# CVEs published 2026-03-05

487 CVEs were published on March 5, 2026: 68 critical, 314 high. Days are UTC.

- [CVE-2026-28726](https://cve.now/CVE-2026-28726.md): Sensitive information disclosure due to improper access control. (CVSS 4.3, Acronis Cyber Protect)
- [CVE-2026-28725](https://cve.now/CVE-2026-28725.md): Sensitive information disclosure due to improper configuration of a headless browser. (CVSS 5.5, Acronis Cyber Protect)
- [CVE-2025-30413](https://cve.now/CVE-2025-30413.md): Credentials are not deleted from Acronis Agent after plan revocation. (CVSS 4.4, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2026-28724](https://cve.now/CVE-2026-28724.md): Unauthorized data access due to insufficient access control validation. (CVSS 4.3, Acronis Cyber Protect)
- [CVE-2026-28723](https://cve.now/CVE-2026-28723.md): Unauthorized report deletion due to insufficient access control. (CVSS 4.3, Acronis Cyber Protect)
- [CVE-2026-28722](https://cve.now/CVE-2026-28722.md): Local privilege escalation due to improper soft link handling. (CVSS 7.3, Acronis Cyber Protect)
- [CVE-2026-28721](https://cve.now/CVE-2026-28721.md): Local privilege escalation due to improper soft link handling. (CVSS 7.3, Acronis Cyber Protect)
- [CVE-2026-28720](https://cve.now/CVE-2026-28720.md): Unauthorized modification of settings due to insufficient authorization checks. (CVSS 4.3, Acronis Cyber Protect)
- [CVE-2026-28719](https://cve.now/CVE-2026-28719.md): Unauthorized resource manipulation due to improper authorization checks. (CVSS 4.3, Acronis Cyber Protect)
- [CVE-2026-28718](https://cve.now/CVE-2026-28718.md): Denial of service due to insufficient input validation in authentication logging. (CVSS 5.3, Acronis Cyber Protect)
- [CVE-2026-28717](https://cve.now/CVE-2026-28717.md): Local privilege escalation due to improper directory permissions. (CVSS 5.0, Acronis Cyber Protect)
- [CVE-2026-28716](https://cve.now/CVE-2026-28716.md): Information disclosure and manipulation due to improper authorization checks. (CVSS 4.4, Acronis Cyber Protect)
- [CVE-2026-28715](https://cve.now/CVE-2026-28715.md): Sensitive information disclosure due to improper authorization checks. (CVSS 6.5, Acronis Cyber Protect)
- [CVE-2026-28714](https://cve.now/CVE-2026-28714.md): Unnecessary transmission of sensitive cryptographic material. (CVSS 4.8, Acronis Cyber Protect)
- [CVE-2026-28713](https://cve.now/CVE-2026-28713.md): Default credentials set for local privileged user in Virtual Appliance. (CVSS 7.1, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2026-28712](https://cve.now/CVE-2026-28712.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3, Acronis Cyber Protect)
- [CVE-2026-28711](https://cve.now/CVE-2026-28711.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3, Acronis Cyber Protect)
- [CVE-2026-28710](https://cve.now/CVE-2026-28710.md): Sensitive information disclosure and manipulation due to improper authentication. (CVSS 8.1, Acronis Cyber Protect)
- [CVE-2026-28709](https://cve.now/CVE-2026-28709.md): Unauthorized resource manipulation due to improper authorization checks. (CVSS 4.3, Acronis Cyber Protect)
- [CVE-2025-11790](https://cve.now/CVE-2025-11790.md): Credentials are not deleted from Acronis Agent after plan revocation. (CVSS 4.4, Acronis Cyber Protect Cloud Agent)
- [CVE-2025-11791](https://cve.now/CVE-2025-11791.md): Sensitive information disclosure and manipulation due to insufficient authorization checks. (CVSS 5.5, Acronis Cyber Protect)
- [CVE-2025-11792](https://cve.now/CVE-2025-11792.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3, Acronis Cyber Protect Cloud Agent)
- [CVE-2026-28727](https://cve.now/CVE-2026-28727.md): Local privilege escalation due to insecure Unix socket permissions. (CVSS 7.8, Acronis Cyber Protect · Acronis True Image)
- [CVE-2026-27770](https://cve.now/CVE-2026-27770.md): ePower epower.ie Insufficiently Protected Credentials (CVSS 6.5, epower.ie)
- [CVE-2026-24912](https://cve.now/CVE-2026-24912.md): ePower epower.ie Insufficient Session Expiration (CVSS 7.3, epower.ie)
- [CVE-2026-27778](https://cve.now/CVE-2026-27778.md): ePower epower.ie Improper Restriction of Excessive Authentication Attempts (CVSS 7.5, epower.ie)
- [CVE-2026-2589](https://cve.now/CVE-2026-2589.md): Greenshift – animation and page builder blocks \<= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup (CVSS 5.3, wpsoul Greenshift – animation and page builder blocks)
- [CVE-2026-22552](https://cve.now/CVE-2026-22552.md): ePower epower.ie Missing Authentication for Critical Function (CVSS 9.4, epower.ie)
- [CVE-2026-26122](https://cve.now/CVE-2026-26122.md): Microsoft ACI Confidential Containers Information Disclosure Vulnerability (CVSS 6.5, Microsoft ACI Confidential Containers)
- [CVE-2026-26125](https://cve.now/CVE-2026-26125.md): Payment Orchestrator Service Elevation of Privilege Vulnerability (CVSS 8.6, Microsoft Payment Orchestrator Service)
- [CVE-2026-26124](https://cve.now/CVE-2026-26124.md): Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft ACI Confidential Containers)
- [CVE-2026-21536](https://cve.now/CVE-2026-21536.md): Microsoft Devices Pricing Program Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Devices Pricing Program)
- [CVE-2026-23651](https://cve.now/CVE-2026-23651.md): Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft ACI Confidential Containers)
- [CVE-2026-3606](https://cve.now/CVE-2026-3606.md): Ettercap etterfilter ef\_output.c add\_data\_segment out-of-bounds (CVSS 4.8, Ettercap)
- [CVE-2026-29613](https://cve.now/CVE-2026-29613.md): OpenClaw \< 2026.2.12 - Webhook Authentication Bypass via Loopback remoteAddress Trust (CVSS 8.2, OpenClaw)
- [CVE-2026-29612](https://cve.now/CVE-2026-29612.md): OpenClaw \< 2026.2.14 - Denial of Service via Large Base64 Media File Decoding (CVSS 6.8, OpenClaw · clawdbot)
- [CVE-2026-29611](https://cve.now/CVE-2026-29611.md): OpenClaw \< 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media Handling (CVSS 8.2, OpenClaw)
- [CVE-2026-29610](https://cve.now/CVE-2026-29610.md): OpenClaw \< 2026.2.14 - Command Hijacking via Unsafe PATH Handling (CVSS 7.7, OpenClaw)
- [CVE-2026-29609](https://cve.now/CVE-2026-29609.md): OpenClaw \< 2026.2.14 - Denial of Service via Unbounded URL-backed Media Fetch (CVSS 8.7, OpenClaw)
- [CVE-2026-29606](https://cve.now/CVE-2026-29606.md): OpenClaw \< 2026.2.14 - Webhook Signature Verification Bypass via ngrok Loopback Compatibility (CVSS 6.3, OpenClaw)
- [CVE-2026-28486](https://cve.now/CVE-2026-28486.md): OpenClaw 2026.1.16-2 \< 2026.2.14 - Path Traversal (Zip Slip) in Archive Extraction via Installation Commands (CVSS 6.8, OpenClaw)
- [CVE-2026-28485](https://cve.now/CVE-2026-28485.md): OpenClaw 2026.1.5 \< 2026.2.12 - Missing Authentication in Browser Control HTTP Endpoints (CVSS 7.5, OpenClaw)
- [CVE-2026-28482](https://cve.now/CVE-2026-28482.md): OpenClaw \< 2026.2.12 - Path Traversal via Unsanitized sessionId and sessionFile Parameters (CVSS 8.4, OpenClaw)
- [CVE-2026-28481](https://cve.now/CVE-2026-28481.md): OpenClaw \< 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching (CVSS 5.9, OpenClaw)
- [CVE-2026-28480](https://cve.now/CVE-2026-28480.md): OpenClaw \< 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist Authorization (CVSS 6.9, OpenClaw · clawdbot)
- [CVE-2026-28479](https://cve.now/CVE-2026-28479.md): OpenClaw \< 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox Configuration (CVSS 8.7, OpenClaw)
- [CVE-2026-28478](https://cve.now/CVE-2026-28478.md): OpenClaw \< 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering (CVSS 8.7, OpenClaw · clawdbot)
- [CVE-2026-28477](https://cve.now/CVE-2026-28477.md): OpenClaw \< 2026.2.14 - OAuth State Validation Bypass in Manual Chutes Login Flow (CVSS 5.9, OpenClaw)
- [CVE-2026-28476](https://cve.now/CVE-2026-28476.md): OpenClaw \< 2026.2.14 - Server-Side Request Forgery in Tlon Extension Authentication (CVSS 6.3, OpenClaw)
- [CVE-2026-28475](https://cve.now/CVE-2026-28475.md): OpenClaw \< 2026.2.13 - Timing Attack via Hook Token Comparison (CVSS 6.3, OpenClaw)
- [CVE-2026-28474](https://cve.now/CVE-2026-28474.md): OpenClaw Nextcloud Talk \< 2026.2.6 - Allowlist Bypass via actor.name Display Name Spoofing (CVSS 9.3, OpenClaw nextcloud-talk · @openclaw/nextcloud-talk)
- [CVE-2026-28473](https://cve.now/CVE-2026-28473.md): OpenClaw \< 2026.2.2 - Authorization Bypass via /approve Chat Command (CVSS 7.2, OpenClaw)
- [CVE-2026-28472](https://cve.now/CVE-2026-28472.md): OpenClaw \< 2026.2.2 - Device Identity Check Bypass in Gateway WebSocket Connect Handshake (CVSS 9.2, OpenClaw)
- [CVE-2026-28471](https://cve.now/CVE-2026-28471.md): OpenClaw 2026.1.14-1 \< 2026.2.2 - Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix Plugin (CVSS 6.3, OpenClaw)
- [CVE-2026-28470](https://cve.now/CVE-2026-28470.md): OpenClaw \< 2026.2.2 - Exec Allowlist Bypass via Command Substitution in Double Quotes (CVSS 9.2, OpenClaw)
- [CVE-2026-28469](https://cve.now/CVE-2026-28469.md): OpenClaw \< 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity (CVSS 8.2, OpenClaw · clawdbot)
- [CVE-2026-28468](https://cve.now/CVE-2026-28468.md): OpenClaw 2026.1.29-beta.1 \< 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge Server (CVSS 8.5, OpenClaw)
- [CVE-2026-28467](https://cve.now/CVE-2026-28467.md): OpenClaw \< 2026.2.2 - SSRF via Attachment Media URL Hydration (CVSS 6.3, OpenClaw)
- [CVE-2026-28466](https://cve.now/CVE-2026-28466.md): OpenClaw \< 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass (CVSS 9.4, OpenClaw)
- [CVE-2026-28465](https://cve.now/CVE-2026-28465.md): OpenClaw voice-call \< 2026.2.3 - Webhook Verification Bypass via Forwarded Headers (CVSS 8.2, OpenClaw voice-call · @openclaw/voice-call +1)
- [CVE-2026-28464](https://cve.now/CVE-2026-28464.md): OpenClaw \< 2026.2.12 - Timing Attack in Hooks Token Authentication (CVSS 8.2, OpenClaw)
- [CVE-2026-28463](https://cve.now/CVE-2026-28463.md): OpenClaw \< 2026.2.14 - Arbitrary File Read via Shell Expansion in Safe Bins Allowlist (CVSS 8.6, OpenClaw)
- [CVE-2026-28462](https://cve.now/CVE-2026-28462.md): OpenClaw \< 2026.2.13 - Path Traversal in Trace and Download Output Paths (CVSS 8.7, OpenClaw)
- [CVE-2026-28459](https://cve.now/CVE-2026-28459.md): OpenClaw \< 2026.2.12 - Arbitrary File Write via Untrusted sessionFile Path (CVSS 7.1, OpenClaw)
- [CVE-2026-28458](https://cve.now/CVE-2026-28458.md): OpenClaw 2026.1.20 \< 2026.2.1 - Missing Authentication in Browser Relay /cdp WebSocket Endpoint (CVSS 7.4, OpenClaw · moltbot)
- [CVE-2026-28457](https://cve.now/CVE-2026-28457.md): OpenClaw \< 2026.2.14 - Path Traversal in Sandbox Skill Mirroring via Name Parameter (CVSS 5.6, OpenClaw)
- [CVE-2026-28456](https://cve.now/CVE-2026-28456.md): OpenClaw 2026.1.5 \< 2026.2.14 - Arbitrary Code Execution via Unsafe Hook Module Path Handling (CVSS 8.6, OpenClaw)
- [CVE-2026-28454](https://cve.now/CVE-2026-28454.md): OpenClaw \< 2026.2.2 - Authorization Bypass via Unauthenticated Telegram Webhook (CVSS 8.2, OpenClaw)
- [CVE-2026-28453](https://cve.now/CVE-2026-28453.md): OpenClaw \< 2026.2.14 - Zip Slip Path Traversal in TAR Archive Extraction (CVSS 8.3, OpenClaw)
- [CVE-2026-28452](https://cve.now/CVE-2026-28452.md): OpenClaw \< 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive (CVSS 6.7, OpenClaw · clawdbot)
- [CVE-2026-28451](https://cve.now/CVE-2026-28451.md): OpenClaw \< 2026.2.14 - SSRF via Feishu Extension Media Fetching (CVSS 6.3, OpenClaw)
- [CVE-2026-28450](https://cve.now/CVE-2026-28450.md): OpenClaw \< 2026.2.12 - Unauthenticated Profile Tampering via Nostr Plugin HTTP Endpoints (CVSS 8.3, OpenClaw)
- [CVE-2026-28448](https://cve.now/CVE-2026-28448.md): OpenClaw 2026.1.29 \< 2026.2.1 - Authorization Bypass in Twitch Plugin allowFrom Access Control (CVSS 6.3, OpenClaw)
- [CVE-2026-28447](https://cve.now/CVE-2026-28447.md): OpenClaw 2026.1.29-beta.1 \< 2026.2.1 - Path Traversal in Plugin Installation via Package Name (CVSS 7.0, OpenClaw)
- [CVE-2026-28446](https://cve.now/CVE-2026-28446.md): OpenClaw \< 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching (CVSS 9.2, OpenClaw)
- [CVE-2026-28395](https://cve.now/CVE-2026-28395.md): OpenClaw 2026.1.14-1 \< 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl (CVSS 6.3, OpenClaw)
- [CVE-2026-28394](https://cve.now/CVE-2026-28394.md): OpenClaw \< 2026.2.15 - Denial of Service via Unbounded Response Parsing in web\_fetch Tool (CVSS 6.9, OpenClaw)
- [CVE-2026-28393](https://cve.now/CVE-2026-28393.md): OpenClaw 2.0.0-beta3 \< 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal (CVSS 8.3, OpenClaw)
- [CVE-2026-28392](https://cve.now/CVE-2026-28392.md): OpenClaw \< 2026.2.14 - Privilege Escalation in Slack Slash Command Handler via Direct Messages (CVSS 8.2, OpenClaw)
- [CVE-2026-28391](https://cve.now/CVE-2026-28391.md): OpenClaw \< 2026.2.2 - Command Injection via cmd.exe Parsing Bypass in Allowlist Enforcement (CVSS 9.2, OpenClaw)
- [CVE-2026-2593](https://cve.now/CVE-2026-2593.md): Greenshift – animation and page builder blocks \<= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpsoul Greenshift – animation and page builder blocks)
- [CVE-2026-21622](https://cve.now/CVE-2026-21622.md): Password Reset Tokens Do Not Expire (CVSS 9.5, hexpm)
- [CVE-2026-28492](https://cve.now/CVE-2026-28492.md): File Browser: Path Traversal in Public Share Links Exposes Files Outside Shared Directory (CVSS 7.1, filebrowser · github.com/filebrowser/filebrowser/v2 +1)
- [CVE-2025-55208](https://cve.now/CVE-2025-55208.md): Chamilo LMS has Stored Cross Site Scripting on Social Networks Uploaded Files (CVSS 9.1, chamilo-lms)
- [CVE-2026-29188](https://cve.now/CVE-2026-29188.md): File Browser: TUS Delete Endpoint Bypasses Delete Permission Check (CVSS 9.1, filebrowser · github.com/filebrowser/filebrowser +1)
- [CVE-2026-28443](https://cve.now/CVE-2026-28443.md): OpenReplay: SQL injection in cards/search via unvalidated sort field parameter (CVSS 6.9, openreplay)
- [CVE-2026-0848](https://cve.now/CVE-2026-0848.md): Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading (CVSS 10.0, nltk/nltk · nltk)
- [CVE-2026-22723](https://cve.now/CVE-2026-22723.md): UAA User Token Revocation logic error (CVSS 6.5, Cloudfoundry Foundation UAA · org.cloudfoundry.identity:clo…)
- [CVE-2026-28442](https://cve.now/CVE-2026-28442.md): ZimaOS: Arbitrary Deletion of Internal System Files via API Path Manipulation (CVSS 8.6, IceWhaleTech ZimaOS)
- [CVE-2026-29081](https://cve.now/CVE-2026-29081.md): Frappe: Possibility of SQL Injection due to improper fieldname sanitization (CVSS 6.5, frappe)
- [CVE-2026-29077](https://cve.now/CVE-2026-29077.md): Frappe: Broken Access Control in DocShare (CVSS 7.1, frappe)
- [CVE-2026-28436](https://cve.now/CVE-2026-28436.md): Frappe: Stored XSS in avatar\_macro.html (CVSS 1.3, frappe)
- [CVE-2026-28413](https://cve.now/CVE-2026-28413.md): Products.isurlinportal: Possible open redirect when using more than 2 forward slashes (CVSS 5.3, plone Products.isurlinportal · products-isurlinportal)
- [CVE-2026-28410](https://cve.now/CVE-2026-28410.md): The Graph: Revocable vesting contracts allows early access to locked tokens (CVSS 5.3, graphprotocol contracts)
- [CVE-2026-28405](https://cve.now/CVE-2026-28405.md): MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions (CVSS 8.0, MarkUsProject Markus)
- [CVE-2026-28353](https://cve.now/CVE-2026-28353.md): Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension Release (CVSS 10.0, aquasecurity trivy-vscode-extension)
- [CVE-2026-28350](https://cve.now/CVE-2026-28350.md): lxml\_html\_clean: \<base\> tag injection through default Cleaner configuration (CVSS 6.1, fedora-python lxml\_html\_clean · lxml-html-clean)
- [CVE-2026-28348](https://cve.now/CVE-2026-28348.md): lxml\_html\_clean: CSS @import Filter Bypass via Unicode Escapes (CVSS 6.1, fedora-python lxml\_html\_clean · lxml-html-clean)
- [CVE-2026-28343](https://cve.now/CVE-2026-28343.md): CKEditor: Cross-site scripting (XSS) in the HTML Support package (CVSS 6.4, ckeditor5 · @ckeditor/ckeditor5-html-support)
- [CVE-2026-28790](https://cve.now/CVE-2026-28790.md): OliveTin: Unauthenticated Action Termination via KillAction When Guests Must Login (CVSS 7.5, OliveTin · github.com/OliveTin/OliveTin)
- [CVE-2026-28789](https://cve.now/CVE-2026-28789.md): OliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling (CVSS 7.5, OliveTin · github.com/OliveTin/OliveTin)
- [CVE-2026-28342](https://cve.now/CVE-2026-28342.md): OliveTin: Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint (CVSS 7.5, OliveTin · github.com/OliveTin/OliveTin)
- [CVE-2026-21621](https://cve.now/CVE-2026-21621.md): Improper Scope Enforcement in OAuth client\_credentials Flow Allows Read-Only API Key to Escalate to Full Access (CVSS 7.0, hexpm)
- [CVE-2026-28277](https://cve.now/CVE-2026-28277.md): LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading (CVSS 6.8, langchain-ai langgraph · langgraph)
- [CVE-2026-28222](https://cve.now/CVE-2026-28222.md): Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes (CVSS 6.1, wagtail)
- [CVE-2026-28223](https://cve.now/CVE-2026-28223.md): Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple\_translation admin interface (CVSS 6.1, wagtail)
- [CVE-2025-13350](https://cve.now/CVE-2025-13350.md): Use-after-free of orphaned AF\_UNIX in Ubuntu builds of Linux kernel (CVSS 7.1, Canonical Ubuntu Linux)
- [CVE-2026-26276](https://cve.now/CVE-2026-26276.md): Gogs: DOM-based XSS via milestone selection (CVSS 7.3, gogs · gogs.io/gogs)
- [CVE-2026-26196](https://cve.now/CVE-2026-26196.md): Gogs: Access tokens get exposed through URL params in API requests (CVSS 6.9, gogs · gogs.io/gogs)
- [CVE-2026-26195](https://cve.now/CVE-2026-26195.md): Gogs: Stored XSS in branch and wiki views through author and committer names (CVSS 6.9, gogs · gogs.io/gogs)
- [CVE-2026-26194](https://cve.now/CVE-2026-26194.md): Gogs: Release tag option injection in release deletion (CVSS 8.8, gogs · gogs.io/gogs)
- [CVE-2026-25921](https://cve.now/CVE-2026-25921.md): Gogs: Cross-repository LFS object overwrite via missing content hash verification (CVSS 9.3, gogs · gogs.io/gogs)
- [CVE-2026-26022](https://cve.now/CVE-2026-26022.md): Gogs: Stored XSS via data URI in issue comments (CVSS 8.7, gogs · gogs.io/gogs)
- [CVE-2026-3047](https://cve.now/CVE-2026-3047.md): Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login (CVSS 8.8, Red Hat build of Keycloak · org.keycloak:keycloak-broker-sa…)
- [CVE-2026-3009](https://cve.now/CVE-2026-3009.md): Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass) (CVSS 8.1, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +2)
- [CVE-2026-28287](https://cve.now/CVE-2026-28287.md): FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints (CVSS 8.6, FreePBX security-reporting)
- [CVE-2026-3459](https://cve.now/CVE-2026-3459.md): Drag and Drop Multiple File Upload for Contact Form 7 \<= 1.3.9.5 - Unauthenticated Arbitrary File Upload (CVSS 8.1, glenwpcoder Drag and Drop Multiple File Upload for Contact…)
- [CVE-2026-28284](https://cve.now/CVE-2026-28284.md): FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module (CVSS 8.6, FreePBX security-reporting)
- [CVE-2026-28210](https://cve.now/CVE-2026-28210.md): FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports (CVSS 8.6, FreePBX security-reporting)
- [CVE-2026-28209](https://cve.now/CVE-2026-28209.md): FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration (CVSS 7.5, FreePBX security-reporting)
- [CVE-2025-7375](https://cve.now/CVE-2025-7375.md): Unauthenticated Denial-of-Service Vulnerability in Omada EAP610 (CVSS 6.9, TP-Link Systems EAP610)
- [CVE-2025-13476](https://cve.now/CVE-2025-13476.md): Rakuten Viber uses broken or risky cryptographic Algorithm (CVSS 9.8, Rakuten Viber Cloak - Android · Rakuten Viber Cloak - Windo…)
- [CVE-2026-27944](https://cve.now/CVE-2026-27944.md): Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure (CVSS 9.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-24457](https://cve.now/CVE-2026-24457.md): An unsafe parsing of OpenMQ's configuration in OpenMQ versions \<6.5.2 and \<6.9.0, allows a remote attacker to read arbitrary files from a MQ (CVSS 9.1, Eclipse Foundation Eclipse OpenMQ · Eclipse Foundation Ecli…)
- [CVE-2026-27723](https://cve.now/CVE-2026-27723.md): OpenProject: Insufficient access control leads to create Wiki objects belongs unpermitted projects (CVSS 4.3, opf openproject)
- [CVE-2026-27023](https://cve.now/CVE-2026-27023.md): Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client (CVSS 5.0, twentyhq twenty)
- [CVE-2026-29054](https://cve.now/CVE-2026-29054.md): Traefik: lowercase \`Connection\` tokens can delete traefik-managed forwarded identity headers (for example, \`X-Real-Ip\`) (CVSS 7.5, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2026-26999](https://cve.now/CVE-2026-26999.md): Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS) (CVSS 7.5, traefik · github.com/traefik/traefik +2)
- [CVE-2026-26998](https://cve.now/CVE-2026-26998.md): Traefik: unbounded io.ReadAll on auth server response body causes OOM denial of service(DOS) (CVSS 4.4, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2026-30785](https://cve.now/CVE-2026-30785.md): RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) (CVSS 8.2, rustdesk-client RustDesk Client)
- [CVE-2026-30783](https://cve.now/CVE-2026-30783.md): RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies (CVSS 4.8, rustdesk-client RustDesk Client)
- [CVE-2026-30789](https://cve.now/CVE-2026-30789.md): RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force (CVSS 5.7, rustdesk-client RustDesk Client)
- [CVE-2026-30798](https://cve.now/CVE-2026-30798.md): RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload (CVSS 8.2, rustdesk-client RustDesk Client)
- [CVE-2026-30797](https://cve.now/CVE-2026-30797.md): RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server (CVSS 9.3, rustdesk-client RustDesk Client)
- [CVE-2026-25048](https://cve.now/CVE-2026-25048.md): xgrammar: Multi-layer nesting causes DoS (CVSS 8.7, mlc-ai xgrammar · xgrammar)
- [CVE-2025-64166](https://cve.now/CVE-2025-64166.md): Mercurius: Incorrect Content-Type parsing can lead to CSRF attack (CVSS 5.4, mercurius-js mercurius · mercurius)
- [CVE-2026-30796](https://cve.now/CVE-2026-30796.md): RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync (CVSS 6.9, rustdesk-client RustDesk Client)
- [CVE-2026-30795](https://cve.now/CVE-2026-30795.md): RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure (CVSS 8.7, rustdesk-client RustDesk Client)
- [CVE-2026-30793](https://cve.now/CVE-2026-30793.md): RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation (CVSS 9.3, rustdesk-client RustDesk Client)
- [CVE-2026-30792](https://cve.now/CVE-2026-30792.md): RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings (CVSS 8.3, rustdesk-client RustDesk Client)
- [CVE-2026-30791](https://cve.now/CVE-2026-30791.md): RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation (CVSS 8.7, rustdesk-client RustDesk Client)
- [CVE-2026-27748](https://cve.now/CVE-2026-27748.md): Avira Internet Security Arbitrary File Deletion via Improper Link Resolution (CVSS 7.8, Gen Digital Avira Internet Security)
- [CVE-2026-27749](https://cve.now/CVE-2026-27749.md): Avira Internet Security System Speedup Insecure Deserialization (CVSS 7.8, Gen Digital Avira Internet Security)
- [CVE-2026-27750](https://cve.now/CVE-2026-27750.md): Avira Internet Security Optimizer TOCTOU (CVSS 7.8, Gen Digital Avira Internet Security)
- [CVE-2026-3598](https://cve.now/CVE-2026-3598.md): RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption (CVSS 8.7, rustdesk-server-pro RustDesk Server Pro)
- [CVE-2026-1720](https://cve.now/CVE-2026-1720.md): WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation \<= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation (CVSS 8.8, wpxpo WowOptin: Next-Gen Popup Maker – Create Stunning Popu…)
- [CVE-2026-2599](https://cve.now/CVE-2026-2599.md): Database for Contact Form 7, WPforms, Elementor forms \<= 1.4.7 - Unauthenticated PHP Object Injection via 'download\_csv' (CVSS 9.8, crmperks Database for Contact Form 7, WPforms, Elementor fo…)
- [CVE-2026-3236](https://cve.now/CVE-2026-3236.md): In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key ha (CVSS 2.3, Octopus Deploy Octopus Server)
- [CVE-2026-1605](https://cve.now/CVE-2026-1605.md): In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with (CVSS 7.5, Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…)
- [CVE-2025-11143](https://cve.now/CVE-2025-11143.md): The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. (CVSS 3.7, Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…)
- [CVE-2026-21628](https://cve.now/CVE-2026-21628.md): Extension - astroidframe.work - Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla (CVSS 10.0, astroidframe.work Astroid Template Framework)
- [CVE-2026-28542](https://cve.now/CVE-2026-28542.md): Permission bypass vulnerability in the system service framework. (CVSS 7.3, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-28548](https://cve.now/CVE-2026-28548.md): Vulnerability of improper verification in the email application. (CVSS 7.1, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-28551](https://cve.now/CVE-2026-28551.md): Race condition vulnerability in the device security management module. (CVSS 4.7, Huawei HarmonyOS)
- [CVE-2026-28549](https://cve.now/CVE-2026-28549.md): Race condition vulnerability in the permission management service. (CVSS 6.6, Huawei HarmonyOS)
- [CVE-2026-28547](https://cve.now/CVE-2026-28547.md): Vulnerability of uninitialized pointer access in the scanning module. (CVSS 6.8, Huawei HarmonyOS)
- [CVE-2026-28546](https://cve.now/CVE-2026-28546.md): Buffer overflow vulnerability in the scanning module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-28543](https://cve.now/CVE-2026-28543.md): Race condition vulnerability in the maintenance and diagnostics module. (CVSS 4.4, Huawei HarmonyOS)
- [CVE-2026-28541](https://cve.now/CVE-2026-28541.md): Permission control vulnerability in the cellular\_data module. (CVSS 4.0, Huawei HarmonyOS)
- [CVE-2026-28540](https://cve.now/CVE-2026-28540.md): Out-of-bounds character read vulnerability in Bluetooth. (CVSS 4.0, Huawei HarmonyOS)
- [CVE-2026-28539](https://cve.now/CVE-2026-28539.md): Data processing vulnerability in the certificate management module. (CVSS 6.2, Huawei HarmonyOS)
- [CVE-2026-28538](https://cve.now/CVE-2026-28538.md): Path traversal vulnerability in the certificate management module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2025-66319](https://cve.now/CVE-2025-66319.md): Permission control vulnerability in the resource scheduling module. (CVSS 3.3, Huawei HarmonyOS)
- [CVE-2026-28552](https://cve.now/CVE-2026-28552.md): Out-of-bounds write vulnerability in the IMS module. (CVSS 6.5, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-28550](https://cve.now/CVE-2026-28550.md): Race condition vulnerability in the security control module. (CVSS 4.0, Huawei HarmonyOS)
- [CVE-2026-28545](https://cve.now/CVE-2026-28545.md): Race condition vulnerability in the printing module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-28544](https://cve.now/CVE-2026-28544.md): Race condition vulnerability in the printing module. (CVSS 6.2, Huawei HarmonyOS)
- [CVE-2026-1321](https://cve.now/CVE-2026-1321.md): Membership Plugin – Restrict Content \<= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp\_level' (CVSS 8.1, stellarwp Membership Plugin – Restrict Content)
- [CVE-2026-2893](https://cve.now/CVE-2026-2893.md): Page and Post Clone \<= 6.3 - Authenticated (Contributor+) SQL Injection via 'meta\_key' Parameter (CVSS 6.5, carlosfazenda Fast Page & Post Duplicator)
- [CVE-2026-21786](https://cve.now/CVE-2026-21786.md): HCL Sametime for iOS is affected by sensitive information disclosure (CVSS 3.3, HCLSoftware Sametime for iOS)
- [CVE-2026-28537](https://cve.now/CVE-2026-28537.md): Double free vulnerability in the window module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2026-28536](https://cve.now/CVE-2026-28536.md): Authentication bypass vulnerability in the device authentication module. (CVSS 9.6, Huawei HarmonyOS)
- [CVE-2026-25702](https://cve.now/CVE-2026-25702.md): nftables disabled due to incorrect kernel backport (CVSS 7.3, SUSE Linux Enterprise Server)
- [CVE-2026-2743](https://cve.now/CVE-2026-2743.md): SEPPmail User Web Interface Arbitrary File Write to RCE (CVSS 10.0, SeppMail)
- [CVE-2026-1678](https://cve.now/CVE-2026-1678.md): dns: memory‑safety issue in the DNS name parser (CVSS 9.4, zephyrproject-rtos Zephyr)
- [CVE-2026-2418](https://cve.now/CVE-2026-2418.md): Login with Salesforce \<= 1.0.2 - Unauthenticated Authentication Bypass (CVSS 9.1, Login with Salesforce)
- [CVE-2026-28137](https://cve.now/CVE-2026-28137.md): WordPress MediCenter - Health Medical Clinic WordPress Theme theme \<= 14.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, QuanticaLabs MediCenter - Health Medical Clinic)
- [CVE-2026-28135](https://cve.now/CVE-2026-28135.md): WordPress Royal Elementor Addons plugin \<= 1.7.1052 - Other vulnerability Type vulnerability (CVSS 8.2, WP Royal Royal Elementor Addons)
- [CVE-2026-28134](https://cve.now/CVE-2026-28134.md): WordPress JetEngine plugin \<= 3.7.2 - Remote Code Execution (RCE) vulnerability (CVSS 8.5, Crocoblock JetEngine)
- [CVE-2026-28133](https://cve.now/CVE-2026-28133.md): WordPress Filr plugin \<= 1.2.14 - Arbitrary File Upload vulnerability (CVSS 8.5, WP Chill Filr)
- [CVE-2026-28130](https://cve.now/CVE-2026-28130.md): WordPress UDesign theme \<= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, AndonDesign UDesign)
- [CVE-2026-28129](https://cve.now/CVE-2026-28129.md): WordPress Little Birdies theme \<= 1.3.16 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes Little Birdies)
- [CVE-2026-28128](https://cve.now/CVE-2026-28128.md): WordPress Verse theme \<= 1.7.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Verse)
- [CVE-2026-28127](https://cve.now/CVE-2026-28127.md): WordPress Lawyer Directory plugin \<= 1.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, e-plugins Lawyer Directory)
- [CVE-2026-28126](https://cve.now/CVE-2026-28126.md): WordPress RH Frontend Publishing Pro plugin \< 4.3.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, sizam RH Frontend Publishing Pro)
- [CVE-2026-28125](https://cve.now/CVE-2026-28125.md): WordPress Midi theme \<= 1.14 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Midi)
- [CVE-2026-28124](https://cve.now/CVE-2026-28124.md): WordPress Notarius theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Notarius)
- [CVE-2026-28123](https://cve.now/CVE-2026-28123.md): WordPress Veil theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Veil)
- [CVE-2026-28122](https://cve.now/CVE-2026-28122.md): WordPress ListingPro plugin \<= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CridioStudio ListingPro)
- [CVE-2026-28121](https://cve.now/CVE-2026-28121.md): WordPress Anderson theme \<= 1.4.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Anderson)
- [CVE-2026-28120](https://cve.now/CVE-2026-28120.md): WordPress Dr.Patterson theme \<= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Dr.Patterson)
- [CVE-2026-28119](https://cve.now/CVE-2026-28119.md): WordPress Nirvana theme \<= 2.6 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes Nirvana)
- [CVE-2026-28118](https://cve.now/CVE-2026-28118.md): WordPress Welldone theme \<= 2.4 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes Welldone)
- [CVE-2026-28117](https://cve.now/CVE-2026-28117.md): WordPress smart SEO theme \<= 2.9 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes smart SEO)
- [CVE-2026-28115](https://cve.now/CVE-2026-28115.md): WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin \<= 1.25 - SQL Injection vulnerability (CVSS 9.3, loopus WP Attractive Donations System - Easy Stripe & Paypa…)
- [CVE-2026-28114](https://cve.now/CVE-2026-28114.md): WordPress WooCommerce License Manager plugin \<= 7.0.6 - Arbitrary File Upload vulnerability (CVSS 9.1, firassaidi WooCommerce License Manager)
- [CVE-2026-28113](https://cve.now/CVE-2026-28113.md): WordPress Ultimate Learning Pro plugin \<= 3.9.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, azzaroco Ultimate Learning Pro)
- [CVE-2026-28112](https://cve.now/CVE-2026-28112.md): WordPress AllInOne - Banner Rotator plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup AllInOne - Banner Rotator)
- [CVE-2026-28110](https://cve.now/CVE-2026-28110.md): WordPress LambertGroup - AllInOne - Banner with Playlist plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup - AllInOne - Banner with Playlist)
- [CVE-2026-28109](https://cve.now/CVE-2026-28109.md): WordPress LambertGroup - AllInOne - Content Slider plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup - AllInOne - Content Slider)
- [CVE-2026-28108](https://cve.now/CVE-2026-28108.md): WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup - AllInOne - Banner with Thumbnails)
- [CVE-2026-28107](https://cve.now/CVE-2026-28107.md): WordPress Muzicon theme \<= 1.9.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Muzicon)
- [CVE-2026-28105](https://cve.now/CVE-2026-28105.md): WordPress Good Energy theme \<= 1.7.7 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Good Energy)
- [CVE-2026-28104](https://cve.now/CVE-2026-28104.md): WordPress Site Suggest plugin \<= 1.3.9 - Broken Access Control vulnerability (CVSS 6.5, Aryan Shirani Bid Abadi Site Suggest)
- [CVE-2026-28103](https://cve.now/CVE-2026-28103.md): WordPress LBG Zoominoutslider plugin \<= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup LBG Zoominoutslider)
- [CVE-2026-28102](https://cve.now/CVE-2026-28102.md): WordPress UberSlider Classic plugin \<= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup UberSlider Classic)
- [CVE-2026-28101](https://cve.now/CVE-2026-28101.md): WordPress UberSlider MouseInteraction plugin \<= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup UberSlider MouseInteraction)
- [CVE-2026-28100](https://cve.now/CVE-2026-28100.md): WordPress UberSlider PerpetuumMobile plugin \<= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup UberSlider PerpetuumMobile)
- [CVE-2026-28099](https://cve.now/CVE-2026-28099.md): WordPress UberSlider Ultra plugin \<= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LambertGroup UberSlider Ultra)
- [CVE-2026-28098](https://cve.now/CVE-2026-28098.md): WordPress Save Life theme \<= 1.2.13 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Save Life)
- [CVE-2026-28097](https://cve.now/CVE-2026-28097.md): WordPress Artrium theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Artrium)
- [CVE-2026-28096](https://cve.now/CVE-2026-28096.md): WordPress WealthCo theme \<= 2.18 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX WealthCo)
- [CVE-2026-28095](https://cve.now/CVE-2026-28095.md): WordPress Marcell theme \<= 1.2.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Marcell)
- [CVE-2026-28094](https://cve.now/CVE-2026-28094.md): WordPress RexCoin theme \<= 1.2.6 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX RexCoin)
- [CVE-2026-28093](https://cve.now/CVE-2026-28093.md): WordPress Ozisti theme \<= 1.1.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Ozisti)
- [CVE-2026-28092](https://cve.now/CVE-2026-28092.md): WordPress Sounder theme \<= 1.3.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Sounder)
- [CVE-2026-28091](https://cve.now/CVE-2026-28091.md): WordPress Coleo theme \<= 1.1.7 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Coleo)
- [CVE-2026-28090](https://cve.now/CVE-2026-28090.md): WordPress Gamezone theme \<= 1.1.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Gamezone)
- [CVE-2026-28089](https://cve.now/CVE-2026-28089.md): WordPress Daiquiri theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Daiquiri)
- [CVE-2026-28088](https://cve.now/CVE-2026-28088.md): WordPress Aqualots theme \<= 1.1.6 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Aqualots)
- [CVE-2026-28087](https://cve.now/CVE-2026-28087.md): WordPress Filmax theme \<= 1.1.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Filmax)
- [CVE-2026-28086](https://cve.now/CVE-2026-28086.md): WordPress Run Gran theme \<= 2.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Run Gran)
- [CVE-2026-28085](https://cve.now/CVE-2026-28085.md): WordPress Mahogany theme \<= 2.9 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Mahogany)
- [CVE-2026-28084](https://cve.now/CVE-2026-28084.md): WordPress Bazinga theme \<= 1.1.9 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Bazinga)
- [CVE-2026-28081](https://cve.now/CVE-2026-28081.md): WordPress Windsor theme \<= 2.5.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Windsor)
- [CVE-2026-28079](https://cve.now/CVE-2026-28079.md): WordPress Conquerors theme \<= 1.2.13 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes Conquerors)
- [CVE-2026-28078](https://cve.now/CVE-2026-28078.md): WordPress uListing plugin \<= 2.2.0 - Arbitrary File Download vulnerability (CVSS 4.9, Stylemix uListing)
- [CVE-2026-28077](https://cve.now/CVE-2026-28077.md): WordPress Vapester theme \<= 1.1.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Vapester)
- [CVE-2026-28076](https://cve.now/CVE-2026-28076.md): WordPress Guff theme \<= 1.0.1 - Broken Access Control vulnerability (CVSS 7.5, Frenify Guff)
- [CVE-2026-28075](https://cve.now/CVE-2026-28075.md): WordPress Porto theme \<= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, p-themes Porto)
- [CVE-2026-28074](https://cve.now/CVE-2026-28074.md): WordPress Pizza House theme \<= 1.4.0 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Pizza House)
- [CVE-2026-28072](https://cve.now/CVE-2026-28072.md): WordPress pixfort Core plugin \<= 3.2.22 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, pixfort Core)
- [CVE-2026-28071](https://cve.now/CVE-2026-28071.md): WordPress pixfort Core plugin \<= 3.2.22 - Broken Access Control vulnerability (CVSS 6.3, pixfort Core)
- [CVE-2026-28069](https://cve.now/CVE-2026-28069.md): WordPress Le Truffe theme \<= 1.1.7 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Le Truffe)
- [CVE-2026-28068](https://cve.now/CVE-2026-28068.md): WordPress Rhythmo theme \<= 1.3.4 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Rhythmo)
- [CVE-2026-28067](https://cve.now/CVE-2026-28067.md): WordPress Bassein theme \<= 1.0.15 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Bassein)
- [CVE-2026-28066](https://cve.now/CVE-2026-28066.md): WordPress Legrand theme \<= 2.17 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Legrand)
- [CVE-2026-28065](https://cve.now/CVE-2026-28065.md): WordPress Eject theme \<= 2.17 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Eject)
- [CVE-2026-28064](https://cve.now/CVE-2026-28064.md): WordPress Edge Decor theme \<= 2.2 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Edge Decor)
- [CVE-2026-28063](https://cve.now/CVE-2026-28063.md): WordPress Asia Garden theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Asia Garden)
- [CVE-2026-28062](https://cve.now/CVE-2026-28062.md): WordPress Happy Baby theme \<= 1.2.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Happy Baby)
- [CVE-2026-28061](https://cve.now/CVE-2026-28061.md): WordPress Tiger Claw theme \<= 1.1.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Tiger Claw)
- [CVE-2026-28060](https://cve.now/CVE-2026-28060.md): WordPress S.King theme \<= 1.5.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX S.King)
- [CVE-2026-28059](https://cve.now/CVE-2026-28059.md): WordPress Dermatology Clinic theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Dermatology Clinic)
- [CVE-2026-28058](https://cve.now/CVE-2026-28058.md): WordPress Dixon theme \<= 1.4.2.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Dixon)
- [CVE-2026-28057](https://cve.now/CVE-2026-28057.md): WordPress Mandala theme \<= 2.8 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Mandala)
- [CVE-2026-28056](https://cve.now/CVE-2026-28056.md): WordPress MCKinney's Politics theme \<= 1.2.8 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX MCKinney's Politics)
- [CVE-2026-28055](https://cve.now/CVE-2026-28055.md): WordPress M.Williamson theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX M.Williamson)
- [CVE-2026-28054](https://cve.now/CVE-2026-28054.md): WordPress Legal Stone theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Legal Stone)
- [CVE-2026-28053](https://cve.now/CVE-2026-28053.md): WordPress Miller theme \<= 1.3.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Miller)
- [CVE-2026-28052](https://cve.now/CVE-2026-28052.md): WordPress Peter Mason theme \<= 1.4.5 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Peter Mason)
- [CVE-2026-28051](https://cve.now/CVE-2026-28051.md): WordPress Yacht Rental theme \<= 2.6 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Yacht Rental)
- [CVE-2026-28050](https://cve.now/CVE-2026-28050.md): WordPress Beacon theme \<= 2.24 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Beacon)
- [CVE-2026-28049](https://cve.now/CVE-2026-28049.md): WordPress Police Department theme \<= 2.17 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Police Department)
- [CVE-2026-28048](https://cve.now/CVE-2026-28048.md): WordPress FlashMart theme \<= 2.0.15 - Local File Inclusion vulnerability (CVSS 8.1, magentech FlashMart)
- [CVE-2026-28047](https://cve.now/CVE-2026-28047.md): WordPress Victo theme \<= 1.4.16 - Local File Inclusion vulnerability (CVSS 8.1, magentech Victo)
- [CVE-2026-28046](https://cve.now/CVE-2026-28046.md): WordPress Law Office theme \<= 3.3.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Law Office)
- [CVE-2026-28045](https://cve.now/CVE-2026-28045.md): WordPress N7 | Golf Club Sports & Events theme \<= 2.16.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX N7 | Golf Club Sports & Events)
- [CVE-2026-28043](https://cve.now/CVE-2026-28043.md): WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 9.8, ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme)
- [CVE-2026-28042](https://cve.now/CVE-2026-28042.md): WordPress Listify plugin \<= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Astoundify Listify)
- [CVE-2026-28041](https://cve.now/CVE-2026-28041.md): WordPress Grit theme \<= 1.0.1 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Grit)
- [CVE-2026-28039](https://cve.now/CVE-2026-28039.md): WordPress wpDataTables plugin \<= 6.5.0.1 - Local File Inclusion vulnerability (CVSS 7.5, TMS wpDataTables)
- [CVE-2026-28038](https://cve.now/CVE-2026-28038.md): WordPress Ultimate Addons for WPBakery Page Builder plugin \<= 3.21.1 - Broken Access Control vulnerability (CVSS 6.5, Brainstorm\_Force Ultimate Addons for WPBakery Page Builder)
- [CVE-2026-28037](https://cve.now/CVE-2026-28037.md): WordPress EventON plugin \<= 4.9.12 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ashanjay EventON)
- [CVE-2026-28036](https://cve.now/CVE-2026-28036.md): WordPress Ratatouille theme \<= 1.2.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4, SkatDesign Ratatouille)
- [CVE-2026-28035](https://cve.now/CVE-2026-28035.md): WordPress Printy theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Printy)
- [CVE-2026-28034](https://cve.now/CVE-2026-28034.md): WordPress Progress theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Progress)
- [CVE-2026-28033](https://cve.now/CVE-2026-28033.md): WordPress Edifice theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Edifice)
- [CVE-2026-28032](https://cve.now/CVE-2026-28032.md): WordPress Tuning theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Tuning)
- [CVE-2026-28031](https://cve.now/CVE-2026-28031.md): WordPress Invetex theme \<= 2.18 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Invetex)
- [CVE-2026-28030](https://cve.now/CVE-2026-28030.md): WordPress Bonbon theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Bonbon)
- [CVE-2026-28029](https://cve.now/CVE-2026-28029.md): WordPress EmojiNation theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX EmojiNation)
- [CVE-2026-28028](https://cve.now/CVE-2026-28028.md): WordPress MoneyFlow theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX MoneyFlow)
- [CVE-2026-28027](https://cve.now/CVE-2026-28027.md): WordPress Kayon theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Kayon)
- [CVE-2026-28026](https://cve.now/CVE-2026-28026.md): WordPress Motorix theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Motorix)
- [CVE-2026-28025](https://cve.now/CVE-2026-28025.md): WordPress Stargaze theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Stargaze)
- [CVE-2026-28024](https://cve.now/CVE-2026-28024.md): WordPress Helion theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes Helion)
- [CVE-2026-28023](https://cve.now/CVE-2026-28023.md): WordPress Nuts theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Nuts)
- [CVE-2026-28022](https://cve.now/CVE-2026-28022.md): WordPress Foodie theme \<= 1.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Foodie)
- [CVE-2026-28021](https://cve.now/CVE-2026-28021.md): WordPress Craftis theme \<= 1.2.8 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Craftis)
- [CVE-2026-28020](https://cve.now/CVE-2026-28020.md): WordPress Chroma theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Chroma)
- [CVE-2026-28019](https://cve.now/CVE-2026-28019.md): WordPress Manoir theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Manoir)
- [CVE-2026-28018](https://cve.now/CVE-2026-28018.md): WordPress Global Logistics theme \<= 3.20 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Global Logistics)
- [CVE-2026-28017](https://cve.now/CVE-2026-28017.md): WordPress Green Thumb theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Green Thumb)
- [CVE-2026-28016](https://cve.now/CVE-2026-28016.md): WordPress Luxury Wine theme \<= 1.1.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Luxury Wine)
- [CVE-2026-28015](https://cve.now/CVE-2026-28015.md): WordPress ShiftCV theme \<= 3.0.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX ShiftCV)
- [CVE-2026-28014](https://cve.now/CVE-2026-28014.md): WordPress Translogic theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Translogic)
- [CVE-2026-28013](https://cve.now/CVE-2026-28013.md): WordPress Kratz theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Kratz)
- [CVE-2026-28012](https://cve.now/CVE-2026-28012.md): WordPress Gridiron theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Gridiron)
- [CVE-2026-28011](https://cve.now/CVE-2026-28011.md): WordPress Yottis theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Yottis)
- [CVE-2026-28010](https://cve.now/CVE-2026-28010.md): WordPress Scientia theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Scientia)
- [CVE-2026-28009](https://cve.now/CVE-2026-28009.md): WordPress DroneX theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX DroneX)
- [CVE-2026-28007](https://cve.now/CVE-2026-28007.md): WordPress Coinpress theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Coinpress)
- [CVE-2026-28006](https://cve.now/CVE-2026-28006.md): WordPress Yungen theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Yungen)
- [CVE-2026-27998](https://cve.now/CVE-2026-27998.md): WordPress Vixus theme \<= 1.0.16 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Vixus)
- [CVE-2026-27997](https://cve.now/CVE-2026-27997.md): WordPress Maxify theme \<= 1.0.16 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Maxify)
- [CVE-2026-27996](https://cve.now/CVE-2026-27996.md): WordPress Lingvico theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Lingvico)
- [CVE-2026-27995](https://cve.now/CVE-2026-27995.md): WordPress Justitia theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Justitia)
- [CVE-2026-27994](https://cve.now/CVE-2026-27994.md): WordPress Tediss theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Tediss)
- [CVE-2026-27993](https://cve.now/CVE-2026-27993.md): WordPress Aldo theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Aldo)
- [CVE-2026-27992](https://cve.now/CVE-2026-27992.md): WordPress Meals & Wheels theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Meals & Wheels)
- [CVE-2026-27991](https://cve.now/CVE-2026-27991.md): WordPress Avventure theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Avventure)
- [CVE-2026-27990](https://cve.now/CVE-2026-27990.md): WordPress ConFix theme \<= 1.013 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX ConFix)
- [CVE-2026-27989](https://cve.now/CVE-2026-27989.md): WordPress Quanzo theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Quanzo)
- [CVE-2026-27988](https://cve.now/CVE-2026-27988.md): WordPress Equadio theme \<= 1.1.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Equadio)
- [CVE-2026-27987](https://cve.now/CVE-2026-27987.md): WordPress The Qlean theme \<= 2.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX The Qlean)
- [CVE-2026-27986](https://cve.now/CVE-2026-27986.md): WordPress OsTende theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX OsTende)
- [CVE-2026-27985](https://cve.now/CVE-2026-27985.md): WordPress Humanum theme \<= 1.1.4 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Humanum)
- [CVE-2026-27984](https://cve.now/CVE-2026-27984.md): WordPress Widget Options plugin \<= 4.1.3 - Remote Code Execution (RCE) vulnerability (CVSS 9.0, Marketing Fire Widget Options)
- [CVE-2026-27983](https://cve.now/CVE-2026-27983.md): WordPress LMS Elementor Pro plugin \<= 1.0.4 - Privilege Escalation vulnerability (CVSS 9.8, designthemes LMS Elementor Pro)
- [CVE-2026-27541](https://cve.now/CVE-2026-27541.md): WordPress Wholesale Suite plugin \<= 2.2.6 - Privilege Escalation vulnerability (CVSS 7.2, Josh Kohlbach Wholesale Suite)
- [CVE-2026-27439](https://cve.now/CVE-2026-27439.md): WordPress Dentario theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Dentario)
- [CVE-2026-27438](https://cve.now/CVE-2026-27438.md): WordPress Kingler theme \<= 1.7 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Kingler)
- [CVE-2026-27437](https://cve.now/CVE-2026-27437.md): WordPress Tennis Club theme \<= 1.2.3 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Tennis Club)
- [CVE-2026-27428](https://cve.now/CVE-2026-27428.md): WordPress Eagle Booking plugin \<= 1.3.4.3 - SQL Injection vulnerability (CVSS 8.5, Eagle-Themes Eagle Booking)
- [CVE-2026-27417](https://cve.now/CVE-2026-27417.md): WordPress Sweet Date theme \< 4.0.1 - PHP Object Injection vulnerability (CVSS 9.8, SeventhQueen Sweet Date)
- [CVE-2026-27411](https://cve.now/CVE-2026-27411.md): WordPress SiteGuard WP plugin plugin \<= 1.7.9 - Captcha Bypass vulnerability (CVSS 5.4, jp-secure SiteGuard WP Plugin)
- [CVE-2026-27406](https://cve.now/CVE-2026-27406.md): WordPress My Tickets plugin \<= 2.1.0 - Sensitive Data Exposure vulnerability (CVSS 7.5, Joe Dolson My Tickets)
- [CVE-2026-27396](https://cve.now/CVE-2026-27396.md): WordPress Directory Pro plugin \<= 2.5.6 - Broken Access Control vulnerability (CVSS 7.3, e-plugins Directory Pro)
- [CVE-2026-27390](https://cve.now/CVE-2026-27390.md): WordPress WeDesignTech Ultimate Booking Addon plugin \<= 1.0.1 - Account Takeover vulnerability (CVSS 8.8, designthemes WeDesignTech Ultimate Booking Addon)
- [CVE-2026-27389](https://cve.now/CVE-2026-27389.md): WordPress WeDesignTech Ultimate Booking Addon plugin \<= 1.0.1 - Account Takeover vulnerability (CVSS 9.8, designthemes WeDesignTech Ultimate Booking Addon)
- [CVE-2026-27388](https://cve.now/CVE-2026-27388.md): WordPress DesignThemes Booking Manager plugin \<= 2.0 - Broken Access Control vulnerability (CVSS 7.5, DesignThemes Booking Manager)
- [CVE-2026-27386](https://cve.now/CVE-2026-27386.md): WordPress DesignThemes Directory Addon plugin \<= 1.8 - Broken Access Control vulnerability (CVSS 7.5, DesignThemes Directory Addon)
- [CVE-2026-27385](https://cve.now/CVE-2026-27385.md): WordPress DesignThemes Portfolio plugin \<= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, DesignThemes Portfolio)
- [CVE-2026-27384](https://cve.now/CVE-2026-27384.md): WordPress W3 Total Cache plugin \<= 2.9.1 - Arbitrary Code Execution vulnerability (CVSS 9.0, BoldGrid W3 Total Cache)
- [CVE-2026-27383](https://cve.now/CVE-2026-27383.md): WordPress Metro theme \<= 2.13 - Local File Inclusion vulnerability (CVSS 8.1, RadiusTheme Metro)
- [CVE-2026-27382](https://cve.now/CVE-2026-27382.md): WordPress Metro theme \<= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RadiusTheme Metro)
- [CVE-2026-27381](https://cve.now/CVE-2026-27381.md): WordPress Aora theme \<= 1.3.15 - Local File Inclusion vulnerability (CVSS 8.1, thembay Aora)
- [CVE-2026-27379](https://cve.now/CVE-2026-27379.md): WordPress NextScripts plugin \<= 4.4.7 - PHP Object Injection vulnerability (CVSS 8.8, NextScripts)
- [CVE-2026-27376](https://cve.now/CVE-2026-27376.md): WordPress Claue - Clean, Minimal Elementor WooCommerce Theme theme \<= 2.2.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, JanStudio Claue - Clean, Minimal Elementor WooCommerce Theme)
- [CVE-2026-27375](https://cve.now/CVE-2026-27375.md): WordPress Gecko theme \<= 1.9.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, JanStudio Gecko)
- [CVE-2026-27374](https://cve.now/CVE-2026-27374.md): WordPress WooCommerce Order Details plugin \<= 3.1 - Broken Access Control vulnerability (CVSS 7.5, vanquish WooCommerce Order Details)
- [CVE-2026-27373](https://cve.now/CVE-2026-27373.md): WordPress Tablesome plugin \<= 1.2.3 - SQL Injection vulnerability (CVSS 8.5, Essekia Tablesome)
- [CVE-2026-27370](https://cve.now/CVE-2026-27370.md): WordPress Chaty plugin \<= 3.5.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, Premio Chaty)
- [CVE-2026-27369](https://cve.now/CVE-2026-27369.md): WordPress Celeste theme \<= 1.3.6 - PHP Object Injection vulnerability (CVSS 8.1, BoldThemes Celeste)
- [CVE-2026-27367](https://cve.now/CVE-2026-27367.md): WordPress Musico theme \< 3.4.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Musico)
- [CVE-2026-27363](https://cve.now/CVE-2026-27363.md): WordPress WP Bakery Autoresponder Addon plugin \<= 1.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, kamleshyadav WP Bakery Autoresponder Addon)
- [CVE-2026-27362](https://cve.now/CVE-2026-27362.md): WordPress WP Bakery Autoresponder Addon plugin \<= 1.0.6 - Broken Access Control vulnerability (CVSS 6.5, kamleshyadav WP Bakery Autoresponder Addon)
- [CVE-2026-27361](https://cve.now/CVE-2026-27361.md): WordPress Responsive Posts Carousel Pro plugin \<= 15.1 - Broken Access Control vulnerability (CVSS 7.5, WebCodingPlace Responsive Posts Carousel Pro)
- [CVE-2026-27359](https://cve.now/CVE-2026-27359.md): WordPress Awa Plugins plugin \<= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, fox-themes Awa Plugins)
- [CVE-2026-27358](https://cve.now/CVE-2026-27358.md): WordPress Architecturer theme \< 3.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Architecturer)
- [CVE-2026-27354](https://cve.now/CVE-2026-27354.md): WordPress WooCommerce Coming Soon Product with Countdown plugin \<= 5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WebCodingPlace WooCommerce Coming Soon Product with Countdo…)
- [CVE-2026-27353](https://cve.now/CVE-2026-27353.md): WordPress Grand News | Magazine Newspaper WordPress theme \<= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Grand News)
- [CVE-2026-27352](https://cve.now/CVE-2026-27352.md): WordPress Starto theme \< 2.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Starto)
- [CVE-2026-27348](https://cve.now/CVE-2026-27348.md): WordPress Photography theme \< 7.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Photography)
- [CVE-2026-27344](https://cve.now/CVE-2026-27344.md): WordPress inseri core plugin \<= 1.0.5 - Broken Access Control vulnerability (CVSS 5.9, inseriswiss inseri core)
- [CVE-2026-27342](https://cve.now/CVE-2026-27342.md): WordPress TopFit - Fitness and Gym WordPress Theme theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes TopFit - Fitness and Gym WordPress Theme)
- [CVE-2026-27341](https://cve.now/CVE-2026-27341.md): WordPress TopScorer - Sports WordPress Theme theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes TopScorer - Sports WordPress Theme)
- [CVE-2026-27340](https://cve.now/CVE-2026-27340.md): WordPress Apollo | Night Club, DJ Event WordPress Theme theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Apollo | Night Club, DJ Event WordPress Theme)
- [CVE-2026-27339](https://cve.now/CVE-2026-27339.md): WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme \<= 1.0.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress T…)
- [CVE-2026-27338](https://cve.now/CVE-2026-27338.md): WordPress Car Zone theme \<= 3.7 - Deserialization of untrusted data vulnerability (CVSS 8.8, AivahThemes Car Zone)
- [CVE-2026-27337](https://cve.now/CVE-2026-27337.md): WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPres…)
- [CVE-2026-27336](https://cve.now/CVE-2026-27336.md): WordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Consultor | Consulting, Accounting & Legal Cou…)
- [CVE-2026-27335](https://cve.now/CVE-2026-27335.md): WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology T…)
- [CVE-2026-27334](https://cve.now/CVE-2026-27334.md): WordPress Alchemists theme \<= 4.6.0 - Local File Inclusion vulnerability (CVSS 8.1, dan\_fisher Alchemists)
- [CVE-2026-27332](https://cve.now/CVE-2026-27332.md): WordPress Agrofood theme \< 1.4.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Agrofood)
- [CVE-2026-27326](https://cve.now/CVE-2026-27326.md): WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme \<= 1.2.5 - Local File Inclusion vulnerability (CVSS 8.1, axiomthemes AC Services | HVAC, Air Conditioning & Heating…)
- [CVE-2026-27098](https://cve.now/CVE-2026-27098.md): WordPress Au Pair Agency - Babysitting & Nanny Theme theme \<= 1.2.2 - Deserialization of untrusted data vulnerability (CVSS 8.1, axiomthemes Au Pair Agency - Babysitting & Nanny Theme)
- [CVE-2026-27097](https://cve.now/CVE-2026-27097.md): WordPress CasaMia | Property Rental Real Estate WordPress Theme theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes CasaMia | Property Rental Real Estate WordPres…)
- [CVE-2026-24963](https://cve.now/CVE-2026-24963.md): WordPress Amelia plugin \<= 1.2.38 - Privilege Escalation vulnerability (CVSS 7.2, ameliabooking Amelia)
- [CVE-2026-24960](https://cve.now/CVE-2026-24960.md): WordPress Charety theme \< 2.0.2 - Arbitrary File Upload vulnerability (CVSS 9.9, zozothemes Charety)
- [CVE-2026-24385](https://cve.now/CVE-2026-24385.md): WordPress Podlove Web Player plugin \<= 5.9.1 - PHP Object Injection vulnerability (CVSS 7.5, gerritvanaaken Podlove Web Player)
- [CVE-2026-23802](https://cve.now/CVE-2026-23802.md): WordPress AI Engine plugin \<= 3.3.2 - Arbitrary File Upload vulnerability (CVSS 9.1, Jordy Meow AI Engine)
- [CVE-2026-23801](https://cve.now/CVE-2026-23801.md): WordPress The Issue theme \<= 1.6.11 - Local File Inclusion vulnerability (CVSS 8.1, fuelthemes The Issue)
- [CVE-2026-23799](https://cve.now/CVE-2026-23799.md): WordPress Tutor LMS plugin \<= 3.9.5 - Broken Access Control vulnerability (CVSS 6.5, Themeum Tutor LMS)
- [CVE-2026-23798](https://cve.now/CVE-2026-23798.md): WordPress PowerPress Podcasting plugin \<= 11.15.10 - PHP Object Injection vulnerability (CVSS 8.8, blubrry PowerPress Podcasting)
- [CVE-2026-23546](https://cve.now/CVE-2026-23546.md): WordPress Classified Listing plugin \<= 5.3.4 - Sensitive Data Exposure vulnerability (CVSS 6.5, RadiusTheme Classified Listing)
- [CVE-2026-22501](https://cve.now/CVE-2026-22501.md): WordPress Mounthood theme \<= 1.3.2 - PHP Object Injection vulnerability (CVSS 9.8, axiomthemes Mounthood)
- [CVE-2026-22497](https://cve.now/CVE-2026-22497.md): WordPress Jardi theme \<= 1.7.2 - PHP Object Injection vulnerability (CVSS 9.8, AncoraThemes Jardi)
- [CVE-2026-22479](https://cve.now/CVE-2026-22479.md): WordPress Easy Post Submission plugin \<= 2.4.0 - Broken Access Control vulnerability (CVSS 7.5, ThemeRuby Easy Post Submission)
- [CVE-2026-22478](https://cve.now/CVE-2026-22478.md): WordPress FindAll theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes FindAll)
- [CVE-2026-22477](https://cve.now/CVE-2026-22477.md): WordPress Felizia theme \<= 1.3.4 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Felizia)
- [CVE-2026-22476](https://cve.now/CVE-2026-22476.md): WordPress Etchy theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Etchy)
- [CVE-2026-22475](https://cve.now/CVE-2026-22475.md): WordPress Estate theme \<= 1.3.4 - PHP Object Injection vulnerability (CVSS 9.8, axiomthemes Estate)
- [CVE-2026-22474](https://cve.now/CVE-2026-22474.md): WordPress Equestrian Centre theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Equestrian Centre)
- [CVE-2026-22473](https://cve.now/CVE-2026-22473.md): WordPress Dental Clinic theme \<= 3.7 - PHP Object Injection vulnerability (CVSS 8.8, designthemes Dental Clinic)
- [CVE-2026-22471](https://cve.now/CVE-2026-22471.md): WordPress Secudeal Payments for Ecommerce plugin \<= 1.1 - PHP Object Injection vulnerability (CVSS 8.8, maximsecudeal Secudeal Payments for Ecommerce)
- [CVE-2026-22467](https://cve.now/CVE-2026-22467.md): WordPress DeepDigital theme \<= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, mwtemplates DeepDigital)
- [CVE-2026-22465](https://cve.now/CVE-2026-22465.md): WordPress BuddyApp theme \<= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SeventhQueen BuddyApp)
- [CVE-2026-22460](https://cve.now/CVE-2026-22460.md): WordPress FormGent plugin \<= 1.7.0 - Arbitrary File Deletion vulnerability (CVSS 8.6, wpWax FormGent)
- [CVE-2026-22459](https://cve.now/CVE-2026-22459.md): WordPress WordPress CTA plugin \<= 2.1.2 - Broken Access Control vulnerability (CVSS 6.5, Blend Media WordPress CTA)
- [CVE-2026-22457](https://cve.now/CVE-2026-22457.md): WordPress Wanderland theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Wanderland)
- [CVE-2026-22456](https://cve.now/CVE-2026-22456.md): WordPress Askka theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Askka)
- [CVE-2026-22455](https://cve.now/CVE-2026-22455.md): WordPress Thebe theme \<= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, foreverpinetree Thebe)
- [CVE-2026-22454](https://cve.now/CVE-2026-22454.md): WordPress Solaris theme \<= 2.5 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Solaris)
- [CVE-2026-22453](https://cve.now/CVE-2026-22453.md): WordPress Pets Club theme \<= 2.3 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Pets Club)
- [CVE-2026-22452](https://cve.now/CVE-2026-22452.md): WordPress Hoverex theme \<= 1.5.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Hoverex)
- [CVE-2026-22451](https://cve.now/CVE-2026-22451.md): WordPress Handyman theme \<= 1.4.7 - PHP Object Injection vulnerability (CVSS 9.8, AncoraThemes Handyman)
- [CVE-2026-22449](https://cve.now/CVE-2026-22449.md): WordPress Don Peppe theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes Don Peppe)
- [CVE-2026-22446](https://cve.now/CVE-2026-22446.md): WordPress Prowess theme \<= 1.8.1 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes Prowess)
- [CVE-2026-22443](https://cve.now/CVE-2026-22443.md): WordPress Alliance theme \<= 3.1.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Alliance)
- [CVE-2026-22442](https://cve.now/CVE-2026-22442.md): WordPress Tribe theme \<= 1.7.3 - Local File Inclusion vulnerability (CVSS 8.1, LaunchandSell Tribe)
- [CVE-2026-22441](https://cve.now/CVE-2026-22441.md): WordPress Zentrum theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Zentrum)
- [CVE-2026-22440](https://cve.now/CVE-2026-22440.md): WordPress Thecs theme \<= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, foreverpinetree Thecs)
- [CVE-2026-22439](https://cve.now/CVE-2026-22439.md): WordPress Green Planet theme \<= 1.1.14 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Green Planet)
- [CVE-2026-22438](https://cve.now/CVE-2026-22438.md): WordPress TheBi theme \<= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, foreverpinetree TheBi)
- [CVE-2026-22437](https://cve.now/CVE-2026-22437.md): WordPress Playa theme \<= 1.3.9 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Playa)
- [CVE-2026-22436](https://cve.now/CVE-2026-22436.md): WordPress Helvig theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Helvig)
- [CVE-2026-22435](https://cve.now/CVE-2026-22435.md): WordPress ElectroServ theme \<= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes ElectroServ)
- [CVE-2026-22434](https://cve.now/CVE-2026-22434.md): WordPress Crown Art theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Crown Art)
- [CVE-2026-22433](https://cve.now/CVE-2026-22433.md): WordPress CloudMe theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes CloudMe)
- [CVE-2026-22432](https://cve.now/CVE-2026-22432.md): WordPress Woopy theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Woopy)
- [CVE-2026-22431](https://cve.now/CVE-2026-22431.md): WordPress Wabi-Sabi theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Wabi-Sabi)
- [CVE-2026-22429](https://cve.now/CVE-2026-22429.md): WordPress Verdure theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Verdure)
- [CVE-2026-22428](https://cve.now/CVE-2026-22428.md): WordPress Tooth Fairy theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Tooth Fairy)
- [CVE-2026-22427](https://cve.now/CVE-2026-22427.md): WordPress GoTravel theme \<= 2.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes GoTravel)
- [CVE-2026-22425](https://cve.now/CVE-2026-22425.md): WordPress Sweet Jane theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Sweet Jane)
- [CVE-2026-22424](https://cve.now/CVE-2026-22424.md): WordPress Shaha theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Shaha)
- [CVE-2026-22423](https://cve.now/CVE-2026-22423.md): WordPress SetSail theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes SetSail)
- [CVE-2026-22421](https://cve.now/CVE-2026-22421.md): WordPress Quantum theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Quantum)
- [CVE-2026-22420](https://cve.now/CVE-2026-22420.md): WordPress Horizon theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Horizon)
- [CVE-2026-22419](https://cve.now/CVE-2026-22419.md): WordPress Honor theme \<= 2.3 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Honor)
- [CVE-2026-22418](https://cve.now/CVE-2026-22418.md): WordPress Great Lotus theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Great Lotus)
- [CVE-2026-22417](https://cve.now/CVE-2026-22417.md): WordPress Grand Wedding theme \< 3.1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeGoods Grand Wedding)
- [CVE-2026-22416](https://cve.now/CVE-2026-22416.md): WordPress FixTeam theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes FixTeam)
- [CVE-2026-22415](https://cve.now/CVE-2026-22415.md): WordPress The Mounty theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes The Mounty)
- [CVE-2026-22414](https://cve.now/CVE-2026-22414.md): WordPress Marra theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Marra)
- [CVE-2026-22413](https://cve.now/CVE-2026-22413.md): WordPress Malgré theme \<= 1.0.3 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Malgré)
- [CVE-2026-22412](https://cve.now/CVE-2026-22412.md): WordPress Eona theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Eona)
- [CVE-2026-22410](https://cve.now/CVE-2026-22410.md): WordPress Dolcino theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Dolcino)
- [CVE-2026-22408](https://cve.now/CVE-2026-22408.md): WordPress Justicia theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Justicia)
- [CVE-2026-22405](https://cve.now/CVE-2026-22405.md): WordPress Overton theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Overton)
- [CVE-2026-22403](https://cve.now/CVE-2026-22403.md): WordPress Innovio theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Innovio)
- [CVE-2026-22399](https://cve.now/CVE-2026-22399.md): WordPress Holmes theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Holmes)
- [CVE-2026-22397](https://cve.now/CVE-2026-22397.md): WordPress Fleur theme \<= 2.2.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Fleur)
- [CVE-2026-22395](https://cve.now/CVE-2026-22395.md): WordPress Fiorello theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Fiorello)
- [CVE-2026-22394](https://cve.now/CVE-2026-22394.md): WordPress Evently theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Evently)
- [CVE-2026-22392](https://cve.now/CVE-2026-22392.md): WordPress Cortex theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Cortex)
- [CVE-2026-22390](https://cve.now/CVE-2026-22390.md): WordPress Builderall Builder for WordPress plugin \<= 3.0.1 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, Builderall Builder for WordPress)
- [CVE-2026-22389](https://cve.now/CVE-2026-22389.md): WordPress Cocco theme \<= 2.0 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Cocco)
- [CVE-2026-22387](https://cve.now/CVE-2026-22387.md): WordPress Aviana theme \<= 2.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Aviana)
- [CVE-2026-22385](https://cve.now/CVE-2026-22385.md): WordPress Wolmart theme \<= 1.9.6 - Local File Inclusion vulnerability (CVSS 8.1, don-themes Wolmart)
- [CVE-2025-69411](https://cve.now/CVE-2025-69411.md): WordPress ionCube tester plus plugin \<= 1.3 - Arbitrary File Download vulnerability (CVSS 7.5, Robert Seyfriedsberger ionCube tester plus)
- [CVE-2025-69343](https://cve.now/CVE-2025-69343.md): WordPress Theater for WordPress plugin \<= 0.19 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jeroen Schmit Theater for WordPress)
- [CVE-2025-69340](https://cve.now/CVE-2025-69340.md): WordPress WeDesignTech Ultimate Booking Addon plugin \<= 1.0.3 - Broken Access Control vulnerability (CVSS 7.5, BuddhaThemes WeDesignTech Ultimate Booking Addon)
- [CVE-2025-69339](https://cve.now/CVE-2025-69339.md): WordPress Molla theme \<= 1.5.16 - Local File Inclusion vulnerability (CVSS 8.1, don-themes Molla)
- [CVE-2025-69338](https://cve.now/CVE-2025-69338.md): WordPress Riode Core plugin \<= 1.6.26 - SQL Injection vulnerability (CVSS 9.3, don-themes Riode Core)
- [CVE-2025-69090](https://cve.now/CVE-2025-69090.md): WordPress Remons theme \<= 1.3.4 - Local File Inclusion vulnerability (CVSS 8.1, ovatheme Remons)
- [CVE-2025-68555](https://cve.now/CVE-2025-68555.md): WordPress Nutrie theme \< 2.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9, zozothemes Nutrie)
- [CVE-2025-68554](https://cve.now/CVE-2025-68554.md): WordPress Keenarch theme \< 2.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9, zozothemes Keenarch)
- [CVE-2025-68553](https://cve.now/CVE-2025-68553.md): WordPress Lendiz theme \< 2.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9, zozothemes Lendiz)
- [CVE-2025-68515](https://cve.now/CVE-2025-68515.md): WordPress WP Booking System plugin \<= 2.0.19.12 - Sensitive Data Exposure vulnerability (CVSS 5.8, Roland Murg WP Booking System)
- [CVE-2025-54001](https://cve.now/CVE-2025-54001.md): WordPress Classter theme \<= 2.5 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Classter)
- [CVE-2025-53335](https://cve.now/CVE-2025-53335.md): WordPress Berger theme \<= 1.1.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Berger)
- [CVE-2026-29053](https://cve.now/CVE-2026-29053.md): Ghost Vulnerable to Remote Code Execution via Malicious Themes (CVSS 7.7, TryGhost Ghost · ghost)
- [CVE-2026-29052](https://cve.now/CVE-2026-29052.md): HumHub Calendar Module: Stored XSS in Event Types (CVSS 6.9, humhub calendar)
- [CVE-2026-23767](https://cve.now/CVE-2026-23767.md): ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, (CVSS 9.8, Seiko Epson ESC/POS)
- [CVE-2026-30777](https://cve.now/CVE-2026-30777.md): EC-CUBE provided by EC-CUBE CO.,LTD. (CVSS 4.9, EC-CUBE CO. EC-CUBE 4.1 series · EC-CUBE CO. EC-CUBE 4.2… +1)
- [CVE-2026-27982](https://cve.now/CVE-2026-27982.md): An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by (CVSS 4.3, django-allauth)
- [CVE-2026-3072](https://cve.now/CVE-2026-3072.md): Media Library Assistant \<= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification (CVSS 4.3, dglingren Media Library Assistant)
- [CVE-2026-29128](https://cve.now/CVE-2026-29128.md): IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files (CVSS 8.6, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2026-3523](https://cve.now/CVE-2026-3523.md): Apocalypse Meow \<= 22.1.0 - Authenticated (Administrator+) SQL Injection via 'type' Parameter (CVSS 4.9, blobfolio Apocalypse Meow)
- [CVE-2026-2899](https://cve.now/CVE-2026-2899.md): Fluent Forms Pro Add On Pack \<= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion (CVSS 6.5, techjewel Fluent Forms Pro Add On Pack)
- [CVE-2026-3034](https://cve.now/CVE-2026-3034.md): OoohBoi Steroids for Elementor \<= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls (CVSS 6.4, sagarpatel124 OoohBoi Steroids for Elementor)
- [CVE-2026-2365](https://cve.now/CVE-2026-2365.md): Fluent Forms Pro \<= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission (CVSS 7.2, techjewel Fluent Forms Pro Add On Pack)
- [CVE-2026-29127](https://cve.now/CVE-2026-29127.md): Incorrect Permission Assignment(777) on \`monitor\` Users Home Directory Containing SUID Root Binaries in IDC SFX2100 (CVSS 9.2, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2026-26034](https://cve.now/CVE-2026-26034.md): UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allo (CVSS 7.8, Dell UPS Multi-UPS Management Console)
- [CVE-2026-26033](https://cve.now/CVE-2026-26033.md): UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which (CVSS 6.7, Dell UPS Multi-UPS Management Console)
- [CVE-2024-57854](https://cve.now/CVE-2024-57854.md): Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator (CVSS 9.1, DOUGDUDE Net::NSCA::Client)
- [CVE-2026-29126](https://cve.now/CVE-2026-29126.md): World-Writable, Root Owned/Run \`/etc/udhcpc/default.script\` in IDC SFX2100 Satellite Receiver Leads To Potential LPE (CVSS 8.5, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2025-40931](https://cve.now/CVE-2025-40931.md): Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id (CVSS 9.1, CHORNY Apache::Session::Generate::MD5)
- [CVE-2026-29125](https://cve.now/CVE-2026-29125.md): IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable \`/etc/resolv.conf\` (CVSS 7.1, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2026-3257](https://cve.now/CVE-2026-3257.md): UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library (CVSS 9.8, TOKUHIROM UnQLite)
- [CVE-2026-3381](https://cve.now/CVE-2026-3381.md): Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib (CVSS 9.8, PMQS Compress::Raw::Zlib)
- [CVE-2025-40926](https://cve.now/CVE-2025-40926.md): Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely (CVSS 9.8, KAZEBURO Plack::Middleware::Session::Simple)
- [CVE-2026-29124](https://cve.now/CVE-2026-29124.md): Multiple SUID Root Binaries in \`monitor\` User Home Directory Leading to Potential Local Privilege Escalation (CVSS 8.6, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2026-29123](https://cve.now/CVE-2026-29123.md): Multiple SUID Root Binaries in \`xd\` User Home Directory Leading to Potential Local Privilege Escalation (CVSS 8.6, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2026-29122](https://cve.now/CVE-2026-29122.md): \`/bin/date\` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE (CVSS 8.3, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2026-29121](https://cve.now/CVE-2026-29121.md): \`/sbin/ip\` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE (CVSS 8.3, International Datacasting SFX2100 Satellite Receiver)
- [CVE-2024-43035](https://cve.now/CVE-2024-43035.md): Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. (CVSS 5.8, Fonoster · @fonoster/voice)
- [CVE-2025-29165](https://cve.now/CVE-2025-29165.md): An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component (CVSS 9.8)
- [CVE-2025-45691](https://cve.now/CVE-2025-45691.md): An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. (CVSS 7.5, ragas)
- [CVE-2025-69534](https://cve.now/CVE-2025-69534.md): Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandl (CVSS 7.5, markdown)
- [CVE-2025-70229](https://cve.now/CVE-2025-70229.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule. (CVSS 9.8)
- [CVE-2025-70230](https://cve.now/CVE-2025-70230.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS. (CVSS 9.8)
- [CVE-2025-70231](https://cve.now/CVE-2025-70231.md): D-Link DIR-513 version 1.10 contains a critical-level vulnerability. (CVSS 9.8)
- [CVE-2025-70232](https://cve.now/CVE-2025-70232.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter. (CVSS 9.8)
- [CVE-2025-70233](https://cve.now/CVE-2025-70233.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard. (CVSS 9.8)
- [CVE-2025-70614](https://cve.now/CVE-2025-70614.md): OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the web-based control panel (CVSS 8.1)
- [CVE-2025-70616](https://cve.now/CVE-2025-70616.md): A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for cod (CVSS 7.8)
- [CVE-2025-70948](https://cve.now/CVE-2025-70948.md): A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and exe (CVSS 9.3, @perfood/couch-auth)
- [CVE-2025-70949](https://cve.now/CVE-2025-70949.md): An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel. (CVSS 7.5, @perfood/couch-auth)
- [CVE-2025-70995](https://cve.now/CVE-2025-70995.md): An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper v (CVSS 8.8)
- [CVE-2026-26377](https://cve.now/CVE-2026-26377.md): Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function. (CVSS 5.4)
- [CVE-2026-26416](https://cve.now/CVE-2026-26416.md): An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privilege (CVSS 8.8)
- [CVE-2026-26417](https://cve.now/CVE-2026-26417.md): A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authe (CVSS 8.1)
- [CVE-2026-26418](https://cve.now/CVE-2026-26418.md): Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to acc (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.