356.md): Double Free in Video (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47348](https://cve.now/CVE-2025-47348.md): Use of Uninitialized Variable in HLOS (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47346](https://cve.now/CVE-2025-47346.md): Out-of-bounds Write in HLOS (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47345](https://cve.now/CVE-2025-47345.md): Reusing a Nonce, Key Pair in Encryption in Automotive Platform (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2025-47344](https://cve.now/CVE-2025-47344.md): Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2025-47343](https://cve.now/CVE-2025-47343.md): Untrusted Pointer Dereference in Video (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47339](https://cve.now/CVE-2025-47339.md): Use After Free in HLOS (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47337](https://cve.now/CVE-2025-47337.md): Use After Free in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2025-47336](https://cve.now/CVE-2025-47336.md): Use After Free in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2025-47335](https://cve.now/CVE-2025-47335.md): Buffer Copy Without Checking Size of Input in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2025-47334](https://cve.now/CVE-2025-47334.md): Buffer Copy Without Checking Size of Input in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2025-47333](https://cve.now/CVE-2025-47333.md): Use After Free in HLOS (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2025-47332](https://cve.now/CVE-2025-47332.md): Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2025-47331](https://cve.now/CVE-2025-47331.md): Buffer Over-read in Video (CVSS 6.1, Qualcomm Snapdragon)
- [CVE-2025-47330](https://cve.now/CVE-2025-47330.md): Buffer Over-read in Video (CVSS 5.5, Qualcomm Snapdragon)
- [CVE-2026-0642](https://cve.now/CVE-2026-0642.md): projectworlds House Rental and Property Listing complaint.php cross site scripting (CVSS 4.8, projectworlds House Rental and Property Listing)
- [CVE-2025-11235](https://cve.now/CVE-2025-11235.md): MOVEit Transfer REST API does not require current password in order to initiate the password change process (CVSS 3.7, Progress MOVEit Transfer)
- [CVE-2025-15472](https://cve.now/CVE-2025-15472.md): TRENDnet TEW-811DRU httpd uapply.cgi setDeviceURL os command injection (CVSS 8.6, TRENDnet TEW-811DRU)
- [CVE-2025-14625](https://cve.now/CVE-2025-14625.md): Quartus® Prime Standard and Quartus® Prime Lite Security Advisory (CVSS 5.4, Altera Quartus Prime Standard · Altera Quartus Prime Lite)
- [CVE-2025-14614](https://cve.now/CVE-2025-14614.md): Quartus® Prime Standard and Quartus® Prime Lite Security Advisory (CVSS 5.4, Altera Quartus Prime Standard · Altera Quartus Prime Lite)
- [CVE-2025-15471](https://cve.now/CVE-2025-15471.md): TRENDnet TEW-713RE formFSrvX os command injection (CVSS 9.3, TRENDnet TEW-713RE)
- [CVE-2025-14599](https://cve.now/CVE-2025-14599.md): Quartus® Prime Standard and Quartus® Prime Lite Security Advisory (CVSS 5.4, Altera Quartus Prime Standard · Altera Quartus Prime Lite)
- [CVE-2025-14612](https://cve.now/CVE-2025-14612.md): Quartus Prime Pro Edition Advisory (CVSS 5.4, Altera Quartus Prime Pro)
- [CVE-2025-14605](https://cve.now/CVE-2025-14605.md): Quartus Prime Pro Edition Advisory (CVSS 5.4, Altera Quartus Prime Pro)
- [CVE-2025-31642](https://cve.now/CVE-2025-31642.md): WordPress WPCHURCH plugin \<= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dasinfomedia WPCHURCH)
- [CVE-2025-31051](https://cve.now/CVE-2025-31051.md): WordPress Plant - Gardening & Houseplants WordPress Theme \<= 1.0.0 - Sensitive Data Exposure Vulnerability (CVSS 5.3, EngoTheme Plant - Gardening & Houseplants WordPress Theme)
- [CVE-2025-14596](https://cve.now/CVE-2025-14596.md): Quartus Prime Pro Edition Installer Advisory (CVSS 5.4, Altera Quartus Prime Pro)
- [CVE-2025-30996](https://cve.now/CVE-2025-30996.md): Arbitrary File Upload Vulnerability in WordPress themes by Themify (CVSS 9.9, Themify Sidepane WordPress Theme · Themify Newsy +7)
- [CVE-2025-13744](https://cve.now/CVE-2025-13744.md): Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML (CVSS 8.4, GitHub Enterprise Server)
- [CVE-2025-30631](https://cve.now/CVE-2025-30631.md): Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins (CVSS 7.1, AA-Team Woocommerce Sales Funnel Builder · AA-Team Amazon A…)
- [CVE-2025-29004](https://cve.now/CVE-2025-29004.md): Privilege Escalation Vulnerability in AA-Team WordPress plugins (CVSS 8.8, AA-Team Premium Age Verification / Restriction for WordPres…)
- [CVE-2026-21492](https://cve.now/CVE-2026-21492.md): iccDEV ToneMap Writer has NULL Pointer Member Call (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2025-7048](https://cve.now/CVE-2025-7048.md): On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption o (CVSS 5.3, Arista Networks EOS)
- [CVE-2026-21491](https://cve.now/CVE-2026-21491.md): iccDEV has unicode buffer overflow in CIccTagTextDescription (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-21490](https://cve.now/CVE-2026-21490.md): iccDEV has heap buffer overflow in CIccTagLut16::Validate() (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-0641](https://cve.now/CVE-2026-0641.md): TOTOLINK WA300 cstecgi.cgi sub\_401510 command injection (CVSS 5.3, TOTOLINK WA300)
- [CVE-2026-21494](https://cve.now/CVE-2026-21494.md): iccDEV has heap buffer overflow in CIccTagLut8::Validate() (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2025-15382](https://cve.now/CVE-2025-15382.md): Client SCP Request Triggers Buffer Overread by 1 Byte (CVSS 5.1, wolfSSL wolfSSH)
- [CVE-2025-32304](https://cve.now/CVE-2025-32304.md): WordPress WPCHURCH plugin \<= 2.7.0 - Local File Inclusion vulnerability (CVSS 8.1, Mojoomla WPCHURCH)
- [CVE-2025-14942](https://cve.now/CVE-2025-14942.md): Authentication Bypass (CVSS 9.4, wolfSSL wolfSSH)
- [CVE-2025-39477](https://cve.now/CVE-2025-39477.md): WordPress InWave Jobs Plugin \<= 3.5.8 - Broken Access Control vulnerability (CVSS 9.8, Sfwebservice InWave Jobs)
- [CVE-2024-31088](https://cve.now/CVE-2024-31088.md): WordPress AdsPlace'r – Ad Manager, Inserter, AdSense Ads plugin \<= 1.1.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPShop.ru AdsPlace'r – Ad Manager, Inserter, AdSense Ads)
- [CVE-2024-30547](https://cve.now/CVE-2024-30547.md): WordPress Header Image Slider plugin \<= 0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Shazdeh Header Image Slider)
- [CVE-2025-47553](https://cve.now/CVE-2025-47553.md): WordPress DZS Video Gallery plugin \<= 12.25 - PHP Object Injection vulnerability (CVSS 8.8, Digital zoom studio DZS Video Gallery)
- [CVE-2025-69083](https://cve.now/CVE-2025-69083.md): WordPress Frappé theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Frappé)
- [CVE-2025-69364](https://cve.now/CVE-2025-69364.md): WordPress Breeze plugin \<= 2.2.21 - Broken Access Control vulnerability (CVSS 5.3, Cloudways Breeze)
- [CVE-2025-69363](https://cve.now/CVE-2025-69363.md): WordPress Responsive Addons for Elementor plugin \<= 2.0.8 - Broken Access Control vulnerability (CVSS 6.5, CyberChimps Responsive Addons for Elementor)
- [CVE-2025-69362](https://cve.now/CVE-2025-69362.md): WordPress UiChemy plugin \<= 4.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, POSIMYTH UiChemy)
- [CVE-2025-69361](https://cve.now/CVE-2025-69361.md): WordPress Post Expirator plugin \<= 4.9.3 - Broken Access Control vulnerability (CVSS 4.3, PublishPress Post Expirator)
- [CVE-2025-69360](https://cve.now/CVE-2025-69360.md): WordPress TheGem Theme Elements (for WPBakery) plugin \<= 5.11.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CodexThemes TheGem Theme Elements)
- [CVE-2025-69359](https://cve.now/CVE-2025-69359.md): WordPress Creator LMS plugin \<= 1.1.12 - Broken Access Control vulnerability (CVSS 5.3, WPFunnels Creator LMS)
- [CVE-2025-69357](https://cve.now/CVE-2025-69357.md): WordPress TheGem Theme Elements (for Elementor) plugin \<= 5.11.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CodexThemes TheGem Theme Elements)
- [CVE-2025-69356](https://cve.now/CVE-2025-69356.md): WordPress TheGem Theme Elements (for Elementor) plugin \<= 5.11.0 - Local File Inclusion vulnerability (CVSS 7.5, CodexThemes TheGem Theme Elements)
- [CVE-2025-69355](https://cve.now/CVE-2025-69355.md): WordPress Tickera plugin \<= 3.5.6.4 - Broken Access Control vulnerability (CVSS 4.3, Tickera)
- [CVE-2025-69354](https://cve.now/CVE-2025-69354.md): WordPress Better Business Reviews plugin \<= 0.1.1 - Broken Access Control vulnerability (CVSS 4.3, BBR Plugins Better Business Reviews)
- [CVE-2025-69353](https://cve.now/CVE-2025-69353.md): WordPress Proxy & VPN Blocker plugin \<= 3.5.3 - Broken Access Control vulnerability (CVSS 4.3, Proxy & VPN Blocker)
- [CVE-2025-69352](https://cve.now/CVE-2025-69352.md): WordPress The Events Calendar plugin \<= 6.15.12.2 - Broken Access Control vulnerability (CVSS 5.4, StellarWP The Events Calendar)
- [CVE-2025-69351](https://cve.now/CVE-2025-69351.md): WordPress Ninja Tables plugin \<= 5.2.4 - SQL Injection vulnerability (CVSS 8.5, Shahjahan Jewel Ninja Tables)
- [CVE-2025-69350](https://cve.now/CVE-2025-69350.md): WordPress Accordion plugin \<= 3.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Themepoints Accordion)
- [CVE-2025-69349](https://cve.now/CVE-2025-69349.md): WordPress RSS Feed Widget plugin \<= 3.0.2 - Broken Access Control vulnerability (CVSS 5.4, Fahad Mahmood RSS Feed Widget)
- [CVE-2025-69348](https://cve.now/CVE-2025-69348.md): WordPress The Events Calendar Countdown Addon plugin \<= 1.4.15 - Broken Access Control vulnerability (CVSS 4.3, CoolHappy The Events Calendar Countdown Addon)
- [CVE-2025-69346](https://cve.now/CVE-2025-69346.md): WordPress AffiliateX plugin \<= 1.3.9.3 - Broken Access Control vulnerability (CVSS 4.3, WPCenter AffiliateX)
- [CVE-2025-69345](https://cve.now/CVE-2025-69345.md): WordPress Post and Page Builder by BoldGrid plugin \<= 1.27.9 - Broken Access Control vulnerability (CVSS 4.3, Post and Page Builder by BoldGrid)
- [CVE-2025-69342](https://cve.now/CVE-2025-69342.md): WordPress Calafate theme \<= 1.7.7 - Local File Inclusion vulnerability (CVSS 7.5, VanKarWai Calafate)
- [CVE-2025-69341](https://cve.now/CVE-2025-69341.md): WordPress WeDesignTech Ultimate Booking Addon plugin \<= 1.0.3 - Broken Access Control vulnerability (CVSS 5.4, BuddhaThemes WeDesignTech Ultimate Booking Addon)
- [CVE-2025-69336](https://cve.now/CVE-2025-69336.md): WordPress Ultimate Store Kit Elementor Addons plugin \<= 2.9.4 - Broken Access Control vulnerability (CVSS 4.3, bdthemes Ultimate Store Kit Elementor Addons)
- [CVE-2025-69335](https://cve.now/CVE-2025-69335.md): WordPress Team Showcase plugin \<= 2.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Themepoints Team Showcase)
- [CVE-2025-69334](https://cve.now/CVE-2025-69334.md): WordPress Wishlist for WooCommerce plugin \<= 3.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPFactory Wishlist for WooCommerce)
- [CVE-2025-69331](https://cve.now/CVE-2025-69331.md): WordPress Theater for WordPress plugin \<= 0.19 - Broken Access Control vulnerability (CVSS 4.3, Jeroen Schmit Theater for WordPress)
- [CVE-2025-69327](https://cve.now/CVE-2025-69327.md): WordPress Car Rental Manager plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 4.3, magepeopleteam Car Rental Manager)
- [CVE-2025-69084](https://cve.now/CVE-2025-69084.md): WordPress Photo Gallery plugin \<= 2.7.7.26 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, gt3themes Photo Gallery)
- [CVE-2025-69085](https://cve.now/CVE-2025-69085.md): WordPress JobBank plugin \<= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, e-plugins JobBank)
- [CVE-2025-69086](https://cve.now/CVE-2025-69086.md): WordPress Issabella theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1, jwsthemes Issabella)
- [CVE-2025-36589](https://cve.now/CVE-2025-36589.md): Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. (CVSS 7.6, Dell Unisphere for PowerMax)
- [CVE-2025-63082](https://cve.now/CVE-2025-63082.md): Joomla! Core - \[20260101\] - Inadequate content filtering for data URLs (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2025-63083](https://cve.now/CVE-2025-63083.md): Joomla! Core - \[20260102\] - XSS vector in the pagebreak plugin (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2020-36917](https://cve.now/CVE-2020-36917.md): iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie (CVSS 8.6, Guangzhou Yeroo Tech Co. iDS6 DSSPro Digital Signage System)
- [CVE-2020-36914](https://cve.now/CVE-2020-36914.md): QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure (CVSS 8.6, Shenzhen Xingmeng Qihang Media Co. QiHang Media Web (QH.asp…)
- [CVE-2020-36925](https://cve.now/CVE-2020-36925.md): Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass (CVSS 8.7, Arteco-Global Arteco Web Client DVR/NVR)
- [CVE-2020-36924](https://cve.now/CVE-2020-36924.md): Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion (CVSS 5.3, Pro-Bravia Sony BRAVIA Digital Signage)
- [CVE-2020-36923](https://cve.now/CVE-2020-36923.md): Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR (CVSS 6.9, Sony Electronics Sony BRAVIA Digital Signage)
- [CVE-2020-36922](https://cve.now/CVE-2020-36922.md): Sony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure (CVSS 6.9, Pro-Bravia Sony BRAVIA Digital Signage)
- [CVE-2020-36921](https://cve.now/CVE-2020-36921.md): RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability (CVSS 6.9, RED-V Super Digital Signage System RXV-A740R)
- [CVE-2020-36920](https://cve.now/CVE-2020-36920.md): iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control (CVSS 8.7, Yerootech iDS6 DSSPro Digital Signage System)
- [CVE-2020-36918](https://cve.now/CVE-2020-36918.md): iDS6 DSSPro Digital Signage System 6.2 Cross-Site Request Forgery via User Management (CVSS 5.1, Yerootech iDS6 DSSPro Digital Signage System)
- [CVE-2020-36916](https://cve.now/CVE-2020-36916.md): TDM Digital Signage PC Player 4.1.0.4 Privilege Escalation via Insecure Permissions (CVSS 8.5, Tdmsignage TDM Digital Signage PC Player)
- [CVE-2020-36915](https://cve.now/CVE-2020-36915.md): Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials (CVSS 8.7, Adtecdigital SignEdje Digital Signage Player · Adtecdigi… +9)
- [CVE-2020-36913](https://cve.now/CVE-2020-36913.md): All-Dynamics Software enlogic:show 2.0.2 Session Fixation Authentication Bypass (CVSS 8.5, All-Dynamics Software enlogic:show Digital Signage System)
- [CVE-2020-36912](https://cve.now/CVE-2020-36912.md): Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter (CVSS 5.1, Plexus anblick Digital Signage Management)
- [CVE-2020-36910](https://cve.now/CVE-2020-36910.md): Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter (CVSS 8.7, CAYIN Technology SMP-8000QD · CAYIN Technology SMP-8000 +17)
- [CVE-2020-36909](https://cve.now/CVE-2020-36909.md): Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read/Write (CVSS 8.7, Secure Computing SnapGear Management Console SG560)
- [CVE-2020-36908](https://cve.now/CVE-2020-36908.md): Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users (CVSS 5.1, Secure Computing SnapGear Management Console SG560)
- [CVE-2020-36907](https://cve.now/CVE-2020-36907.md): Extreme Networks Aerohive HiveOS \<=11.x 11.x Unauthenticated Remote Denial of Service (CVSS 8.7, Extreme Networks Aerohive HiveOS)
- [CVE-2020-36906](https://cve.now/CVE-2020-36906.md): P5 FNIP-8x16A FNIP-4xSH 1.0.20 Cross-Site Request Forgery via User Management (CVSS 5.3, P5 FNIP-8x16A)
- [CVE-2020-36905](https://cve.now/CVE-2020-36905.md): FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API (CVSS 5.1, FIBAR GROUP S.A. Home Center)
- [CVE-2026-0640](https://cve.now/CVE-2026-0640.md): Tenda AC23 PowerSaveSet sscanf buffer overflow (CVSS 8.7, Tenda AC23)
- [CVE-2025-14979](https://cve.now/CVE-2025-14979.md): Eddie VPN 2.24.6 - Local Privilege Escalation (CVSS 8.5, AirVPN Eddie)
- [CVE-2025-46696](https://cve.now/CVE-2025-46696.md): Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary (CVSS 6.4, Dell Secure Connect Gateway (SCG) Appliance · Dell Secure C…)
- [CVE-2025-14026](https://cve.now/CVE-2025-14026.md): Vulnerable Python version used in Forcepoint One DLP Client (CVSS 7.8, Forcepoint One Endpoint)
- [CVE-2026-21493](https://cve.now/CVE-2026-21493.md): iccDEV has Type Confusion during XML Curve Serialization (CVSS 6.6, InternationalColorConsortium iccDEV)
- [CVE-2026-21489](https://cve.now/CVE-2026-21489.md): iccDEV has Out-of-bounds Read and Integer Underflow (Wrap or Wraparound) (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-21488](https://cve.now/CVE-2026-21488.md): iccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2025-9318](https://cve.now/CVE-2025-9318.md): Quiz and Survey Master (QSM) \<= 10.3.1 - Authenticated (Subscriber+) SQL Injection via \`is\_linking\` Query Parameter (CVSS 6.5, expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…)
- [CVE-2025-9637](https://cve.now/CVE-2025-9637.md): Quiz and Survey Master (QSM) \<= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads (CVSS 6.5, expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…)
- [CVE-2025-14552](https://cve.now/CVE-2025-14552.md): MediaPress \<= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode (CVSS 6.4, buddydev MediaPress)
- [CVE-2025-5919](https://cve.now/CVE-2025-5919.md): Appointment Booking and Scheduling Calendar Plugin – WP Timetics \<= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification (CVSS 6.5, arraytics Timetics – Appointment Booking & Scheduling)
- [CVE-2025-13964](https://cve.now/CVE-2025-13964.md): LearnPress – WordPress LMS Plugin \<= 4.3.2 - Missing Authentication to Unauthenticated Course Modification (CVSS 5.3, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2025-9294](https://cve.now/CVE-2025-9294.md): Quiz And Survey Master \<= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion (CVSS 4.3, expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…)
- [CVE-2025-13766](https://cve.now/CVE-2025-13766.md): MasterStudy LMS WordPress Plugin – for Online Courses and Education \<= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion (CVSS 5.4, stylemix MasterStudy LMS WordPress Plugin – for Online Cour…)
- [CVE-2025-13812](https://cve.now/CVE-2025-13812.md): GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress \<= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure (CVSS 4.3, rubengc GamiPress – Gamification plugin to reward points, a…)
- [CVE-2025-12067](https://cve.now/CVE-2025-12067.md): Table Field Add-on for ACF and SCF \<= 1.3.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content (CVSS 6.4, jonua Table Field Add-on for ACF and SCF)
- [CVE-2025-14371](https://cve.now/CVE-2025-14371.md): TaxoPress \<= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification (CVSS 4.3, stevejburge Tag, Category, and Taxonomy Manager – AI Autota…)
- [CVE-2025-4776](https://cve.now/CVE-2025-4776.md): Phlox \<= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`data-caption\` HTML Attribute (CVSS 6.4, averta Phlox)
- [CVE-2025-13215](https://cve.now/CVE-2025-13215.md): Shortcodes and extra features for Phlox theme \<= 2.17.13 - Unauthenticated Draft Posts Information Exposure (CVSS 5.3, averta Shortcodes and extra features for Phlox theme)
- [CVE-2026-21411](https://cve.now/CVE-2026-21411.md): Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authe (CVSS 8.8, Plat'Home Co. OpenBlocks IoT DX1 · Plat'Home Co. OpenBlo… +4)
- [CVE-2025-14997](https://cve.now/CVE-2025-14997.md): BuddyPress Xprofile Custom Field Types \<= 1.2.8 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.8, buddydev BuddyPress Xprofile Custom Field Types)
- [CVE-2025-14120](https://cve.now/CVE-2025-14120.md): URL Image Importer \<= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, bww URL Image Importer)
- [CVE-2025-14438](https://cve.now/CVE-2025-14438.md): Xagio SEO \<= 7.1.0.30 - Authenticated (Subscriber+) Server-Side Request Forgery (CVSS 6.4, Xagio SEO – AI Powered SEO)
- [CVE-2025-14441](https://cve.now/CVE-2025-14441.md): Popupkit \<= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion (CVSS 4.3, roxnor Popup builder with Gamification, Multi-Step Popups,…)
- [CVE-2025-15001](https://cve.now/CVE-2025-15001.md): FS Registration Password \<= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8, fsylum FS Registration Password)
- [CVE-2025-14996](https://cve.now/CVE-2025-14996.md): AS Password Field In Default Registration Form \<= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8, aksharsoftsolutions AS Password Field In Default Registrati…)
- [CVE-2026-21486](https://cve.now/CVE-2026-21486.md): Use After Free and Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write in iccDEV (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21487](https://cve.now/CVE-2026-21487.md): iccDEV has Out-of-bounds Read, Use of Out-of-range Pointer Offset and Improper Input Validation (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2025-13746](https://cve.now/CVE-2025-13746.md): ForumWP – Forum & Discussion Board \<= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name (CVSS 6.4, ultimatemember ForumWP – Forum & Discussion Board)
- [CVE-2025-14034](https://cve.now/CVE-2025-14034.md): ilGhera Support System for WooCommerce \<= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion (CVSS 5.3, ghera74 ilGhera Support System for WooCommerce)
- [CVE-2025-11370](https://cve.now/CVE-2025-11370.md): Depicter \<= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates (CVSS 5.3, averta Depicter — Popup & Slider Builder)
- [CVE-2025-14153](https://cve.now/CVE-2025-14153.md): Page Expire Popup/Redirection for WordPress \<= 1.0 - Authenticated (Author+) SQL Injection via 'id' Shortcode Attribute (CVSS 6.5, vikasratudi Page Expire Popup/Redirection for WordPress)
- [CVE-2026-0604](https://cve.now/CVE-2026-0604.md): FastDup \<= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir\_path' REST Parameter (CVSS 6.5, ninjateam FastDup – Fastest WordPress Migration & Duplicator)
- [CVE-2025-13652](https://cve.now/CVE-2025-13652.md): CBX Bookmark & Favorite \<= 2.0.4 - Authenticated (Subscriber+) SQL Injection via \`orderby\` Parameter (CVSS 6.5, manchumahara CBX Bookmark & Favorite)
- [CVE-2025-11723](https://cve.now/CVE-2025-11723.md): Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin \<= 1.6.9.5 - Unauthenticated Sensitive Information Exposure (CVSS 6.5, croixhaug Appointment Booking Calendar — Simply Schedule Ap…)
- [CVE-2025-13409](https://cve.now/CVE-2025-13409.md): Form Vibes – Database Manager for Forms \<= 1.4.13 - Authenticated (Admin+) SQL Injection (CVSS 4.9, wpvibes Form Vibes – Database Manager for Forms)
- [CVE-2026-21485](https://cve.now/CVE-2026-21485.md): iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag() (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21677](https://cve.now/CVE-2026-21677.md): iccDEV has Undefined Behavior in CIccCLUT::Init() (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21676](https://cve.now/CVE-2026-21676.md): iccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() function (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2025-12793](https://cve.now/CVE-2025-12793.md): An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. (CVSS 8.5, ASUS ASCI)
- [CVE-2025-15364](https://cve.now/CVE-2025-15364.md): Download Manager \<= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword (CVSS 7.3, codename065 Download Manager)
- [CVE-2025-20807](https://cve.now/CVE-2025-20807.md): In dpe, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20806](https://cve.now/CVE-2025-20806.md): In dpe, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20805](https://cve.now/CVE-2025-20805.md): In dpe, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20804](https://cve.now/CVE-2025-20804.md): In dpe, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20803](https://cve.now/CVE-2025-20803.md): In dpe, there is a possible memory corruption due to an integer overflow. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20787](https://cve.now/CVE-2025-20787.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20786](https://cve.now/CVE-2025-20786.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20785](https://cve.now/CVE-2025-20785.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20784](https://cve.now/CVE-2025-20784.md): In display, there is a possible memory corruption due to uninitialized data. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20783](https://cve.now/CVE-2025-20783.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20782](https://cve.now/CVE-2025-20782.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20781](https://cve.now/CVE-2025-20781.md): In display, there is a possible memory corruption due to use after free. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20780](https://cve.now/CVE-2025-20780.md): In display, there is a possible memory corruption due to use after free. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20779](https://cve.now/CVE-2025-20779.md): In display, there is a possible use after free due to a race condition. (CVSS 7.0, MediaTek chipset)
- [CVE-2025-20778](https://cve.now/CVE-2025-20778.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20802](https://cve.now/CVE-2025-20802.md): In geniezone, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2025-20801](https://cve.now/CVE-2025-20801.md): In seninf, there is a possible memory corruption due to a race condition. (CVSS 7.0, MediaTek chipset)
- [CVE-2025-20800](https://cve.now/CVE-2025-20800.md): In mminfra, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20799](https://cve.now/CVE-2025-20799.md): In c2ps, there is a possible memory corruption due to use after free. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20798](https://cve.now/CVE-2025-20798.md): In battery, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20797](https://cve.now/CVE-2025-20797.md): In battery, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20796](https://cve.now/CVE-2025-20796.md): In imgsys, there is a possible out of bounds write due to improper input validation. (CVSS 7.8, MediaTek chipset)
- [CVE-2025-20760](https://cve.now/CVE-2025-20760.md): In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. (CVSS 6.5, MediaTek chipset)
- [CVE-2025-20761](https://cve.now/CVE-2025-20761.md): In Modem, there is a possible system crash due to incorrect error handling. (CVSS 6.5, MediaTek chipset)
- [CVE-2025-20762](https://cve.now/CVE-2025-20762.md): In Modem, there is a possible system crash due to incorrect error handling. (CVSS 6.5, MediaTek chipset)
- [CVE-2025-20793](https://cve.now/CVE-2025-20793.md): In Modem, there is a possible system crash due to incorrect error handling. (CVSS 6.5, MediaTek chipset)
- [CVE-2025-20794](https://cve.now/CVE-2025-20794.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek chipset)
- [CVE-2025-20795](https://cve.now/CVE-2025-20795.md): In KeyInstall, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2026-21675](https://cve.now/CVE-2026-21675.md): iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion (CVSS 9.8, InternationalColorConsortium iccDEV)
- [CVE-2025-15385](https://cve.now/CVE-2025-15385.md): Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue a (CVSS 9.8, TECNO Mobile com.afmobi.boomplayer)
- [CVE-2026-21674](https://cve.now/CVE-2026-21674.md): iccDEV has a Memory Leak in its CIccProfileXml::ParseTag() Error Path (CVSS 3.3, InternationalColorConsortium iccDEV)
- [CVE-2026-21673](https://cve.now/CVE-2026-21673.md): iccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2025-69197](https://cve.now/CVE-2025-69197.md): Pterodactyl TOTPs can be reused during validity window (CVSS 6.5, pterodactyl panel · pterodactyl/panel)
- [CVE-2025-68954](https://cve.now/CVE-2025-68954.md): Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced (CVSS 7.5, pterodactyl panel · github.com/pterodactyl/wings +1)
- [CVE-2025-15444](https://cve.now/CVE-2025-15444.md): Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium (CVSS 9.8, IAMB Crypt::Sodium::XS)
- [CVE-2026-21507](https://cve.now/CVE-2026-21507.md): iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID() (CVSS 7.5, InternationalColorConsortium iccDEV)
- [CVE-2025-59379](https://cve.now/CVE-2025-59379.md): DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to retrieve sensitive information from the underlying S (CVSS 7.5)
- [CVE-2025-60262](https://cve.now/CVE-2025-60262.md): An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulne (CVSS 9.8)
- [CVE-2025-60534](https://cve.now/CVE-2025-60534.md): Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests i (CVSS 9.8)
- [CVE-2025-65212](https://cve.now/CVE-2025-65212.md): An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.