# CVEs published 2026-01-07

224 CVEs were published on January 7, 2026: 19 critical, 62 high. Days are UTC.

- [CVE-2026-21858](https://cve.now/CVE-2026-21858.md): n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling (CVSS 10.0, n8n-io n8n · n8n)
- [CVE-2026-21875](https://cve.now/CVE-2026-21875.md): ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments (CVSS 9.8, MacWarrior clipbucket-v5)
- [CVE-2026-21869](https://cve.now/CVE-2026-21869.md): llama.cpp has Out-of-bounds Write in llama-server (CVSS 8.8, ggml-org llama.cpp)
- [CVE-2025-15346](https://cve.now/CVE-2025-15346.md): wolfSSL Python library \`CERT\_REQUIRED\` mode fails to enforce client certificate requirement (CVSS 9.3, wolfSSL-py · wolfssl)
- [CVE-2026-21859](https://cve.now/CVE-2026-21859.md): Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF) (CVSS 5.8, axllent mailpit · github.com/axllent/mailpit)
- [CVE-2026-21695](https://cve.now/CVE-2026-21695.md): Titra API Contains Mass Assignment Vulnerability (CVSS 4.3, kromitgmbh titra)
- [CVE-2019-25284](https://cve.now/CVE-2019-25284.md): V-SOL GPON/EPON OLT Platform V2.03.62R\_IPv6 v2.03 Reflected Cross-Site Scripting Vulnerability (CVSS 5.1, Guangzhou V V-SOL GPON/EPON OLT Platform)
- [CVE-2019-25280](https://cve.now/CVE-2019-25280.md): Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter (CVSS 5.1, Yahei.Net Yahei-PHP Prober)
- [CVE-2019-25277](https://cve.now/CVE-2019-25277.md): FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php (CVSS 5.1, iWT FaceSentry Access Control System)
- [CVE-2019-25270](https://cve.now/CVE-2019-25270.md): SOCA Access Control System 180612 Reflected Cross-Site Scripting via logged\_page.php (CVSS 5.1, SOCA Technology Co. SOCA Access Control System)
- [CVE-2026-21694](https://cve.now/CVE-2026-21694.md): Titra APIs have Improper Access Control (CVSS 6.8, kromitgmbh titra)
- [CVE-2019-25291](https://cve.now/CVE-2019-25291.md): INIM Electronics Smartliving SmartLAN/G/SI \<=6.x Hard-coded Credentials Vulnerability (CVSS 9.3, INIM Electronics s.r.l. Smartliving SmartLAN/G/SI)
- [CVE-2019-25290](https://cve.now/CVE-2019-25290.md): INIM Electronics Smartliving SmartLAN/G/SI \<=6.x Unauthenticated SSRF via GetImage (CVSS 6.9, INIM Electronics s.r.l. Smartliving SmartLAN/G/SI)
- [CVE-2019-25289](https://cve.now/CVE-2019-25289.md): INIM Electronics SmartLiving SmartLAN/G/SI \<=6.x Remote Command Execution (CVSS 8.7, INIM Electronics s.r.l. SmartLiving SmartLAN/G/SI)
- [CVE-2019-25282](https://cve.now/CVE-2019-25282.md): V-SOL GPON/EPON OLT Platform V2.03.62R\_IPv6 v2.03 Open Redirect via bindProfile.html (CVSS 5.1, Guangzhou V V-SOL GPON/EPON OLT Platform)
- [CVE-2019-25279](https://cve.now/CVE-2019-25279.md): FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability (CVSS 6.8, iWT FaceSentry Access Control System)
- [CVE-2019-25278](https://cve.now/CVE-2019-25278.md): FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure (CVSS 9.1, iWT FaceSentry Access Control System)
- [CVE-2019-25268](https://cve.now/CVE-2019-25268.md): NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution (CVSS 8.6, NREL BEopt)
- [CVE-2019-25259](https://cve.now/CVE-2019-25259.md): Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery (CVSS 5.1, Leica Geosystems AG Leica Geosystems GR10/GR25/GR30/GR50 GN…)
- [CVE-2019-25231](https://cve.now/CVE-2019-25231.md): devolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation (CVSS 8.5, devolo AG devolo dLAN Cockpit)
- [CVE-2017-20216](https://cve.now/CVE-2017-20216.md): FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection (CVSS 9.3, FLIR Systems FLIR Thermal Camera PT-Series)
- [CVE-2017-20215](https://cve.now/CVE-2017-20215.md): FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection (CVSS 8.7, FLIR Systems FLIR Thermal Camera FC-S/PT)
- [CVE-2017-20214](https://cve.now/CVE-2017-20214.md): FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability (CVSS 9.3, FLIR Systems FLIR Thermal Camera F/FC/PT/D)
- [CVE-2017-20213](https://cve.now/CVE-2017-20213.md): FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure (CVSS 8.7, FLIR Systems FLIR Thermal Camera F/FC/PT/D Stream)
- [CVE-2017-20212](https://cve.now/CVE-2017-20212.md): FLIR Thermal Camera F/FC/PT/D 8.0.0.64 Information Disclosure via File Reading (CVSS 8.7, FLIR Systems FLIR Thermal Camera F/FC/PT/D)
- [CVE-2023-7333](https://cve.now/CVE-2023-7333.md): bluelabsio records-mover Table Object sql injection (CVSS 4.8, bluelabsio records-mover · records-mover)
- [CVE-2025-62224](https://cve.now/CVE-2025-62224.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 5.5, Microsoft Edge for Android)
- [CVE-2026-21857](https://cve.now/CVE-2026-21857.md): Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read (CVSS 8.3, redaxo · redaxo/source)
- [CVE-2025-69262](https://cve.now/CVE-2025-69262.md): pnpm vulnerable to Command Injection via environment variable substitution (CVSS 7.6, pnpm)
- [CVE-2026-21697](https://cve.now/CVE-2026-21697.md): axios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak (CVSS 8.2, rezmoss axios4go)
- [CVE-2026-21851](https://cve.now/CVE-2026-21851.md): MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download (CVSS 5.3, Project-MONAI MONAI · monai)
- [CVE-2026-21441](https://cve.now/CVE-2026-21441.md): urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVSS 8.9, urllib3)
- [CVE-2026-22047](https://cve.now/CVE-2026-22047.md): iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2025-12776](https://cve.now/CVE-2025-12776.md): Stored Cross-Site Scripting (CVSS 1.8, Commvault WebConsole)
- [CVE-2026-22046](https://cve.now/CVE-2026-22046.md): iccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21693](https://cve.now/CVE-2026-21693.md): iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21692](https://cve.now/CVE-2026-21692.md): iccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2025-69264](https://cve.now/CVE-2025-69264.md): pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default" (CVSS 8.8, pnpm)
- [CVE-2026-21691](https://cve.now/CVE-2026-21691.md): iccDEV has Type Confusion in CIccTag:IsTypeCompressed() (CVSS 5.4, InternationalColorConsortium iccDEV)
- [CVE-2026-21690](https://cve.now/CVE-2026-21690.md): iccDEV has Type Confusion in CIccTagXmlTagData::ToXml() (CVSS 6.3, InternationalColorConsortium iccDEV)
- [CVE-2026-21689](https://cve.now/CVE-2026-21689.md): iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp (CVSS 6.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21688](https://cve.now/CVE-2026-21688.md): iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21687](https://cve.now/CVE-2026-21687.md): iccDEV has Undefined Behavior in CIccTagCurve::CIccTagCurve() (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2025-69263](https://cve.now/CVE-2025-69263.md): pnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies (CVSS 7.5, pnpm)
- [CVE-2026-21686](https://cve.now/CVE-2026-21686.md): iccDEV has Undefined Behavior in CIccTagLutAtoB::Validate() (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2026-21685](https://cve.now/CVE-2026-21685.md): iccDEV has Undefined Behavior in CIccTagLut16::Read() (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2026-21684](https://cve.now/CVE-2026-21684.md): iccDEV has Undefined Behavior in CIccTagSpectralViewingConditions() (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2025-69222](https://cve.now/CVE-2025-69222.md): LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions (CVSS 9.1, danny-avila LibreChat)
- [CVE-2025-13151](https://cve.now/CVE-2025-13151.md): CVE-2025-13151 (CVSS 7.5, GnuTLS libtasn1)
- [CVE-2026-21683](https://cve.now/CVE-2026-21683.md): iccDEV has Type Confusion in icStatusCMM::CIccEvalCompare::EvaluateProfile() (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2025-69221](https://cve.now/CVE-2025-69221.md): LibreChat has Insufficient Access Control for Agent Permission Queries (CVSS 4.3, danny-avila LibreChat)
- [CVE-2026-21682](https://cve.now/CVE-2026-21682.md): iccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText() (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2025-69220](https://cve.now/CVE-2025-69220.md): LibreChat has Insufficient Access Control for Agent Files (CVSS 7.1, danny-avila LibreChat)
- [CVE-2026-21681](https://cve.now/CVE-2026-21681.md): iccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cpp (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2025-69255](https://cve.now/CVE-2025-69255.md): RustFS gRPC GetMetrics deserialization panic enables remote DoS (CVSS 5.5, rustfs)
- [CVE-2025-68705](https://cve.now/CVE-2025-68705.md): RustFS Path Traversal Vulnerability (CVSS 8.8, rustfs)
- [CVE-2026-22187](https://cve.now/CVE-2026-22187.md): Bio-Formats \<= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files (CVSS 6.8, Open Microscopy Environment Bio-Formats · ome:pom-bio-forma…)
- [CVE-2026-22186](https://cve.now/CVE-2026-22186.md): Bio-Formats \<= 8.3.0 XXE in Leica XLEF Metadata Parser (CVSS 4.6, Open Microscopy Environment Bio-Formats · ome:pom-bio-forma…)
- [CVE-2026-22185](https://cve.now/CVE-2026-22185.md): OpenLDAP LMDB mdb\_load Heap Buffer Underflow in readline() (CVSS 4.6, OpenLDAP Foundation OpenLDAP)
- [CVE-2026-22188](https://cve.now/CVE-2026-22188.md): Panda3D \<= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca() (CVSS 6.9, Panda3D)
- [CVE-2026-22190](https://cve.now/CVE-2026-22190.md): Panda3D \<= 1.10.16 egg-mkfont Format String Information Disclosure (CVSS 5.1, Panda3D)
- [CVE-2026-22189](https://cve.now/CVE-2026-22189.md): Panda3D \<= 1.10.16 egg-mkfont Stack Buffer Overflow (CVSS 6.9, Panda3D)
- [CVE-2026-22184](https://cve.now/CVE-2026-22184.md): zlib \<= 1.3.1.2 untgz Global Buffer Overflow in TGZfname() (CVSS 4.6, zlib software zlib)
- [CVE-2025-66620](https://cve.now/CVE-2025-66620.md): Columbia Weather Systems MicroServer Command Shell in Externally Accessible Directory (CVSS 8.6, Columbia Weather Systems MicroServer)
- [CVE-2025-64305](https://cve.now/CVE-2025-64305.md): Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk (CVSS 7.1, Columbia Weather Systems MicroServer)
- [CVE-2025-61939](https://cve.now/CVE-2025-61939.md): Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended Endpoints (CVSS 8.7, Columbia Weather Systems MicroServer)
- [CVE-2026-0670](https://cve.now/CVE-2026-0670.md): Stored XSS through a system message and a user-provided parameter in ProofreadPage (CVSS 6.1, Wikimedia Foundation MediaWiki - ProofreadPage Extension)
- [CVE-2026-21856](https://cve.now/CVE-2026-21856.md): Tarkov Data Manager has Authenticated SQL Injection (CVSS 7.2, the-hideout tarkov-data-manager)
- [CVE-2026-21855](https://cve.now/CVE-2026-21855.md): Tarkov Data Manager has Unauthenticated Reflected XSS (CVSS 9.3, the-hideout tarkov-data-manager)
- [CVE-2026-21854](https://cve.now/CVE-2026-21854.md): Tarkov Data Manager Authentication Bypass vulnerability (CVSS 9.8, the-hideout tarkov-data-manager)
- [CVE-2026-21680](https://cve.now/CVE-2026-21680.md): iccDEV has Null Pointer Dereference in CIccProfile::CheckTagTypes() (CVSS 6.5, InternationalColorConsortium iccDEV)
- [CVE-2026-0669](https://cve.now/CVE-2026-0669.md): Path Traversal vulnerability in CSS extension on certain web servers (CVSS 7.5, Wikimedia Foundation MediaWiki - CSS extension)
- [CVE-2026-0668](https://cve.now/CVE-2026-0668.md): VisualData extension: Regular Expression Denial of Service (ReDoS) via crafted user input (CVSS 5.3, Wikimedia Foundation MediaWiki - VisualData Extension)
- [CVE-2025-66560](https://cve.now/CVE-2025-66560.md): Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write (CVSS 5.9, quarkusio quarkus · io.quarkus:quarkus-rest)
- [CVE-2025-61782](https://cve.now/CVE-2025-61782.md): Open Redirect in OpenCTI's SAML Authentication Flow (CVSS 5.4, OpenCTI-Platform opencti · pycti)
- [CVE-2025-58441](https://cve.now/CVE-2025-58441.md): Knowage is vulnerable to blind server-side request forgery (SSRF) (CVSS 6.3, KnowageLabs Knowage-Server)
- [CVE-2026-22539](https://cve.now/CVE-2026-22539.md): INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP) (CVSS 5.3, EFACEC QC 60/90/120)
- [CVE-2026-21679](https://cve.now/CVE-2026-21679.md): iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText() (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21678](https://cve.now/CVE-2026-21678.md): iccDEV has heap-buffer-overflow vulnerability on IccTagXml() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21506](https://cve.now/CVE-2026-21506.md): iccDEV is Vulnerable to Null Pointer Dereference in CIccProfileXml::ParseBasic() Leading to Denial of Service (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21505](https://cve.now/CVE-2026-21505.md): iccDEV has Undefined Behavior (UB) - Invalid Enum Value (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21503](https://cve.now/CVE-2026-21503.md): iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-21504](https://cve.now/CVE-2026-21504.md): Heap Buffer Overflow in iccDEV ToneMap Parser (CVSS 6.6, InternationalColorConsortium iccDEV)
- [CVE-2026-21501](https://cve.now/CVE-2026-21501.md): Stack Overflow in iccDEV Calculator Parser (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21502](https://cve.now/CVE-2026-21502.md): NULL Pointer Dereference in iccDEV XML Tag Parser (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21500](https://cve.now/CVE-2026-21500.md): Stack Overflow in iccDEV XML Calculator Macro Expansion (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21499](https://cve.now/CVE-2026-21499.md): NULL Pointer Dereference in iccDEV XML Parser (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21498](https://cve.now/CVE-2026-21498.md): NULL Pointer Dereference in iccDEV XML Calculator Parser (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21496](https://cve.now/CVE-2026-21496.md): NULL Pointer Dereference in iccDEV Signature Parser (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2025-4677](https://cve.now/CVE-2025-4677.md): Idle session timeout is not configured for multiple open ports (CVSS 6.5, ABB WebPro SNMP Card PowerValue)
- [CVE-2026-21497](https://cve.now/CVE-2026-21497.md): NULL Pointer Dereference in iccDEV Unknown Tag Parser (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-21495](https://cve.now/CVE-2026-21495.md): Division by Zero in iccDEV TIFF Image Reader (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-22537](https://cve.now/CVE-2026-22537.md): INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM (CVSS 6.8, EFACEC QC 60/90/120)
- [CVE-2025-4676](https://cve.now/CVE-2025-4676.md): Authentication bypass by brute forcing Authentication Headers (CVSS 8.8, ABB WebPro SNMP Card PowerValue)
- [CVE-2026-0618](https://cve.now/CVE-2026-0618.md): Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13. (CVSS 6.1, Devolutions PowerShell Universal)
- [CVE-2025-4675](https://cve.now/CVE-2025-4675.md): Improper implementation of Modbus protocol leading to DOS attack (CVSS 6.5, ABB WebPro SNMP Card PowerValue)
- [CVE-2026-22536](https://cve.now/CVE-2026-22536.md): PRIVILEGE ESCALATION VIA SUDO COMMAND (CVSS 8.6, EFACEC QC 60/90/120)
- [CVE-2026-22535](https://cve.now/CVE-2026-22535.md): FRAIL SECURITY IN MQTT PROTOCOL ALLOWS AN ATTACKER MODIFY CRITICAL PARAMETERS (CVSS 8.9, EFACEC QC 60/90/120)
- [CVE-2026-20029](https://cve.now/CVE-2026-20029.md): Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability (CVSS 4.9, Cisco Identity Services Engine Software)
- [CVE-2026-20027](https://cve.now/CVE-2026-20027.md): Cisco Snort DCERPC Stub Data Out of Bounds Read (CVSS 5.3, Cisco Secure Firewall Threat Defense (FTD) Software · Cisco…)
- [CVE-2026-20026](https://cve.now/CVE-2026-20026.md): Multiple Cisco Products Snort 3 DCERPC Vulnerabilities (CVSS 5.8, Cisco Secure Firewall Threat Defense (FTD) Software · Cisco…)
- [CVE-2026-22544](https://cve.now/CVE-2026-22544.md): EXCHANGE OF CREDENTIALS IN CLEAR TEXT (CVSS 8.7, EFACEC QC 60/90/120)
- [CVE-2026-22543](https://cve.now/CVE-2026-22543.md): WEEK ENCODING FOR PASSWORDS (CVSS 6.9, EFACEC QC 60/90/120)
- [CVE-2025-12543](https://cve.now/CVE-2025-12543.md): Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf (CVSS 9.6, Red Hat build of Apache Camel 4.14.4 for Spring Boot ·… +10)
- [CVE-2026-22542](https://cve.now/CVE-2026-22542.md): DENIAL OF SERVICE FOR CONCURRENT CONNECTIONS ON TELNET (CVSS 9.2, EFACEC QC 60/90/120)
- [CVE-2025-62327](https://cve.now/CVE-2025-62327.md): HCL DevOps Deploy is susceptible to insufficiently protected credentials (CVSS 4.9, HCLSoftware DevOps Deploy)
- [CVE-2026-22541](https://cve.now/CVE-2026-22541.md): DENIAL OF SERVICE VIA ICMP PACKETS (CVSS 8.2, EFACEC QC 60/90/120)
- [CVE-2026-22540](https://cve.now/CVE-2026-22540.md): DENIAL OF SERVICE VIA ARP PACKETS (CVSS 9.2, EFACEC QC60/90/120)
- [CVE-2025-49335](https://cve.now/CVE-2025-49335.md): WordPress External Media plugin \<= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, minnur External Media)
- [CVE-2025-15479](https://cve.now/CVE-2025-15479.md): NGSurvey Enterprise 3.6.4 incorrect authorization exposes other users’ API keys and personal data (CVSS 5.1, Data Illusion Zumbrunn NGSurvey)
- [CVE-2025-6225](https://cve.now/CVE-2025-6225.md): Command injection in Kieback&Peter Neutrino-GLT (CVSS 6.9, Kieback&Peter Neutrino-GLT)
- [CVE-2025-47552](https://cve.now/CVE-2025-47552.md): WordPress DZS Video Gallery plugin \<= 12.37 - PHP Object Injection Vulnerability (CVSS 9.8, Digital zoom studio DZS Video Gallery)
- [CVE-2025-46494](https://cve.now/CVE-2025-46494.md): WordPress WidgetKit Pro plugin \<= 1.13.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themesgrove WidgetKit Pro)
- [CVE-2025-46434](https://cve.now/CVE-2025-46434.md): WordPress The Plus Addons for Elementor Pro plugin \< 6.3.7 - Broken Access Control vulnerability (CVSS 6.5, POSIMYTH Innovation The Plus Addons for Elementor Pro)
- [CVE-2025-46256](https://cve.now/CVE-2025-46256.md): WordPress Advanced Database Cleaner PRO Plugin \<= 3.2.10 - Limited .txt Path Traversal vulnerability (CVSS 6.4, SigmaPlugin Advanced Database Cleaner PRO)
- [CVE-2025-32303](https://cve.now/CVE-2025-32303.md): WordPress WPCHURCH plugin \<= 2.7.0 - SQL Injection Vulnerability (CVSS 9.3, Mojoomla WPCHURCH)
- [CVE-2025-32300](https://cve.now/CVE-2025-32300.md): WordPress DZS Video Gallery plugin \<= 12.25 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Digital zoom studio DZS Video Gallery)
- [CVE-2025-31643](https://cve.now/CVE-2025-31643.md): WordPress WPCHURCH plugin \<= 2.7.0 - Privilege Escalation Vulnerability (CVSS 8.8, Dasinfomedia WPCHURCH)
- [CVE-2025-69080](https://cve.now/CVE-2025-69080.md): WordPress Gecko theme \<= 1.9.8 - Local File Inclusion vulnerability (CVSS 8.1, JanStudio Gecko)
- [CVE-2025-69081](https://cve.now/CVE-2025-69081.md): WordPress Hope theme \<= 3.0.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Hope)
- [CVE-2025-69082](https://cve.now/CVE-2025-69082.md): WordPress Arlo theme \<= 6.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Frenify Arlo)
- [CVE-2025-69333](https://cve.now/CVE-2025-69333.md): WordPress JetEngine plugin \<= 3.8.1.1 - Broken Access Control vulnerability (CVSS 4.3, Crocoblock JetEngine)
- [CVE-2025-69344](https://cve.now/CVE-2025-69344.md): WordPress Oneline Lite theme \<= 6.6 - Broken Access Control vulnerability (CVSS 4.3, themehunk Oneline Lite)
- [CVE-2025-68637](https://cve.now/CVE-2025-68637.md): Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client (CVSS 9.1, Apache Software Foundation Apache Uniffle)
- [CVE-2025-13722](https://cve.now/CVE-2025-13722.md): Fluent Forms \<= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder (CVSS 5.3, techjewel Fluent Forms – Customizable Contact Forms, Survey…)
- [CVE-2025-14057](https://cve.now/CVE-2025-14057.md): Multi-column Tag Map \<= 17.0.39 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mctm\_css\_conditional' Parameter (CVSS 4.4, tugbucket Multi-column Tag Map)
- [CVE-2025-14077](https://cve.now/CVE-2025-14077.md): Simcast \<= 1.0.0 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, openchamp Simcast)
- [CVE-2025-15058](https://cve.now/CVE-2025-15058.md): Responsive Pricing Table \<= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table\_currency' (CVSS 6.4, spwebguy Responsive Pricing Table)
- [CVE-2025-14114](https://cve.now/CVE-2025-14114.md): 1180px Shortcodes \<= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute (CVSS 6.4, chrisblackwell 1180px Shortcodes)
- [CVE-2025-14460](https://cve.now/CVE-2025-14460.md): Piraeus Bank WooCommerce Payment Gateway \<= 3.1.4 - Missing Authorization to Unauthenticated Arbitrary Order Status Change (CVSS 5.3, enartia Piraeus Bank WooCommerce Payment Gateway)
- [CVE-2025-14122](https://cve.now/CVE-2025-14122.md): AD Sliding FAQ \<= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, anybodesign AD Sliding FAQ)
- [CVE-2025-13974](https://cve.now/CVE-2025-13974.md): Email Customizer for WooCommerce | Drag and Drop Email Templates Builder \<= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content (CVSS 4.4, themehigh Email Customizer for WooCommerce | Drag and Drop…)
- [CVE-2025-14121](https://cve.now/CVE-2025-14121.md): EDD Download Info \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, samikeijonen EDD Download Info)
- [CVE-2025-14147](https://cve.now/CVE-2025-14147.md): Easy GitHub Gist Shortcodes \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute (CVSS 6.4, corsonr Easy GitHub Gist Shortcodes)
- [CVE-2025-13841](https://cve.now/CVE-2025-13841.md): Smart App Banners \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' and 'verticalalign' Shortcode Attributes (CVSS 6.4, clevelandwebdeveloper Smart App Banners)
- [CVE-2025-13801](https://cve.now/CVE-2025-13801.md): Yoco Payments \<= 3.9.0 - Unauthenticated Arbitrary File Read (CVSS 7.5, yocoadmin Yoco Payments)
- [CVE-2025-14070](https://cve.now/CVE-2025-14070.md): Reviewify \<= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon Creation (CVSS 7.5, xfinitysoft Reviewify — Review Discounts & Photo/Video Revi…)
- [CVE-2025-13990](https://cve.now/CVE-2025-13990.md): Mamurjor Employee Info \<= 1.0.0 - Cross-Site Request Forgery to Arbitrary Employee and Related Data Manipulation (CVSS 4.3, Mamurjor Employee Info)
- [CVE-2025-13419](https://cve.now/CVE-2025-13419.md): Guest posting / Frontend Posting / Front Editor – WP Front User Submit \<= 5.0.0 - Missing Authorization to Unauthenticated Media Deletion (CVSS 5.3, aharonyan Guest posting / Frontend Posting / Front Editor –…)
- [CVE-2025-14465](https://cve.now/CVE-2025-14465.md): Sticky Action Buttons \<= 1.1 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, praveentamil Sticky Action Buttons)
- [CVE-2025-14144](https://cve.now/CVE-2025-14144.md): Mstoic Shortcodes \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start' Shortcode Attribute (CVSS 6.4, Mstoic Shortcodes)
- [CVE-2025-14131](https://cve.now/CVE-2025-14131.md): WP Widget Changer \<= 1.2.5 - Reflected Cross-Site Scripting via $\_SERVER\['PHP\_SELF'\] (CVSS 6.1, damienoh WP Widget Changer)
- [CVE-2025-14453](https://cve.now/CVE-2025-14453.md): My Album Gallery \<= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style\_css' Shortcode Attribute (CVSS 6.4, ruhul080 My Album Gallery)
- [CVE-2025-14113](https://cve.now/CVE-2025-14113.md): Viitor Button Shortcodes \<= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute (CVSS 6.4, viitorcloudvc Viitor Button Shortcodes)
- [CVE-2025-14112](https://cve.now/CVE-2025-14112.md): Snillrik Restaurant \<= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'menu\_style' Shortcode Attribute (CVSS 6.4, mattiaspkallio Snillrik Restaurant Menu)
- [CVE-2025-13418](https://cve.now/CVE-2025-13418.md): Responsive Pricing Table \<= 5.1.12 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4, spwebguy Responsive Pricing Table)
- [CVE-2025-14626](https://cve.now/CVE-2025-14626.md): QR Code for WooCommerce order emails, PDF invoices, packing slips \<= 1.9.42 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, www15to QR Code for WooCommerce order emails, PDF invoices,…)
- [CVE-2025-14130](https://cve.now/CVE-2025-14130.md): Post Like Dislike \<= 1.0 - Reflected Cross-Site Scripting via $\_SERVER\['PHP\_SELF'\] (CVSS 6.1, cuvixsystem Post Like Dislike)
- [CVE-2025-13849](https://cve.now/CVE-2025-13849.md): Cool YT Player \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, matiasanca Cool YT Player)
- [CVE-2025-13887](https://cve.now/CVE-2025-13887.md): AI BotKit \<= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, wisdmlabs AI ChatBot for WordPress by AI BotKit – Live in 2…)
- [CVE-2025-14145](https://cve.now/CVE-2025-14145.md): Niche Hero | Beautifully-designed blocks in seconds \<= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'spacing' Shortcode Attribute (CVSS 6.4, djrowling Niche Hero | Beautifully-designed blocks in secon…)
- [CVE-2025-14352](https://cve.now/CVE-2025-14352.md): Awesome Hotel Booking \<= 1.0.3 - Incorrect Authorization to Unauthenticated Arbitrary Booking Modification (CVSS 5.3, nahian91 Awesome Hotel Booking)
- [CVE-2025-14110](https://cve.now/CVE-2025-14110.md): WP Js List Pages Shortcodes \<= 1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute (CVSS 6.4, pichel WP Js List Pages Shortcodes)
- [CVE-2025-13848](https://cve.now/CVE-2025-13848.md): STM Gallery 1.9 \<= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, sergiotoca STM Gallery)
- [CVE-2025-14118](https://cve.now/CVE-2025-14118.md): Starred Review \<= 1.4.2 - Reflected Cross-Site Scripting via PHP\_SELF Variable (CVSS 6.1, callumalden Starred Review)
- [CVE-2025-14028](https://cve.now/CVE-2025-14028.md): Contact Us Simple Form \<= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings (CVSS 4.4, bruterdregz Contact Us Simple Form)
- [CVE-2025-14796](https://cve.now/CVE-2025-14796.md): My Album Gallery \<= 1.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title (CVSS 6.4, ruhul080 My Album Gallery)
- [CVE-2025-14128](https://cve.now/CVE-2025-14128.md): Stumble! for WordPress \<= 1.1.1 - Reflected Cross-Site Scripting via $\_SERVER\['PHP\_SELF'\] (CVSS 6.1, mitchoyoshitaka Stumble! for WordPress)
- [CVE-2025-14127](https://cve.now/CVE-2025-14127.md): Testimonial Master \<= 0.2.1 - Reflected Cross-Site Scripting via $\_SERVER\['PHP\_SELF'\] (CVSS 6.1, fpcorso Testimonial Master)
- [CVE-2025-13667](https://cve.now/CVE-2025-13667.md): WP Recipe Manager \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Skill Level' Input Field (CVSS 6.4, tomiup WP Recipe Manager)
- [CVE-2025-14109](https://cve.now/CVE-2025-14109.md): AH Shortcodes \<= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'column' Shortcode Attribute (CVSS 6.4, ahecht AH Shortcodes)
- [CVE-2025-13694](https://cve.now/CVE-2025-13694.md): AA Block country \<= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header (CVSS 5.3, aaextensions AA Block country)
- [CVE-2025-14053](https://cve.now/CVE-2025-14053.md): Travel Bucket List \<= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, jseto Travel Bucket List – Wish To Go)
- [CVE-2025-13847](https://cve.now/CVE-2025-13847.md): PhotoFade \<= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, davidangel PhotoFade)
- [CVE-2025-15018](https://cve.now/CVE-2025-15018.md): Optional Email \<= 1.3.11 - Unauthenticated Privilege Escalation to Account Takeover (CVSS 9.8, djanym Optional Email)
- [CVE-2025-13521](https://cve.now/CVE-2025-13521.md): WP Status Notifier \<= 1.0 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, fulippo WP Status Notifier)
- [CVE-2025-15158](https://cve.now/CVE-2025-15158.md): WP Enable WebP \<= 1.0 - Authenticated (Author+) Arbitrary File Upload (CVSS 8.8, eastsidecode WP Enable WebP)
- [CVE-2025-13497](https://cve.now/CVE-2025-13497.md): Recras WordPress plugin \<= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'recrasname' Shortcode Attribute (CVSS 6.4, zanderz Recras)
- [CVE-2025-13496](https://cve.now/CVE-2025-13496.md): Moosend Landing Pages \<= 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Option Deletion (CVSS 5.3, Moosend Landing Pages)
- [CVE-2025-13520](https://cve.now/CVE-2025-13520.md): MTCaptcha WordPress Plugin \<= 2.7.2 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, MTCaptcha WordPress Plugin)
- [CVE-2025-13493](https://cve.now/CVE-2025-13493.md): Latest Registered Users \<= 1.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via User Data Export (CVSS 7.5, webrndexperts Latest Registered Users)
- [CVE-2025-13527](https://cve.now/CVE-2025-13527.md): xShare \<= 1.0.1 - Cross-Site Request Forgery to 'rs\_plugin\_reset' Parameter (CVSS 4.3, anwerashif xShare)
- [CVE-2025-12958](https://cve.now/CVE-2025-12958.md): Rankology SEO and Analytics Tool \<= 2.0 - Incorrect Authorization to Authenticated (Editor+) Header & Footer Code Creation (CVSS 2.7, Rankology SEO and Analytics Tool)
- [CVE-2025-13529](https://cve.now/CVE-2025-13529.md): Unify \<= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify\_plugin\_downgrade' Parameter (CVSS 5.3, codeclouds Unify)
- [CVE-2025-14999](https://cve.now/CVE-2025-14999.md): Latest Tabs \<= 1.5 - Cross-Site Request Forgery to Plugin's Settings Update (CVSS 4.3, kentothemes Latest Tabs)
- [CVE-2025-12540](https://cve.now/CVE-2025-12540.md): ShareThis Dashboard for Google Analytics \<= 3.2.4 - Unauthenticated Google Analytics Data Exposure (CVSS 4.7, ShareThis Dashboard for Google Analytics)
- [CVE-2025-12030](https://cve.now/CVE-2025-12030.md): ACF to REST API \<= 3.3.4 - Insecure Direct Object Reference to Authenticated (Contributor+) ACF Field/Option Modification (CVSS 4.3, airesvsg ACF to REST API)
- [CVE-2025-13519](https://cve.now/CVE-2025-13519.md): SVG Map Plugin \<= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting (CVSS 6.1, SVG Map by Smjrifle)
- [CVE-2025-13531](https://cve.now/CVE-2025-13531.md): Stylish Order Form Builder \<= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product\_name' Parameter (CVSS 6.4, hayyatapps Stylish Order Form Builder)
- [CVE-2025-15000](https://cve.now/CVE-2025-15000.md): Page Keys \<= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'page\_key' Parameter (CVSS 4.4, tfrommen Page Keys)
- [CVE-2025-11877](https://cve.now/CVE-2025-11877.md): User Activity Log \<= 2.2 - Unauthenticated Limited Options Update via Failed Login (CVSS 7.5, solwininfotech User Activity Log)
- [CVE-2025-0980](https://cve.now/CVE-2025-0980.md): JSON RPC authentication bypass in Nokia SR Linux (CVSS 6.4, Nokia SR Linux)
- [CVE-2025-31964](https://cve.now/CVE-2025-31964.md): HCL BigFix IVR is impacted by an improper service binding configuration (CVSS 2.2, HCLSoftware BigFix IVR)
- [CVE-2025-14792](https://cve.now/CVE-2025-14792.md): Key Figures \<= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting via kf\_field\_figure\_default\_color\_render (CVSS 4.4, audrasjb Key Figures)
- [CVE-2025-12449](https://cve.now/CVE-2025-12449.md): aBlocks – WordPress Gutenberg Blocks \<= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification (CVSS 5.4, kodezen aBlocks – Gutenberg Blocks, User Dashboard Builder,…)
- [CVE-2025-13369](https://cve.now/CVE-2025-13369.md): Premmerce WooCommerce Customers Manager \<= 1.1.14 - Reflected Cross-Site Scripting (CVSS 6.1, Premmerce WooCommerce Customers Manager)
- [CVE-2025-14802](https://cve.now/CVE-2025-14802.md): LearnPress – WordPress LMS Plugin \<= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion (CVSS 5.4, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2025-31963](https://cve.now/CVE-2025-31963.md): HCL BigFix IVR is impacted by improper authentication and missing CSRF protection (CVSS 2.9, HCLSoftware BigFix IVR)
- [CVE-2025-31962](https://cve.now/CVE-2025-31962.md): HCL BigFix IVR is impacted by an insufficient session expiration vulnerability (CVSS 2.0, HCLSoftware BigFix IVR)
- [CVE-2025-14867](https://cve.now/CVE-2025-14867.md): Flashcard Plugin for WordPress \<= 0.9 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal (CVSS 6.5, liangshao Flashcard Plugin for WordPress)
- [CVE-2025-14842](https://cve.now/CVE-2025-14842.md): Drag and Drop Multiple File Upload – Contact Form 7 \<= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload (CVSS 6.1, glenwpcoder Drag and Drop Multiple File Upload for Contact…)
- [CVE-2026-0656](https://cve.now/CVE-2026-0656.md): iPaymu Payment Gateway for WooCommerce \<= 2.0.2 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure (CVSS 8.2, iPaymu Payment Gateway for WooCommerce)
- [CVE-2025-13371](https://cve.now/CVE-2025-13371.md): Money Space \<= 2.13.9 - Unauthenticated Sensitive Information Exposure (CVSS 8.6, moneyspace Money Space)
- [CVE-2025-14845](https://cve.now/CVE-2025-14845.md): NS IE Compatibility Fixer \<= 2.1.5 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, nsthemes NS Ie Compatibility Fixer)
- [CVE-2025-14888](https://cve.now/CVE-2025-14888.md): Simple User Meta Editor \<= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via User Meta Value Field (CVSS 4.4, anjan011 Simple User Meta Editor)
- [CVE-2025-13657](https://cve.now/CVE-2025-13657.md): HelpDesk contact form plugin \<= 1.1.5 - Cross-Site Request Forgery to Settings Update via handle\_query\_args (CVSS 4.3, helpdeskcom HelpDesk Contact Form)
- [CVE-2025-14887](https://cve.now/CVE-2025-14887.md): twinklesmtp – Email Service Provider For WordPress \<= 1.03 - Authenticated (Administrator+) Stored Cross-Site Scripting via Sender Settings (CVSS 4.4, wpcommerz twinklesmtp – Email Service Provider For WordPress)
- [CVE-2025-14370](https://cve.now/CVE-2025-14370.md): Quote Comments \<= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update (CVSS 4.3, metodiew Quote Comments)
- [CVE-2025-14875](https://cve.now/CVE-2025-14875.md): HBLPAY Payment Gateway for WooCommerce \<= 5.0.0 - Reflected Cross-Site Scripting via 'cusdata' Parameter (CVSS 6.1, HBLPAY Payment Gateway for WooCommerce)
- [CVE-2025-14901](https://cve.now/CVE-2025-14901.md): Bit Form – Contact Form Plugin \<= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay (CVSS 6.5, bitpressadmin Bit Form – Custom Contact Form, Multi Step, C…)
- [CVE-2025-14904](https://cve.now/CVE-2025-14904.md): Newsletter Email Subscribe \<= 2.4 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, anilankola Newsletter Email Subscribe)
- [CVE-2025-14804](https://cve.now/CVE-2025-14804.md): Frontend File Manager \< 23.5 - Subscriber+ Arbitrary File Deletion (CVSS 7.7, Frontend File Manager Plugin)
- [CVE-2025-14719](https://cve.now/CVE-2025-14719.md): Relevanssi (Free \< 4.26.0, Premium \< 2.29.0) - Contributor+ SQLi (CVSS 4.9, Relevanssi)
- [CVE-2025-14835](https://cve.now/CVE-2025-14835.md): WP Photo Album Plus \<= 9.1.05.008 - Reflected Cross-Site Scripting (CVSS 7.1, opajaap WP Photo Album Plus)
- [CVE-2025-15474](https://cve.now/CVE-2025-15474.md): AuntyFey Smart Combination Lock BLE Connection Flood DoS (CVSS 5.3, AuntyFey Smart Combination Lock)
- [CVE-2025-14468](https://cve.now/CVE-2025-14468.md): AMP for WP – Accelerated Mobile Pages \<= 1.1.9 - Cross-Site Request Forgery to Comment Submission (CVSS 4.3, mohammed\_kaludi AMP for WP – Accelerated Mobile Pages)
- [CVE-2026-0650](https://cve.now/CVE-2026-0650.md): OpenFlagr \<= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization (CVSS 9.3, OpenFlagr Flagr · github.com/openflagr/flagr)
- [CVE-2025-9611](https://cve.now/CVE-2025-9611.md): Microsoft Playwright MCP Server \< 0.0.40 DNS Rebinding via Missing Origin Header Validation (CVSS 7.2, Microsoft Playwright · @playwright/mcp)
- [CVE-2025-14059](https://cve.now/CVE-2025-14059.md): EmailKit \<= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal (CVSS 6.5, roxnor EmailKit – Email Customizer for WooCommerce & WP)
- [CVE-2025-14891](https://cve.now/CVE-2025-14891.md): Customer Reviews for WooCommerce \<= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter (CVSS 6.4, ivole Customer Reviews for WooCommerce)
- [CVE-2026-20893](https://cve.now/CVE-2026-20893.md): Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. (CVSS 7.8, Fujitsu Client Computing Limited Fujitsu Security Solution…)
- [CVE-2025-12648](https://cve.now/CVE-2025-12648.md): WP-Members Membership Plugin \<= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files (CVSS 5.3, cbutlerjr WP-Members Membership Plugin)
- [CVE-2025-14631](https://cve.now/CVE-2025-14631.md): Null Pointer Dereference Vulnerability in Malformed 802.11 Frame of TP-Link Archer BE400 (CVSS 7.1, TP-Link Systems Archer BE400)
- [CVE-2026-0649](https://cve.now/CVE-2026-0649.md): invoiceninja Migration Import Import.php copy server-side request forgery (CVSS 5.1, invoiceninja)
- [CVE-2024-14020](https://cve.now/CVE-2024-14020.md): carboneio carbone Formatter input.js prototype pollution (CVSS 2.3, carboneio carbone · carbone)
- [CVE-2025-61489](https://cve.now/CVE-2025-61489.md): A command injection vulnerability in the shell\_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via (CVSS 6.5)
- [CVE-2025-61492](https://cve.now/CVE-2025-61492.md): A command injection vulnerability in the execute\_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary com (CVSS 10.0, terminal-controller)
- [CVE-2025-65805](https://cve.now/CVE-2025-65805.md): OpenAirInterface CN5G AMF\<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. (CVSS 7.5)
- [CVE-2025-66686](https://cve.now/CVE-2025-66686.md): A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. (CVSS 6.1)
- [CVE-2025-66786](https://cve.now/CVE-2025-66786.md): OpenAirInterface CN5G AMF\<=v2.0.1 There is a logical error when processing JSON format requests. (CVSS 7.5)
- [CVE-2025-66837](https://cve.now/CVE-2025-66837.md): A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware (CVSS 6.8)
- [CVE-2025-66838](https://cve.now/CVE-2025-66838.md): In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upl (CVSS 6.5)
- [CVE-2025-67364](https://cve.now/CVE-2025-67364.md): fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast\_read\_file. (CVSS 7.5, fast-filesystem-mcp)
- [CVE-2025-67366](https://cve.now/CVE-2025-67366.md): @sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.