# CVEs published 2026-01-14

180 CVEs were published on January 14, 2026: 11 critical, 49 high. Days are UTC.

- [CVE-2026-0600](https://cve.now/CVE-2026-0600.md): Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration (CVSS 6.2, Sonatype Nexus Repository)
- [CVE-2025-12166](https://cve.now/CVE-2025-12166.md): Simply Schedule Appointments \<= 1.6.9.9 - Unauthenticated SQL Injection via \`order\` and \`append\_where\_sql\` Parameters (CVSS 7.5, croixhaug Appointment Booking Calendar — Simply Schedule Ap…)
- [CVE-2025-14058](https://cve.now/CVE-2025-14058.md): A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical acc (CVSS 2.4, Lenovo Tab M11 TB330FU TB330XU · Lenovo Tab K11 TB330FU +29)
- [CVE-2026-0421](https://cve.now/CVE-2026-0421.md): A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in (CVSS 7.0, Lenovo ThinkPad L13 Gen 6 BIOS · Lenovo ThinkPad L13 Gen… +2)
- [CVE-2025-13455](https://cve.now/CVE-2025-13455.md): A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device auth (CVSS 7.3, Lenovo ThinkPlus FU100 · Lenovo ThinkPlus FU200 +2)
- [CVE-2025-13454](https://cve.now/CVE-2025-13454.md): A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sen (CVSS 6.8, Lenovo ThinkPlus FU100 · Lenovo ThinkPlus FU200 +2)
- [CVE-2025-13453](https://cve.now/CVE-2025-13453.md): A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the (CVSS 5.1, Lenovo ThinkPlus FU100 · Lenovo ThinkPlus FU200 +2)
- [CVE-2025-13154](https://cve.now/CVE-2025-13154.md): An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated loca (CVSS 6.8, Lenovo Vantage)
- [CVE-2026-0601](https://cve.now/CVE-2026-0601.md): Nexus Repository 3 - Cross-Site Scripting (CVSS 5.1, Sonatype Nexus Repository)
- [CVE-2026-0861](https://cve.now/CVE-2026-0861.md): Integer overflow in memalign leads to heap corruption (CVSS 8.4, The GNU C Library glibc)
- [CVE-2026-23512](https://cve.now/CVE-2026-23512.md): SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp (CVSS 8.6, sumatrapdfreader sumatrapdf)
- [CVE-2026-0961](https://cve.now/CVE-2026-0961.md): Out-of-bounds Write in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-0962](https://cve.now/CVE-2026-0962.md): Out-of-bounds Write in Wireshark (CVSS 5.3, Wireshark Foundation Wireshark)
- [CVE-2026-0960](https://cve.now/CVE-2026-0960.md): Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-0959](https://cve.now/CVE-2026-0959.md): Out-of-bounds Write in Wireshark (CVSS 5.3, Wireshark Foundation Wireshark)
- [CVE-2026-22036](https://cve.now/CVE-2026-22036.md): Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion (CVSS 5.9, nodejs undici · undici)
- [CVE-2025-11224](https://cve.now/CVE-2025-11224.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.7, GitLab)
- [CVE-2025-14557](https://cve.now/CVE-2025-14557.md): XSS in Drupal 7 Facebook Pixel Module (CVSS 4.8, Drupal Facebook Pixel)
- [CVE-2025-14556](https://cve.now/CVE-2025-14556.md): XSS in Drupal 7 Flag Module (CVSS 4.8, Drupal Flag)
- [CVE-2026-23498](https://cve.now/CVE-2026-23498.md): Shopware Improper Control of Generation of Code in Twig rendered views (CVSS 7.2, shopware · shopware/shopware +1)
- [CVE-2025-33206](https://cve.now/CVE-2025-33206.md): NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection. (CVSS 7.8, NVIDIA NSIGHT Graphics)
- [CVE-2025-71166](https://cve.now/CVE-2025-71166.md): Typesetter CMS Reflected XSS via Move Message Handling (CVSS 4.8, Typesetter)
- [CVE-2025-71165](https://cve.now/CVE-2025-71165.md): Typesetter CMS Reflected XSS via Status.php (CVSS 4.8, Typesetter)
- [CVE-2025-71164](https://cve.now/CVE-2025-71164.md): Typesetter CMS Reflected XSS via Editing.php (CVSS 4.8, Typesetter)
- [CVE-2026-23497](https://cve.now/CVE-2026-23497.md): Frappe LMS has a Stored XSS via Unsanitized Image Filename in Course and Jobs Pages (CVSS 1.3, frappe lms)
- [CVE-2026-23492](https://cve.now/CVE-2026-23492.md): Pimcore has a Blind SQL Injection in Admin Search Find API due to an incomplete fix for CVE-2023-30848 (CVSS 8.8, pimcore · pimcore/pimcore)
- [CVE-2026-23477](https://cve.now/CVE-2026-23477.md): Rocket.Chat Unauthorized Access to OAuth App Details (CVSS 7.7, RocketChat Rocket.Chat)
- [CVE-2026-22819](https://cve.now/CVE-2026-22819.md): Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts (CVSS 5.9, akinloluwami outray · outray)
- [CVE-2026-22859](https://cve.now/CVE-2026-22859.md): FreeRDP has a heap-buffer-overflow in urb\_select\_configuration (CVSS 5.6, FreeRDP)
- [CVE-2026-22858](https://cve.now/CVE-2026-22858.md): FreeRDP has a global-buffer-overflow in crypto\_base64\_decode (CVSS 5.6, FreeRDP)
- [CVE-2026-22857](https://cve.now/CVE-2026-22857.md): FreeRDP has a heap-use-after-free in irp\_thread\_func (CVSS 6.8, FreeRDP)
- [CVE-2026-22856](https://cve.now/CVE-2026-22856.md): FreeRDP has a heap-use-after-free in create\_irp\_thread (CVSS 6.8, FreeRDP)
- [CVE-2026-22855](https://cve.now/CVE-2026-22855.md): FreeRDP has a heap-buffer-overflow in smartcard\_unpack\_set\_attrib\_call (CVSS 5.6, FreeRDP)
- [CVE-2026-22854](https://cve.now/CVE-2026-22854.md): FreeRDP has a heap-buffer-overflow in drive\_process\_irp\_read (CVSS 6.8, FreeRDP)
- [CVE-2026-22853](https://cve.now/CVE-2026-22853.md): FreeRDP has a heap-buffer-overflow in ndr\_read\_uint8Array (CVSS 6.8, FreeRDP)
- [CVE-2026-22852](https://cve.now/CVE-2026-22852.md): FreeRDP has a heap-buffer-overflow in audin\_process\_formats (CVSS 6.8, FreeRDP)
- [CVE-2026-22851](https://cve.now/CVE-2026-22851.md): FreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl-\>primary) (CVSS 6.9, FreeRDP)
- [CVE-2026-22787](https://cve.now/CVE-2026-22787.md): html2pdf.js has a cross-site scripting vulnerability (CVSS 8.7, eKoopmans html2pdf.js · html2pdf.js)
- [CVE-2026-22779](https://cve.now/CVE-2026-22779.md): BlackSheep ClientSession is vulnerable to CRLF injection (CVSS 6.3, Neoteroi BlackSheep · blacksheep)
- [CVE-2026-22708](https://cve.now/CVE-2026-22708.md): Cursor has a Terminal Tool Allowlist Bypass via Environment Variables (CVSS 7.2, cursor)
- [CVE-2026-22694](https://cve.now/CVE-2026-22694.md): AliasVault is Missing Origin Validation in Android Passkey Credential Provider (CVSS 6.1, aliasvault)
- [CVE-2026-21889](https://cve.now/CVE-2026-21889.md): Weblate leaks information via screenshots (CVSS 2.3, WeblateOrg weblate · weblate)
- [CVE-2025-37181](https://cve.now/CVE-2025-37181.md): Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2025-37185](https://cve.now/CVE-2025-37185.md): Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface (CVSS 5.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2025-37184](https://cve.now/CVE-2025-37184.md): Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention (CVSS 9.8, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2025-37183](https://cve.now/CVE-2025-37183.md): Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2025-37182](https://cve.now/CVE-2025-37182.md): Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2025-14242](https://cve.now/CVE-2025-14242.md): Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing (CVSS 6.5, Red Hat Enterprise Linux)
- [CVE-2026-22211](https://cve.now/CVE-2026-22211.md): TinyOS \<= 2.1.2 Global Buffer Overflow in printfUART (CVSS 5.1, TinyOS)
- [CVE-2025-71144](https://cve.now/CVE-2025-71144.md): mptcp: ensure context reset on disconnect() (no CVSS, Linux)
- [CVE-2025-71143](https://cve.now/CVE-2025-71143.md): clk: samsung: exynos-clkout: Assign .num before accessing .hws (no CVSS, Linux)
- [CVE-2025-71142](https://cve.now/CVE-2025-71142.md): cpuset: fix warning when disabling remote partition (no CVSS, Linux)
- [CVE-2025-71141](https://cve.now/CVE-2025-71141.md): drm/tilcdc: Fix removal actions in case of failed probe (no CVSS, Linux)
- [CVE-2025-71140](https://cve.now/CVE-2025-71140.md): media: mediatek: vcodec: Use spinlock for context list protection lock (no CVSS, Linux)
- [CVE-2025-71139](https://cve.now/CVE-2025-71139.md): kernel/kexec: fix IMA when allocation happens in CMA area (no CVSS, Linux)
- [CVE-2025-71138](https://cve.now/CVE-2025-71138.md): drm/msm/dpu: Add missing NULL pointer check for pingpong interface (no CVSS, Linux)
- [CVE-2025-71137](https://cve.now/CVE-2025-71137.md): octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (no CVSS, Linux)
- [CVE-2025-71136](https://cve.now/CVE-2025-71136.md): media: adv7842: Avoid possible out-of-bounds array accesses in adv7842\_cp\_log\_status() (CVSS 7.1, Linux)
- [CVE-2025-71135](https://cve.now/CVE-2025-71135.md): md/raid5: fix possible null-pointer dereferences in raid5\_store\_group\_thread\_cnt() (no CVSS, Linux)
- [CVE-2025-71134](https://cve.now/CVE-2025-71134.md): mm/page\_alloc: change all pageblocks migrate type on coalescing (no CVSS, Linux)
- [CVE-2025-71133](https://cve.now/CVE-2025-71133.md): RDMA/irdma: avoid invalid read in irdma\_net\_event (no CVSS, Linux)
- [CVE-2025-71132](https://cve.now/CVE-2025-71132.md): smc91x: fix broken irq-context in PREEMPT\_RT (CVSS 7.5, Linux)
- [CVE-2025-71131](https://cve.now/CVE-2025-71131.md): crypto: seqiv - Do not use req-\>iv after crypto\_aead\_encrypt (CVSS 7.5, Linux)
- [CVE-2025-71130](https://cve.now/CVE-2025-71130.md): drm/i915/gem: Zero-initialize the eb.vma array in i915\_gem\_do\_execbuffer (CVSS 7.8, Linux)
- [CVE-2025-71129](https://cve.now/CVE-2025-71129.md): LoongArch: BPF: Sign extend kfunc call arguments (no CVSS, Linux)
- [CVE-2025-71128](https://cve.now/CVE-2025-71128.md): erspan: Initialize options\_len before referencing options. (CVSS 7.5, Linux)
- [CVE-2025-71127](https://cve.now/CVE-2025-71127.md): wifi: mac80211: Discard Beacon frames to non-broadcast address (CVSS 7.1, Linux)
- [CVE-2026-22820](https://cve.now/CVE-2026-22820.md): Outray cli is vulnerable to race conditions in tunnels creation (CVSS 6.3, akinloluwami outray · outray)
- [CVE-2025-71126](https://cve.now/CVE-2025-71126.md): mptcp: avoid deadlock on fallback while reinjecting (CVSS 7.5, Linux)
- [CVE-2025-71125](https://cve.now/CVE-2025-71125.md): tracing: Do not register unsupported perf events (no CVSS, Linux)
- [CVE-2025-71124](https://cve.now/CVE-2025-71124.md): drm/msm/a6xx: move preempt\_prepare\_postamble after error check (no CVSS, Linux)
- [CVE-2025-71123](https://cve.now/CVE-2025-71123.md): ext4: fix string copying in parse\_apply\_sb\_mount\_options() (no CVSS, Linux)
- [CVE-2025-71122](https://cve.now/CVE-2025-71122.md): iommufd/selftest: Check for overflow in IOMMU\_TEST\_OP\_ADD\_RESERVED (no CVSS, Linux)
- [CVE-2025-71121](https://cve.now/CVE-2025-71121.md): parisc: Do not reprogram affinitiy on ASP chip (no CVSS, Linux)
- [CVE-2025-71120](https://cve.now/CVE-2025-71120.md): SUNRPC: svcauth\_gss: avoid NULL deref on zero length gss\_token in gss\_read\_proxy\_verf (CVSS 7.5, Linux)
- [CVE-2025-71119](https://cve.now/CVE-2025-71119.md): powerpc/kexec: Enable SMT before waking offline CPUs (no CVSS, Linux)
- [CVE-2025-71118](https://cve.now/CVE-2025-71118.md): ACPICA: Avoid walking the Namespace if start\_node is NULL (no CVSS, Linux)
- [CVE-2025-71117](https://cve.now/CVE-2025-71117.md): block: Remove queue freezing from several sysfs store callbacks (no CVSS, Linux)
- [CVE-2025-71116](https://cve.now/CVE-2025-71116.md): libceph: make decode\_pool() more resilient against corrupted osdmaps (CVSS 9.1, Linux)
- [CVE-2025-71115](https://cve.now/CVE-2025-71115.md): um: init cpu\_tasks\[\] earlier (no CVSS, Linux)
- [CVE-2025-71114](https://cve.now/CVE-2025-71114.md): via\_wdt: fix critical boot hang due to unnamed resource allocation (no CVSS, Linux)
- [CVE-2025-71113](https://cve.now/CVE-2025-71113.md): crypto: af\_alg - zero initialize memory allocated via sock\_kmalloc (no CVSS, Linux)
- [CVE-2025-71112](https://cve.now/CVE-2025-71112.md): net: hns3: add VLAN id validation before using (CVSS 8.8, Linux)
- [CVE-2025-71111](https://cve.now/CVE-2025-71111.md): hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (no CVSS, Linux)
- [CVE-2025-71110](https://cve.now/CVE-2025-71110.md): mm/slub: reset KASAN tag in defer\_free() before accessing freed memory (no CVSS, Linux)
- [CVE-2025-71109](https://cve.now/CVE-2025-71109.md): MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (CVSS 7.1, Linux)
- [CVE-2025-71108](https://cve.now/CVE-2025-71108.md): usb: typec: ucsi: Handle incorrect num\_connectors capability (no CVSS, Linux)
- [CVE-2025-71107](https://cve.now/CVE-2025-71107.md): f2fs: ensure node page reads complete before f2fs\_put\_super() finishes (no CVSS, Linux)
- [CVE-2025-71106](https://cve.now/CVE-2025-71106.md): fs: PM: Fix reverse check in filesystems\_freeze\_callback() (no CVSS, Linux)
- [CVE-2025-71105](https://cve.now/CVE-2025-71105.md): f2fs: use global inline\_xattr\_slab instead of per-sb slab cache (no CVSS, Linux)
- [CVE-2025-71104](https://cve.now/CVE-2025-71104.md): KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (no CVSS, Linux)
- [CVE-2025-71103](https://cve.now/CVE-2025-71103.md): drm/msm: adreno: fix deferencing ifpc\_reglist when not declared (no CVSS, Linux)
- [CVE-2025-71102](https://cve.now/CVE-2025-71102.md): scs: fix a wrong parameter in \_\_scs\_magic (no CVSS, Linux)
- [CVE-2026-22240](https://cve.now/CVE-2026-22240.md): Plaintext Passwords Vulnerability in BLUVOYIX (CVSS 10.0, Bluspark Global BLUVOYIX)
- [CVE-2026-22239](https://cve.now/CVE-2026-22239.md): Email Sending Vulnerability in BLUVOYIX (CVSS 10.0, Bluspark Global BLUVOYIX)
- [CVE-2026-22238](https://cve.now/CVE-2026-22238.md): Administrator Account Creation Vulnerability in BLUVOYIX (CVSS 10.0, Bluspark Global BLUVOYIX)
- [CVE-2026-22237](https://cve.now/CVE-2026-22237.md): Exposed Internal API Documentation Vulnerability in BLUVOYIX (CVSS 10.0, Bluspark Global BLUVOYIX)
- [CVE-2026-22236](https://cve.now/CVE-2026-22236.md): Improper Authentication Vulnerability in BLUVOYIX (CVSS 10.0, Bluspark Global BLUVOYIX)
- [CVE-2025-9142](https://cve.now/CVE-2025-9142.md): Local privilege escalation in Harmony SASE Windows Agent (CVSS 7.5, checkpoint Hramony SASE)
- [CVE-2025-14317](https://cve.now/CVE-2025-14317.md): User Enumeration in Crazy Bubble Tea mobile application (CVSS 7.1, Emaintenance Crazy Bubble Tea)
- [CVE-2025-13175](https://cve.now/CVE-2025-13175.md): Insecure Password Storage in Y Soft SafeQ 6 (CVSS 5.1, YSoft SafeQ)
- [CVE-2025-14338](https://cve.now/CVE-2025-14338.md): Polkit authentication dis isabled by default in inputplumber (CVSS 8.5, https://github.com/ShadowBlip inputplumber)
- [CVE-2025-66005](https://cve.now/CVE-2025-66005.md): Lack of Authentication in the InputManager D-Bus interface (CVSS 8.5, https://github.com/ShadowBlip inputplumber)
- [CVE-2025-66169](https://cve.now/CVE-2025-66169.md): Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component (CVSS 5.3, Apache Software Foundation Apache Camel Neo4j · org.apache.…)
- [CVE-2025-67859](https://cve.now/CVE-2025-67859.md): Polkit Authorization Check can be Bypassed in the TLP power daemon (CVSS 5.1, https://github.com/linrunner TLP)
- [CVE-2025-0647](https://cve.now/CVE-2025-0647.md): In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to th (CVSS 7.9, Arm Neoverse-N2 · Arm Neoverse-V3AE +9)
- [CVE-2026-0532](https://cve.now/CVE-2026-0532.md): External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector (CVSS 8.6, Elastic Kibana)
- [CVE-2026-0529](https://cve.now/CVE-2026-0529.md): Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers (CVSS 6.5, Elastic Packetbeat)
- [CVE-2026-23550](https://cve.now/CVE-2026-23550.md): WordPress Modular DS plugin \<= 2.5.1 - Privilege Escalation vulnerability (CVSS 10.0, Modular DS)
- [CVE-2025-15475](https://cve.now/CVE-2025-15475.md): PayHere Payment Gateway Plugin for WooCommerce \<= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification (CVSS 5.3, PayHere Payment Gateway)
- [CVE-2025-15376](https://cve.now/CVE-2025-15376.md): Stopwords for comments \<= 1.1 - Missing Authorization to Cross-Site Request Forgery (CVSS 4.3, rndsand81 Stopwords for comments)
- [CVE-2025-14173](https://cve.now/CVE-2025-14173.md): Perfit WooCommerce \<= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion (CVSS 5.3, perfitdev Perfit WooCommerce)
- [CVE-2025-14846](https://cve.now/CVE-2025-14846.md): SocialChamp with WordPress \<= 1.3.5 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, socialchampio Auto Post to Social Media from Social Champ)
- [CVE-2025-15513](https://cve.now/CVE-2025-15513.md): Float Payment Gateway \<= 1.1.9 - Improper Authorization to Unauthenticated Order Status Manipulation (CVSS 5.3, floattechnologies Float Payment Gateway)
- [CVE-2026-0741](https://cve.now/CVE-2026-0741.md): Electric Studio Download Counter \<= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters (CVSS 4.4, electric-studio Electric Studio Download Counter)
- [CVE-2025-15512](https://cve.now/CVE-2025-15512.md): Aplazo Payment Gateway \<= 1.4.3 - Missing Authorization to Unauthenticated Order Status Manipulation (CVSS 5.3, aplazopayment Aplazo Payment Gateway)
- [CVE-2026-0813](https://cve.now/CVE-2026-0813.md): Short Link \<= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Administration Settings Page (CVSS 4.4, prasannasp Short Link)
- [CVE-2026-0734](https://cve.now/CVE-2026-0734.md): WP Allowed Hosts \<= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'allowed-hosts' Parameter (CVSS 4.4, dfieldfl WP Allowed Hosts)
- [CVE-2026-0812](https://cve.now/CVE-2026-0812.md): LinkedIn SC \<= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Page (CVSS 4.4, guillaumev LinkedIn SC)
- [CVE-2025-14770](https://cve.now/CVE-2025-14770.md): Shipping Rate By Cities \<= 2.0.0 - Unauthenticated SQL Injection via 'city' Parameter (CVSS 7.5, tridenttechnolabs Shipping Rate By Cities)
- [CVE-2026-0739](https://cve.now/CVE-2026-0739.md): WMF Mobile Redirector \<= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters (CVSS 4.4, webbu WMF Mobile Redirector)
- [CVE-2025-68492](https://cve.now/CVE-2025-68492.md): Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. (CVSS 4.2, Chainlit)
- [CVE-2025-15486](https://cve.now/CVE-2025-15486.md): Kunze Law \<= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4, kunzemarketing Kunze Law)
- [CVE-2025-14502](https://cve.now/CVE-2025-14502.md): News and Blog Designer Bundle \<= 1.1 - Unauthenticated Local File Inclusion (CVSS 9.8, vaghasia3 News and Blog Designer Bundle)
- [CVE-2025-14854](https://cve.now/CVE-2025-14854.md): WP-CRM System – Manage Clients and Projects \<= 3.4.5 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification (CVSS 5.4, nofearinc WP-CRM System – Manage Clients and Projects)
- [CVE-2025-12178](https://cve.now/CVE-2025-12178.md): SpiceForms Form Builder \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, aankit SpiceForms Form Builder)
- [CVE-2025-14613](https://cve.now/CVE-2025-14613.md): GetContentFromURL \<= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute (CVSS 7.2, daschmi GetContentFromURL)
- [CVE-2025-15021](https://cve.now/CVE-2025-15021.md): Gotham Block Extra Light \<= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings (CVSS 4.4, gothamdev Gotham Block Extra Light)
- [CVE-2025-15266](https://cve.now/CVE-2025-15266.md): GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation \<= 1.1.8 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, ahmadgb GeekyBot — Generate AI Content Without Prompt, Chat…)
- [CVE-2025-15020](https://cve.now/CVE-2025-15020.md): Gotham Block Extra Light \<= 1.5.0 - Authenticated (Contributor+) Arbitrary File Read via 'ghostban' Shortcode (CVSS 6.5, gothamdev Gotham Block Extra Light)
- [CVE-2025-14464](https://cve.now/CVE-2025-14464.md): PDF Resume Parser \<= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials (CVSS 5.3, kiwicommerce PDF Resume Parser)
- [CVE-2025-13627](https://cve.now/CVE-2025-13627.md): Makesweat \<= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'makesweat\_clubid' Setting (CVSS 4.4, Makesweat)
- [CVE-2025-14880](https://cve.now/CVE-2025-14880.md): Netcash WooCommerce Payment Gateway \<= 4.1.3 - Missing Authorization to Unauthenticated Order Status Modification (CVSS 5.3, netcashpaynow Netcash WooCommerce Payment Gateway)
- [CVE-2025-14482](https://cve.now/CVE-2025-14482.md): Crush.pics Image Optimizer \<= 1.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update (CVSS 4.3, crushpics Crush.pics Image Optimizer – Image Compression an…)
- [CVE-2026-0635](https://cve.now/CVE-2026-0635.md): Responsive Accordion Slider \<= 1.2.2 - Missing Authorization to Authenticated (Contributor+) Slider Update via 'resp\_accordion\_silder\_save\_images' (CVSS 4.3, techknowprime Responsive Accordion Slider)
- [CVE-2025-15378](https://cve.now/CVE-2025-15378.md): AJS Footnotes \<= 1.0 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, ajseidl AJS Footnotes)
- [CVE-2026-0678](https://cve.now/CVE-2026-0678.md): Shipping Rates by City for WooCommerce \<= 1.0.3 - Authenticated (Shop Manager+) SQL Injection via 'cities' Parameter (CVSS 4.9, logiceverest Shipping Rates by City for WooCommerce)
- [CVE-2026-0694](https://cve.now/CVE-2026-0694.md): SearchWiz \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title (CVSS 6.4, SearchWiz)
- [CVE-2025-15283](https://cve.now/CVE-2025-15283.md): Name Directory \<= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters (CVSS 7.2, jeroenpeters1986 Name Directory)
- [CVE-2025-14379](https://cve.now/CVE-2025-14379.md): Testimonials Creator 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, adoncreatives Testimonials Creator)
- [CVE-2025-15377](https://cve.now/CVE-2025-15377.md): Sosh Share Buttons \<= 1.1.0 - Cross-Site Request Forgery (CVSS 4.3, abage Sosh Share Buttons)
- [CVE-2025-14301](https://cve.now/CVE-2025-14301.md): Integration Opvius AI for WooCommerce \<= 1.3.0 - Unauthenticated Arbitrary File Deletion/Read via Path Traversal (CVSS 9.8, woosaai Integration Opvius AI for WooCommerce)
- [CVE-2026-0680](https://cve.now/CVE-2026-0680.md): Real Post Slider Lite \<= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings (CVSS 4.4, vk011 Real Post Slider Lite)
- [CVE-2025-14725](https://cve.now/CVE-2025-14725.md): Internal Link Builder \<= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Settings (CVSS 4.4, sablab Internal Link Builder)
- [CVE-2026-0717](https://cve.now/CVE-2026-0717.md): LottieFiles – Lottie block for Gutenberg \<= 3.0.0 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, LottieFiles)
- [CVE-2025-14389](https://cve.now/CVE-2025-14389.md): WPBlogSyn \<= 1.0 - Cross-Site Request Forgery to Arbitrary Remote Sync Configuration Update (CVSS 4.3, obridgeacademy WPBlogSyn)
- [CVE-2025-14615](https://cve.now/CVE-2025-14615.md): DASHBOARD BUILDER \<= 1.5.7 - Cross-Site Request Forgery to SQL Injection (CVSS 7.1, dashboardbuilder DASHBOARD BUILDER – WordPress plugin for C…)
- [CVE-2026-0594](https://cve.now/CVE-2026-0594.md): List Site Contributors \<= 1.1.8 - Reflected Cross-Site Scripting via alpha (CVSS 6.1, mallsop List Site Contributors)
- [CVE-2026-22718](https://cve.now/CVE-2026-22718.md): Command injection vulnerability (CVSS 6.8, Spring CLI VSCode Extension)
- [CVE-2025-68959](https://cve.now/CVE-2025-68959.md): Permission verification bypass vulnerability in the media library module. (CVSS 6.2, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2025-68970](https://cve.now/CVE-2025-68970.md): Permission verification bypass vulnerability in the media library module. (CVSS 6.1, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2025-68963](https://cve.now/CVE-2025-68963.md): Man-in-the-middle attack vulnerability in the Clone module. (CVSS 5.7, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2025-68967](https://cve.now/CVE-2025-68967.md): Vulnerability of improper permission control in the print module. (CVSS 5.7, Huawei HarmonyOS)
- [CVE-2025-68966](https://cve.now/CVE-2025-68966.md): Permission control vulnerability in the Notepad module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2025-68965](https://cve.now/CVE-2025-68965.md): Permission control vulnerability in the Notepad module. (CVSS 4.7, Huawei HarmonyOS)
- [CVE-2025-68964](https://cve.now/CVE-2025-68964.md): Data verification vulnerability in the HiView module. (CVSS 6.2, Huawei HarmonyOS)
- [CVE-2025-68969](https://cve.now/CVE-2025-68969.md): Multi-thread race condition vulnerability in the thermal management module. (CVSS 6.8, Huawei HarmonyOS)
- [CVE-2025-68968](https://cve.now/CVE-2025-68968.md): Double free vulnerability in the multi-mode input module. (CVSS 7.8, Huawei HarmonyOS)
- [CVE-2025-68962](https://cve.now/CVE-2025-68962.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2025-68961](https://cve.now/CVE-2025-68961.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2025-68960](https://cve.now/CVE-2025-68960.md): Multi-thread race condition vulnerability in the video framework module. (CVSS 8.4, Huawei HarmonyOS)
- [CVE-2025-68958](https://cve.now/CVE-2025-68958.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.0, Huawei HarmonyOS)
- [CVE-2025-68957](https://cve.now/CVE-2025-68957.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.4, Huawei HarmonyOS)
- [CVE-2025-68956](https://cve.now/CVE-2025-68956.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.0, Huawei HarmonyOS)
- [CVE-2025-68955](https://cve.now/CVE-2025-68955.md): Multi-thread race condition vulnerability in the card framework module. (CVSS 8.0, Huawei HarmonyOS)
- [CVE-2025-12053](https://cve.now/CVE-2025-12053.md): egwindrvx64.sys is potentially vulnerable to a buffer overflow (CVSS 7.8, Insyde Software InsydeH2O tools)
- [CVE-2025-12052](https://cve.now/CVE-2025-12052.md): egwindrv.sys is potentially vulnerable to a buffer overflow. (CVSS 7.8, Insyde Software InsydeH2O tools)
- [CVE-2025-12051](https://cve.now/CVE-2025-12051.md): H2OFFT64.sys is potentially vulnerable to a buffer overflow. (CVSS 7.8, Insyde Software InsydeH2O tools)
- [CVE-2025-12050](https://cve.now/CVE-2025-12050.md): In H2OFFT32.sys is potentially vulnerable to a buffer overflow. (CVSS 7.8, Insyde Software InsydeH2O tools)
- [CVE-2025-56226](https://cve.now/CVE-2025-56226.md): Libsndfile \<=1.2.2 contains a memory leak vulnerability in the mpeg\_l3\_encoder\_init() function within the mpeg\_l3\_encode.c file. (CVSS 5.3)
- [CVE-2025-63644](https://cve.now/CVE-2025-63644.md): A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field. (CVSS 5.4, ph7software/ph7builder)
- [CVE-2025-65396](https://cve.now/CVE-2025-65396.md): A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hi (CVSS 6.1)
- [CVE-2025-65397](https://cve.now/CVE-2025-65397.md): An insecure authentication mechanism in the safe\_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows a (CVSS 6.8)
- [CVE-2025-67399](https://cve.now/CVE-2025-67399.md): An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the U (CVSS 4.6)
- [CVE-2025-67833](https://cve.now/CVE-2025-67833.md): Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter. (CVSS 6.1)
- [CVE-2025-67834](https://cve.now/CVE-2025-67834.md): Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter. (CVSS 5.4)
- [CVE-2025-67835](https://cve.now/CVE-2025-67835.md): Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts func (CVSS 6.5)
- [CVE-2025-70747](https://cve.now/CVE-2025-70747.md): Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub\_65A28 function. (CVSS 7.5)
- [CVE-2025-70968](https://cve.now/CVE-2025-70968.md): FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). (CVSS 9.8)
- [CVE-2025-71021](https://cve.now/CVE-2025-71021.md): Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub\_65A28 function. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.