CVEs published February 28, 2026
16 CVEs were published on February 28, 2026: 2 critical, 6 high.
- Published
- 16
- Critical
- 2
- High
- 6
- Medium
- 8
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- gVectors Team wpForo Forum
- 9
- Microchip TimePictra
- 2
- Tenda F453
- 2
- smub WP Mail Logging
- 1
- Super Stage WP
- 1
- themeum Tutor LMS – eLearning and online course solution
- 1
Critical 2
High 6
- CVE-2026-3377Tenda F453 SafeUrlFilter fromSafeUrlFilter buffer overflowTenda F453
- CVE-2026-3376Tenda F453 SafeMacFilter fromSafeMacFilter buffer overflowTenda F453
- CVE-2026-28562wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY ParametergVectors Team wpForo Forum
- CVE-2026-28557wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization HandlergVectors Team wpForo Forum
- CVE-2025-13673Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_codethemeum Tutor LMS – eLearning and online course solution
- CVE-2026-2471WP Mail Logging <= 1.15.0 - Unauthenticated PHP Object Injection via Email Log Message Fieldsmub WP Mail Logging
Medium, low and unrated 8
- CVE-2026-28561wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in TemplatesgVectors Team wpForo Forum
- CVE-2026-28560wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline ScriptgVectors Team wpForo Forum
- CVE-2026-28559wpForo Forum 2.4.14 Information Disclosure via Global RSS FeedgVectors Team wpForo Forum
- CVE-2026-28558wpForo Forum 2.4.14 Stored XSS via SVG Avatar File UploadgVectors Team wpForo Forum
- CVE-2026-28556wpForo Forum 2.4.14 Missing Authorization via Topic Management Form HandlersgVectors Team wpForo Forum
- CVE-2026-28555wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX HandlergVectors Team wpForo Forum
- CVE-2026-28554wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX HandlergVectors Team wpForo Forum
- CVE-2026-1542Super Stage WP <= 1.0.1 - Unauthenticated PHP Object InjectionSuper Stage WP