# CVEs published 2026-03-25

619 CVEs were published on March 25, 2026: 55 critical, 247 high. Days are UTC.

- [CVE-2026-30892](https://cve.now/CVE-2026-30892.md): Crun incorrectly parses \`crun exec\` option \`-u\`, leading to privilege escalation (CVSS 0.0, containers crun)
- [CVE-2026-34056](https://cve.now/CVE-2026-34056.md): OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data (CVSS 7.7, openemr)
- [CVE-2026-34055](https://cve.now/CVE-2026-34055.md): OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification (CVSS 8.1, openemr)
- [CVE-2026-34053](https://cve.now/CVE-2026-34053.md): OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler (CVSS 7.1, openemr)
- [CVE-2026-34051](https://cve.now/CVE-2026-34051.md): OpenEMR has Improper ACL On Import/Export Popup (CVSS 5.4, openemr)
- [CVE-2026-33934](https://cve.now/CVE-2026-33934.md): OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures (CVSS 4.3, openemr)
- [CVE-2026-33933](https://cve.now/CVE-2026-33933.md): Reflected XSS via Unescaped contextName Parameter in Custom Template Editor (CVSS 6.1, openemr)
- [CVE-2026-33932](https://cve.now/CVE-2026-33932.md): OpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml Attributes (CVSS 7.6, openemr)
- [CVE-2026-33931](https://cve.now/CVE-2026-33931.md): OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access (CVSS 6.5, openemr)
- [CVE-2026-4826](https://cve.now/CVE-2026-4826.md): SourceCodester Sales and Inventory System HTTP GET Parameter update\_stock.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-33918](https://cve.now/CVE-2026-33918.md): OpenEMR Missing Authorization on Claim File Download Endpoint (CVSS 7.6, openemr)
- [CVE-2026-33917](https://cve.now/CVE-2026-33917.md): OpenEMR has SQL Injection in CAMOS Form (CVSS 8.8, openemr)
- [CVE-2026-4758](https://cve.now/CVE-2026-4758.md): WP Job Portal \<= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field (CVSS 8.8, wpjobportal WP Job Portal – AI-Powered Recruitment System f…)
- [CVE-2026-33915](https://cve.now/CVE-2026-33915.md): OpenEMR Missing ACL Checks on Insurance Company API Routes (CVSS 5.4, openemr)
- [CVE-2026-33914](https://cve.now/CVE-2026-33914.md): OpenEMR has SQL Injection in PostCalendar Category Delete (CVSS 7.2, openemr)
- [CVE-2026-33913](https://cve.now/CVE-2026-33913.md): OpenEMR: XInclude Injection in CCDA Import Allows Reading Arbitrary Server Files (CVSS 7.7, openemr)
- [CVE-2026-33912](https://cve.now/CVE-2026-33912.md): OpenEMR has reflected XSS in ajax\_download.php via reportID parameter (CVSS 5.4, openemr)
- [CVE-2026-33911](https://cve.now/CVE-2026-33911.md): OpenEMR vulnerable to reflected XSS in graphs.php via title parameter (CVSS 5.4, openemr)
- [CVE-2026-33910](https://cve.now/CVE-2026-33910.md): OpenEMR has a SQL Injection Vulnerability in patient selection (CVSS 7.2, openemr)
- [CVE-2026-33909](https://cve.now/CVE-2026-33909.md): OpenEMR Vulnerable to SQL Injection via Unsanitized Variables in MedEx Recall/Reminder Processing (CVSS 5.9, openemr)
- [CVE-2026-4825](https://cve.now/CVE-2026-4825.md): SourceCodester Sales and Inventory System HTTP GET Parameter update\_sales.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-33348](https://cve.now/CVE-2026-33348.md): OpenEMR has Stored XSS in patient encounter Eye Exam form $CHRONIC2 and $CHRONIC3 (CVSS 8.7, openemr)
- [CVE-2026-32120](https://cve.now/CVE-2026-32120.md): OpenEMR has IDOR in Fee Sheet Product Save (CVSS 6.5, openemr)
- [CVE-2026-29187](https://cve.now/CVE-2026-29187.md): OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new\_search\_popup.php (CVSS 8.1, openemr)
- [CVE-2026-4824](https://cve.now/CVE-2026-4824.md): Enter Software Iperius Backup Backup Job Configuration File privileges management (CVSS 7.3, Enter Software Iperius Backup)
- [CVE-2026-4823](https://cve.now/CVE-2026-4823.md): Enter Software Iperius Backup NTLM2 information disclosure (CVSS 2.0, Enter Software Iperius Backup)
- [CVE-2025-36187](https://cve.now/CVE-2025-36187.md): Multiple Security vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge (CVSS 4.4, IBM Knowledge Catalog Standard Cartridge)
- [CVE-2025-14684](https://cve.now/CVE-2025-14684.md): IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to . (CVSS 4.0, IBM Maximo Application Suite - Monitor Component)
- [CVE-2026-30976](https://cve.now/CVE-2026-30976.md): Sonarr Path Traversal vulnerability (CVSS 8.6, Sonarr)
- [CVE-2026-30975](https://cve.now/CVE-2026-30975.md): Sonarr Authentication Bypass vulnerability (CVSS 8.1, Sonarr)
- [CVE-2025-14807](https://cve.now/CVE-2025-14807.md): IBM InfoSphere Information Server is vulnerable to HTTP header injection (CVSS 6.5, IBM InfoSphere Information Server)
- [CVE-2026-1015](https://cve.now/CVE-2026-1015.md): IBM InfoSphere Information Server is vulnerable to server-side request forgery (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2026-1014](https://cve.now/CVE-2026-1014.md): IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information (CVSS 6.5, IBM InfoSphere Information Server)
- [CVE-2026-2483](https://cve.now/CVE-2026-2483.md): IBM InfoSphere Information Server Cross-Site Scripting (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2025-64648](https://cve.now/CVE-2025-64648.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 5.9, IBM Concert)
- [CVE-2025-64647](https://cve.now/CVE-2025-64647.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 5.9, IBM Concert)
- [CVE-2026-2484](https://cve.now/CVE-2026-2484.md): IBM InfoSphere Information Server Information Disclosure (CVSS 4.3, IBM InfoSphere Information Server)
- [CVE-2025-64646](https://cve.now/CVE-2025-64646.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 6.2, IBM Concert)
- [CVE-2025-36440](https://cve.now/CVE-2025-36440.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 5.1, IBM Concert)
- [CVE-2026-4822](https://cve.now/CVE-2026-4822.md): Enter Software Iperius Backup Backup Service temp file (CVSS 7.3, Enter Software Iperius Backup)
- [CVE-2025-36438](https://cve.now/CVE-2025-36438.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 5.1, IBM Concert)
- [CVE-2025-36422](https://cve.now/CVE-2025-36422.md): IBM InfoSphere Information Server is vulnerable to cross-site request forgery (CVSS 4.3, IBM InfoSphere Information Server)
- [CVE-2025-36258](https://cve.now/CVE-2025-36258.md): IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password (CVSS 7.1, IBM InfoSphere Information Server)
- [CVE-2026-2485](https://cve.now/CVE-2026-2485.md): IBM InfoSphere Information Server Cross-Site Scripting (CVSS 4.8, IBM InfoSphere Information Server)
- [CVE-2026-33249](https://cve.now/CVE-2026-33249.md): NATS: Message tracing can be redirected to arbitrary subject (CVSS 4.3, nats-io nats-server · github.com/nats-io/nats-server/v2 +1)
- [CVE-2025-14974](https://cve.now/CVE-2025-14974.md): IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference (CVSS 5.7, IBM InfoSphere Information Server)
- [CVE-2026-33223](https://cve.now/CVE-2026-33223.md): NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing (CVSS 6.4, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-1262](https://cve.now/CVE-2026-1262.md): IBM InfoSphere Information Server Information Disclosure (CVSS 4.3, IBM InfoSphere Information Server)
- [CVE-2026-33248](https://cve.now/CVE-2026-33248.md): NATS has mTLS verify\_and\_map authentication bypass via incorrect Subject DN matching (CVSS 4.2, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2025-14917](https://cve.now/CVE-2025-14917.md): IBM WebSphere Application Server Liberty could provide weaker than expected security (CVSS 6.7, IBM WebSphere Application Server - Liberty)
- [CVE-2025-14912](https://cve.now/CVE-2025-14912.md): IBM InfoSphere Information Server is vulnerable to server-side request forgery (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2025-14915](https://cve.now/CVE-2025-14915.md): IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability (CVSS 6.5, IBM WebSphere Application Server - Liberty)
- [CVE-2025-14810](https://cve.now/CVE-2025-14810.md): IBM InfoSphere Information Server is vulnerable due to insufficient session expiration (CVSS 6.3, IBM InfoSphere Information Server)
- [CVE-2026-33222](https://cve.now/CVE-2026-33222.md): NATS JetStream has an authorization bypass through its Management API (CVSS 4.9, nats-io nats-server · github.com/nats-io/nats-server/v2 +1)
- [CVE-2026-1561](https://cve.now/CVE-2026-1561.md): IBM WebSphere Application Server Liberty Server-Side Request Forgery (CVSS 5.4, IBM WebSphere Application Server Liberty)
- [CVE-2025-14808](https://cve.now/CVE-2025-14808.md): IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information (CVSS 3.1, IBM InfoSphere Information Server)
- [CVE-2025-14790](https://cve.now/CVE-2025-14790.md): IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information (CVSS 6.5, IBM InfoSphere Information Server)
- [CVE-2025-12708](https://cve.now/CVE-2025-12708.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 6.2, IBM Concert)
- [CVE-2026-33247](https://cve.now/CVE-2026-33247.md): NATS credentials are exposed in monitoring port via command-line argv (CVSS 7.4, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-33219](https://cve.now/CVE-2026-33219.md): NATS is vulnerable to pre-auth DoS through WebSockets client service (CVSS 5.3, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-33218](https://cve.now/CVE-2026-33218.md): NATS has pre-auth server panic via leafnode handling (CVSS 7.5, nats-io nats-server · github.com/nats-io/nats-server/v2 +1)
- [CVE-2026-33246](https://cve.now/CVE-2026-33246.md): NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers (CVSS 6.4, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-33217](https://cve.now/CVE-2026-33217.md): NATS allows MQTT clients to bypass ACL checks (CVSS 7.1, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-33216](https://cve.now/CVE-2026-33216.md): NATS has MQTT plaintext password disclosure (CVSS 8.6, nats-io nats-server · github.com/nats-io/nats-server/v2 +1)
- [CVE-2026-29785](https://cve.now/CVE-2026-29785.md): NATS Server panic via malicious compression on leafnode port (CVSS 7.5, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-27889](https://cve.now/CVE-2026-27889.md): NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead (CVSS 7.5, nats-io nats-server · github.com/nats-io/nats-server/v2 +1)
- [CVE-2026-27602](https://cve.now/CVE-2026-27602.md): Modoboa has an OS Command Injection (CVSS 7.2, modoboa)
- [CVE-2026-33751](https://cve.now/CVE-2026-33751.md): n8n Vulnerable to LDAP Filter Injection in LDAP Node (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-33749](https://cve.now/CVE-2026-33749.md): n8n Vulnerable to XSS via Binary Data Inline HTML Rendering (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-33724](https://cve.now/CVE-2026-33724.md): n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-33809](https://cve.now/CVE-2026-33809.md): OOM from malicious IFD offset in golang.org/x/image/tiff (CVSS 5.3, golang.org/x/image/tiff · golang.org/x/image)
- [CVE-2026-1001](https://cve.now/CVE-2026-1001.md): Domoticz \< 2026.1 Stored XSS via Hardware Configuration Endpoint (CVSS 4.8, Domoticz)
- [CVE-2026-33722](https://cve.now/CVE-2026-33722.md): n8n Has External Secrets Authorization Bypass in Credential Saving (CVSS 7.3, n8n-io n8n · n8n)
- [CVE-2026-33720](https://cve.now/CVE-2026-33720.md): n8n Has Authorization Bypass in OAuth Callback via N8N\_SKIP\_AUTH\_ON\_OAUTH\_CALLBACK (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-33713](https://cve.now/CVE-2026-33713.md): n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression (CVSS 8.7, n8n-io n8n · n8n)
- [CVE-2026-33696](https://cve.now/CVE-2026-33696.md): n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-33665](https://cve.now/CVE-2026-33665.md): n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover (CVSS 8.8, n8n-io n8n · n8n)
- [CVE-2026-33663](https://cve.now/CVE-2026-33663.md): n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition (CVSS 8.5, n8n-io n8n · n8n)
- [CVE-2026-33660](https://cve.now/CVE-2026-33660.md): n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-27496](https://cve.now/CVE-2026-27496.md): n8n has In-Process Memory Disclosure in its Task Runner (CVSS 7.1, n8n-io n8n · n8n)
- [CVE-2026-2414](https://cve.now/CVE-2026-2414.md): Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9. (CVSS 5.6, HYPR Server)
- [CVE-2026-25645](https://cve.now/CVE-2026-25645.md): Requests has Insecure Temp File Reuse in its extract\_zipped\_paths() utility function (CVSS 4.4, psf requests · requests)
- [CVE-2026-29092](https://cve.now/CVE-2026-29092.md): Kiteworks Email Protection Gateway has an Insufficient Session Expiration (CVSS 4.9, Kiteworks Email Protection Gateway)
- [CVE-2026-23636](https://cve.now/CVE-2026-23636.md): Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type (CVSS 5.5, kiteworks Secure Data Forms)
- [CVE-2026-23635](https://cve.now/CVE-2026-23635.md): Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials (CVSS 6.5, kiteworks Secure Data Forms)
- [CVE-2026-1712](https://cve.now/CVE-2026-1712.md): Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 1 (CVSS 5.8, HYPR Server)
- [CVE-2026-34085](https://cve.now/CVE-2026-34085.md): fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, a (CVSS 5.9, fontconfig project fontconfig)
- [CVE-2025-13078](https://cve.now/CVE-2025-13078.md): Improper Validation of Specified Quantity in Input in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-13436](https://cve.now/CVE-2025-13436.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-14595](https://cve.now/CVE-2025-14595.md): Missing Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-1724](https://cve.now/CVE-2026-1724.md): Missing Authentication for Critical Function in GitLab (CVSS 6.8, GitLab)
- [CVE-2026-2745](https://cve.now/CVE-2026-2745.md): Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 6.8, GitLab)
- [CVE-2026-2726](https://cve.now/CVE-2026-2726.md): Incorrect Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-2973](https://cve.now/CVE-2026-2973.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4, GitLab)
- [CVE-2026-2995](https://cve.now/CVE-2026-2995.md): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab (CVSS 7.7, GitLab)
- [CVE-2026-3857](https://cve.now/CVE-2026-3857.md): Cross-Site Request Forgery (CSRF) in GitLab (CVSS 8.1, GitLab)
- [CVE-2026-3988](https://cve.now/CVE-2026-3988.md): Inefficient Algorithmic Complexity in GitLab (CVSS 7.5, GitLab)
- [CVE-2026-27659](https://cve.now/CVE-2026-27659.md): CSRF vulnerability in UpdateAccessControlPolicyActiveStatus endpoint (CVSS 4.6, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2026-20719](https://cve.now/CVE-2026-20719.md): DoS via URL Previews Rendering Malicious SVGs (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-27656](https://cve.now/CVE-2026-27656.md): Account Takeover via Substring Matching in OpenID Connect Authentication (CVSS 5.7, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-26233](https://cve.now/CVE-2026-26233.md): Denial of Service via HTTP/2 single packet attack on login endpoint (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server)
- [CVE-2026-32573](https://cve.now/CVE-2026-32573.md): WordPress Nelio AB Testing plugin \<= 8.2.7 - Remote Code Execution (RCE) vulnerability (CVSS 9.1, Nelio Software Nelio AB Testing)
- [CVE-2026-32567](https://cve.now/CVE-2026-32567.md): WordPress YML for Yandex Market plugin \< 5.3.0 - Arbitrary File Deletion vulnerability (CVSS 6.8, icopydoc YML for Yandex Market)
- [CVE-2026-32562](https://cve.now/CVE-2026-32562.md): WordPress PPWP plugin \<= 1.9.15 - Broken Access Control vulnerability (CVSS 5.4, WP Folio Team PPWP)
- [CVE-2026-32546](https://cve.now/CVE-2026-32546.md): WordPress Restrict Content plugin \<= 3.2.22 - Broken Access Control vulnerability (CVSS 7.5, StellarWP Restrict Content)
- [CVE-2026-32545](https://cve.now/CVE-2026-32545.md): WordPress Taboola Pixel plugin \<= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Taboola Pixel)
- [CVE-2026-32544](https://cve.now/CVE-2026-32544.md): WordPress OOPSpam Anti-Spam plugin \<= 1.2.62 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, OOPSpam Team OOPSpam Anti-Spam)
- [CVE-2026-32542](https://cve.now/CVE-2026-32542.md): WordPress Fusion Builder plugin \< 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeFusion Fusion Builder)
- [CVE-2026-32541](https://cve.now/CVE-2026-32541.md): WordPress Premmerce Redirect Manager plugin \<= 1.0.12 - Broken Access Control vulnerability (CVSS 6.5, Premmerce Redirect Manager)
- [CVE-2026-32540](https://cve.now/CVE-2026-32540.md): WordPress Bookly plugin \<= 26.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bookly)
- [CVE-2026-32539](https://cve.now/CVE-2026-32539.md): WordPress PublishPress Revisions plugin \<= 3.7.23 - SQL Injection vulnerability (CVSS 9.3, PublishPress Revisions)
- [CVE-2026-32538](https://cve.now/CVE-2026-32538.md): WordPress SMTP Mailer plugin \<= 1.1.24 - Sensitive Data Exposure vulnerability (CVSS 7.5, Noor Alam SMTP Mailer)
- [CVE-2026-32537](https://cve.now/CVE-2026-32537.md): WordPress Visual Portfolio, Photo Gallery & Post Grid plugin \<= 3.5.1 - Local File Inclusion vulnerability (CVSS 7.5, nK Visual Portfolio, Photo Gallery & Post Grid)
- [CVE-2026-32536](https://cve.now/CVE-2026-32536.md): WordPress Green Downloads plugin \<= 2.08 - Arbitrary File Upload vulnerability (CVSS 9.9, halfdata Green Downloads)
- [CVE-2026-32535](https://cve.now/CVE-2026-32535.md): WordPress JS Help Desk plugin \<= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, JoomSky JS Help Desk)
- [CVE-2026-32534](https://cve.now/CVE-2026-32534.md): WordPress JS Help Desk plugin \<= 3.0.3 - SQL Injection vulnerability (CVSS 8.5, JoomSky JS Help Desk)
- [CVE-2026-32533](https://cve.now/CVE-2026-32533.md): WordPress LatePoint plugin \<= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, LatePoint)
- [CVE-2026-32532](https://cve.now/CVE-2026-32532.md): WordPress Contact Form & Lead Form Elementor Builder plugin \<= 2.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeHunk Contact Form & Lead Form Elementor Builder)
- [CVE-2026-32531](https://cve.now/CVE-2026-32531.md): WordPress Kunco theme \< 1.4.5 - Local File Inclusion vulnerability (CVSS 8.1, gavias Kunco)
- [CVE-2026-32530](https://cve.now/CVE-2026-32530.md): WordPress Creator LMS plugin \<= 1.1.18 - Privilege Escalation vulnerability (CVSS 8.8, WPFunnels Creator LMS)
- [CVE-2026-32529](https://cve.now/CVE-2026-32529.md): WordPress Molla theme \< 1.5.19 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, don-themes Molla)
- [CVE-2026-32528](https://cve.now/CVE-2026-32528.md): WordPress Riode | Multi-Purpose WooCommerce theme \< 1.6.29 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, don-themes Riode)
- [CVE-2026-32527](https://cve.now/CVE-2026-32527.md): WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin \<= 1.1.5 - Broken Access Control vulnerability (CVSS 6.5, CRM Perks WP Insightly for Contact Form 7, WPForms, Element…)
- [CVE-2026-32526](https://cve.now/CVE-2026-32526.md): WordPress Abandoned Cart Recovery for WooCommerce plugin \<= 1.1.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VillaTheme Abandoned Cart Recovery for WooCommerce)
- [CVE-2026-32525](https://cve.now/CVE-2026-32525.md): WordPress JetFormBuilder plugin \<= 3.5.6.1 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, jetmonsters JetFormBuilder)
- [CVE-2026-32524](https://cve.now/CVE-2026-32524.md): WordPress Photo Engine plugin \<= 6.4.9 - Arbitrary File Upload vulnerability (CVSS 9.1, Jordy Meow Photo Engine)
- [CVE-2026-32523](https://cve.now/CVE-2026-32523.md): WordPress WPJAM Basic plugin \<= 6.9.2 - Arbitrary File Upload vulnerability (CVSS 9.9, denishua WPJAM Basic)
- [CVE-2026-32522](https://cve.now/CVE-2026-32522.md): WordPress WooCommerce Support Ticket System plugin \< 18.5 - Arbitrary File Deletion vulnerability (CVSS 8.6, vanquish WooCommerce Support Ticket System)
- [CVE-2026-32521](https://cve.now/CVE-2026-32521.md): WordPress WP Custom Admin Interface plugin \<= 7.42 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Northern Beaches Websites WP Custom Admin Interface)
- [CVE-2026-32520](https://cve.now/CVE-2026-32520.md): WordPress RewardsWP plugin \<= 1.0.4 - Privilege Escalation vulnerability (CVSS 9.8, Andrew Munro / AffiliateWP RewardsWP)
- [CVE-2026-32519](https://cve.now/CVE-2026-32519.md): WordPress Bit SMTP plugin \<= 1.2.2 - Broken Authentication vulnerability (CVSS 9.0, Bit Apps Bit SMTP)
- [CVE-2026-32518](https://cve.now/CVE-2026-32518.md): WordPress Gaea theme \< 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, imithemes Gaea)
- [CVE-2026-32517](https://cve.now/CVE-2026-32517.md): WordPress Contact Manager plugin \<= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kleor Contact Manager)
- [CVE-2026-32516](https://cve.now/CVE-2026-32516.md): WordPress Miraculous Core Plugin plugin \< 2.1.2 - SQL Injection vulnerability (CVSS 8.5, kamleshyadav Miraculous Core Plugin)
- [CVE-2026-32515](https://cve.now/CVE-2026-32515.md): WordPress Miraculous theme \< 2.1.2 - Broken Access Control vulnerability (CVSS 7.5, kamleshyadav Miraculous)
- [CVE-2026-32514](https://cve.now/CVE-2026-32514.md): WordPress Petitioner plugin \<= 0.7.3 - Broken Access Control vulnerability (CVSS 6.5, Anton Voytenko Petitioner)
- [CVE-2026-32513](https://cve.now/CVE-2026-32513.md): WordPress JS Archive List plugin \<= 6.1.7 - PHP Object Injection vulnerability (CVSS 8.8, Miguel Useche JS Archive List)
- [CVE-2026-32512](https://cve.now/CVE-2026-32512.md): WordPress Pelicula theme \< 1.10 - PHP Object Injection vulnerability (CVSS 9.8, Edge-Themes Pelicula)
- [CVE-2026-32511](https://cve.now/CVE-2026-32511.md): WordPress Stål theme \< 1.7 - Arbitrary Object Instantiation vulnerability (CVSS 5.4, Mikado-Themes Stål)
- [CVE-2026-32510](https://cve.now/CVE-2026-32510.md): WordPress Kamperen theme \< 1.3 - Arbitrary Object Instantiation vulnerability (CVSS 5.4, Edge-Themes Kamperen)
- [CVE-2026-32509](https://cve.now/CVE-2026-32509.md): WordPress Gracey theme \< 1.4 - Arbitrary Object Instantiation vulnerability (CVSS 5.4, Edge-Themes Gracey)
- [CVE-2026-32508](https://cve.now/CVE-2026-32508.md): WordPress Halstein theme \< 1.8 - Arbitrary Object Instantiation vulnerability (CVSS 5.4, Mikado-Themes Halstein)
- [CVE-2026-32507](https://cve.now/CVE-2026-32507.md): WordPress Leroux theme \< 1.4 - Arbitrary Object Instantiation vulnerability (CVSS 5.4, Elated-Themes Leroux)
- [CVE-2026-32506](https://cve.now/CVE-2026-32506.md): WordPress Archicon theme \< 1.7 - Arbitrary Object Instantiation vulnerability (CVSS 5.4, Edge-Themes Archicon)
- [CVE-2026-32505](https://cve.now/CVE-2026-32505.md): WordPress Kiddy theme \<= 2.0.8 - Local File Inclusion vulnerability (CVSS 8.1, CreativeWS Kiddy)
- [CVE-2026-32504](https://cve.now/CVE-2026-32504.md): WordPress VintWood theme \<= 1.1.8 - Local File Inclusion vulnerability (CVSS 8.1, CreativeWS VintWood)
- [CVE-2026-32503](https://cve.now/CVE-2026-32503.md): WordPress Trendustry theme \<= 1.1.4 - Local File Inclusion vulnerability (CVSS 8.1, CreativeWS Trendustry)
- [CVE-2026-32502](https://cve.now/CVE-2026-32502.md): WordPress Borgholm theme \< 1.6 - PHP Object Injection vulnerability (CVSS 9.8, Select-Themes Borgholm)
- [CVE-2026-32501](https://cve.now/CVE-2026-32501.md): WordPress WP Configurator Pro plugin \<= 3.7.9 - Broken Access Control vulnerability (CVSS 7.1, wp-configurator WP Configurator Pro)
- [CVE-2026-32500](https://cve.now/CVE-2026-32500.md): WordPress MetaMax theme \<= 1.1.4 - Local File Inclusion vulnerability (CVSS 8.1, CreativeWS MetaMax)
- [CVE-2026-32499](https://cve.now/CVE-2026-32499.md): WordPress ChatBot plugin \<= 7.7.9 - SQL Injection vulnerability (CVSS 9.3, QuantumCloud ChatBot)
- [CVE-2026-32498](https://cve.now/CVE-2026-32498.md): WordPress RegistrationMagic plugin \<= 6.0.7.6 - Broken Access Control vulnerability (CVSS 7.5, Metagauss RegistrationMagic)
- [CVE-2026-32497](https://cve.now/CVE-2026-32497.md): WordPress User Verification plugin \<= 2.0.45 - Email Verification Bypass vulnerability (CVSS 5.3, PickPlugins User Verification)
- [CVE-2026-32496](https://cve.now/CVE-2026-32496.md): WordPress Spam Protect for Contact Form 7 plugin \<= 1.2.9 - Arbitrary File Deletion vulnerability (CVSS 6.8, NYSL Spam Protect for Contact Form)
- [CVE-2026-32495](https://cve.now/CVE-2026-32495.md): WordPress WP Terms Popup plugin \<= 2.10.0 - Broken Access Control vulnerability (CVSS 7.5, Link Software WP Terms Popup)
- [CVE-2026-32494](https://cve.now/CVE-2026-32494.md): WordPress Image Slider by Ays plugin \<= 2.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ays Pro Image Slider by Ays)
- [CVE-2026-32493](https://cve.now/CVE-2026-32493.md): WordPress JobSearch plugin \<= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, eyecix JobSearch)
- [CVE-2026-32492](https://cve.now/CVE-2026-32492.md): WordPress My Tickets plugin \<= 2.1.1 - Bypass Vulnerability vulnerability (CVSS 5.3, Joe Dolson My Tickets)
- [CVE-2026-32491](https://cve.now/CVE-2026-32491.md): WordPress WP Review Slider plugin \<= 13.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, jgwhite33 WP Review Slider)
- [CVE-2026-32490](https://cve.now/CVE-2026-32490.md): WordPress WP TripAdvisor Review Slider plugin \<= 14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, jgwhite33 WP TripAdvisor Review Slider)
- [CVE-2026-32489](https://cve.now/CVE-2026-32489.md): WordPress B Blocks plugin \< 2.0.30 - Broken Access Control vulnerability (CVSS 6.5, bPlugins B Blocks)
- [CVE-2026-32488](https://cve.now/CVE-2026-32488.md): WordPress User Registration plugin \<= 4.4.9 - Privilege Escalation vulnerability (CVSS 8.1, wpeverest User Registration)
- [CVE-2026-32485](https://cve.now/CVE-2026-32485.md): WordPress WP User Frontend plugin \<= 4.2.8 - Broken Access Control vulnerability (CVSS 7.5, weDevs WP User Frontend)
- [CVE-2026-32484](https://cve.now/CVE-2026-32484.md): WordPress weForms plugin \<= 1.6.26 - PHP Object Injection vulnerability (CVSS 8.8, BoldGrid weForms)
- [CVE-2026-32483](https://cve.now/CVE-2026-32483.md): WordPress Contact Form Email plugin \<= 1.3.63 - Broken Access Control vulnerability (CVSS 6.5, codepeople Contact Form Email)
- [CVE-2026-32482](https://cve.now/CVE-2026-32482.md): WordPress Ona theme \< 1.24 - Arbitrary File Upload vulnerability (CVSS 9.9, deothemes Ona)
- [CVE-2026-32441](https://cve.now/CVE-2026-32441.md): WordPress Comments Import & Export plugin \<= 2.4.9 - Broken Access Control vulnerability (CVSS 7.7, WebToffee Comments Import & Export)
- [CVE-2026-31921](https://cve.now/CVE-2026-31921.md): WordPress Product Rearrange for WooCommerce plugin \<= 1.2.2 - Broken Access Control vulnerability (CVSS 8.2, Devteam HaywoodTech Product Rearrange for WooCommerce)
- [CVE-2026-31920](https://cve.now/CVE-2026-31920.md): WordPress Product Rearrange for WooCommerce plugin \<= 1.2.2 - SQL Injection vulnerability (CVSS 9.3, Devteam HaywoodTech Product Rearrange for WooCommerce)
- [CVE-2026-31914](https://cve.now/CVE-2026-31914.md): WordPress WP Courses LMS plugin \<= 3.2.26 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, hookandhook WP Courses LMS)
- [CVE-2026-31913](https://cve.now/CVE-2026-31913.md): WordPress Scape theme \< 1.5.16 - Arbitrary File Deletion vulnerability (CVSS 8.6, Whitebox-Studio Scape)
- [CVE-2026-27095](https://cve.now/CVE-2026-27095.md): WordPress Bus Ticket Booking with Seat Reservation plugin \<= 5.6.0 - PHP Object Injection vulnerability (CVSS 9.8, magepeopleteam Bus Ticket Booking with Seat Reservation)
- [CVE-2026-27088](https://cve.now/CVE-2026-27088.md): WordPress Darna Framework plugin \<= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, G5Theme Darna Framework)
- [CVE-2026-27087](https://cve.now/CVE-2026-27087.md): WordPress Wolverine Framework plugin \<= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, G5Theme Wolverine Framework)
- [CVE-2026-27084](https://cve.now/CVE-2026-27084.md): WordPress Buisson theme \<= 1.1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Buisson)
- [CVE-2026-27083](https://cve.now/CVE-2026-27083.md): WordPress Work & Travel Company theme \<= 1.2 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Work & Travel Company)
- [CVE-2026-27082](https://cve.now/CVE-2026-27082.md): WordPress Love Story theme \<= 1.3.12 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Love Story)
- [CVE-2026-27081](https://cve.now/CVE-2026-27081.md): WordPress Rosebud theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Rosebud)
- [CVE-2026-27080](https://cve.now/CVE-2026-27080.md): WordPress Deston theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Deston)
- [CVE-2026-27079](https://cve.now/CVE-2026-27079.md): WordPress Amfissa theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Amfissa)
- [CVE-2026-27078](https://cve.now/CVE-2026-27078.md): WordPress Emaurri theme \<= 1.0.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Emaurri)
- [CVE-2026-27077](https://cve.now/CVE-2026-27077.md): WordPress MultiOffice theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes MultiOffice)
- [CVE-2026-27076](https://cve.now/CVE-2026-27076.md): WordPress LuxeDrive theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes LuxeDrive)
- [CVE-2026-27075](https://cve.now/CVE-2026-27075.md): WordPress Belfort theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Belfort)
- [CVE-2026-27073](https://cve.now/CVE-2026-27073.md): WordPress Addi – Cuotas que se adaptan a ti plugin \<= 2.0.4 - Broken Authentication vulnerability (CVSS 7.5, Addi – Cuotas que se adaptan a ti)
- [CVE-2026-27071](https://cve.now/CVE-2026-27071.md): WordPress WPCafe plugin \<= 3.0.7 - Broken Access Control vulnerability (CVSS 9.1, Arraytics WPCafe)
- [CVE-2026-27054](https://cve.now/CVE-2026-27054.md): WordPress Penci Soledad Data Migrator plugin \<= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PenciDesign Penci Soledad Data Migrator)
- [CVE-2026-27051](https://cve.now/CVE-2026-27051.md): WordPress Golo theme \<= 1.7.0 - Privilege Escalation vulnerability (CVSS 9.8, uxper Golo)
- [CVE-2026-27049](https://cve.now/CVE-2026-27049.md): WordPress Jobica Core plugin \<= 1.4.2 - Account Takeover vulnerability (CVSS 9.8, NooTheme Jobica Core)
- [CVE-2026-27048](https://cve.now/CVE-2026-27048.md): WordPress The Aisle Core plugin \<= 2.0.5 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes The Aisle Core)
- [CVE-2026-27047](https://cve.now/CVE-2026-27047.md): WordPress Curly Core plugin \<= 2.1.6 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Curly Core)
- [CVE-2026-27046](https://cve.now/CVE-2026-27046.md): WordPress StoreCustomizer plugin \<= 2.6.3 - Broken Access Control vulnerability (CVSS 6.5, Kaira StoreCustomizer)
- [CVE-2026-27045](https://cve.now/CVE-2026-27045.md): WordPress WooCommerce Infinite Scroll plugin \<= 1.6.2 - PHP Object Injection vulnerability (CVSS 8.8, sbthemes WooCommerce Infinite Scroll)
- [CVE-2026-27044](https://cve.now/CVE-2026-27044.md): WordPress Total Poll Lite plugin \<= 4.12.0 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, TotalSuite Total Poll Lite)
- [CVE-2026-27040](https://cve.now/CVE-2026-27040.md): WordPress WZone plugin \<= 14.0.31 - Arbitrary File Deletion vulnerability (CVSS 8.8, AA-Team WZone)
- [CVE-2026-27039](https://cve.now/CVE-2026-27039.md): WordPress WZone plugin \<= 14.0.31 - SQL Injection vulnerability (CVSS 8.5, AA-Team WZone)
- [CVE-2026-25469](https://cve.now/CVE-2026-25469.md): WordPress ViaBill – WooCommerce plugin \<= 1.1.53 - Settings Change vulnerability (CVSS 6.5, ViaBill for WooCommerce ViaBill – WooCommerce)
- [CVE-2026-25465](https://cve.now/CVE-2026-25465.md): WordPress CP Multi View Event Calendar plugin \<= 1.4.36 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, codepeople CP Multi View Event Calendar)
- [CVE-2026-25464](https://cve.now/CVE-2026-25464.md): WordPress Jannah theme \<= 7.6.4 - Local File Inclusion vulnerability (CVSS 8.1, TieLabs Jannah)
- [CVE-2026-25462](https://cve.now/CVE-2026-25462.md): WordPress avalex plugin \<= 3.1.3 - Broken Access Control vulnerability (CVSS 6.5, avalex)
- [CVE-2026-25461](https://cve.now/CVE-2026-25461.md): WordPress Listeo Core plugin \<= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, purethemes Listeo Core)
- [CVE-2026-25460](https://cve.now/CVE-2026-25460.md): WordPress Ave Core plugin \<= 2.9.1 - Broken Access Control vulnerability (CVSS 6.3, LiquidThemes Ave Core)
- [CVE-2026-25458](https://cve.now/CVE-2026-25458.md): WordPress Moments theme \<= 2.2 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes Moments)
- [CVE-2026-25457](https://cve.now/CVE-2026-25457.md): WordPress Mixtape theme \<= 2.1 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes Mixtape)
- [CVE-2026-25456](https://cve.now/CVE-2026-25456.md): WordPress Automated FedEx live/manual rates with shipping labels plugin \<= 5.1.9 - Broken Access Control vulnerability (CVSS 7.3, Aarsiv Groups Automated FedEx live/manual rates with shippi…)
- [CVE-2026-25455](https://cve.now/CVE-2026-25455.md): WordPress Product Slider for WooCommerce plugin \<= 1.13.61 - Broken Access Control vulnerability (CVSS 6.5, PickPlugins Product Slider for WooCommerce)
- [CVE-2026-25454](https://cve.now/CVE-2026-25454.md): WordPress The League theme \<= 4.4.1 - Broken Access Control vulnerability (CVSS 6.5, MVPThemes The League)
- [CVE-2026-25452](https://cve.now/CVE-2026-25452.md): WordPress Remoji plugin \<= 2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPDO Remoji)
- [CVE-2026-25447](https://cve.now/CVE-2026-25447.md): WordPress Widget Wrangler plugin \<= 2.3.9 - Remote Code Execution (RCE) vulnerability (CVSS 9.1, Jonathan Daggerhart Widget Wrangler)
- [CVE-2026-25437](https://cve.now/CVE-2026-25437.md): WordPress GZSEO plugin \<= 2.0.14 - Broken Access Control vulnerability (CVSS 6.5, سید محمدامین هاشمی GZSEO)
- [CVE-2026-25435](https://cve.now/CVE-2026-25435.md): WordPress Booking calendar, Appointment Booking System plugin \<= 3.2.36 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wpdevart Booking calendar, Appointment Booking System)
- [CVE-2026-25430](https://cve.now/CVE-2026-25430.md): WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.2.2 - Broken Access Control vulnerability (CVSS 6.5, CRM Perks Integration for Mailchimp and Contact Form 7, WPF…)
- [CVE-2026-25429](https://cve.now/CVE-2026-25429.md): WordPress Nexa Blocks plugin \<= 1.1.1 - PHP Object Injection vulnerability (CVSS 9.8, wpdive Nexa Blocks)
- [CVE-2026-25417](https://cve.now/CVE-2026-25417.md): WordPress ProfileGrid plugin \<= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Metagauss ProfileGrid)
- [CVE-2026-25414](https://cve.now/CVE-2026-25414.md): WordPress WPBookit Pro plugin \<= 1.6.18 - Privilege Escalation vulnerability (CVSS 8.8, iqonicdesign WPBookit Pro)
- [CVE-2026-25413](https://cve.now/CVE-2026-25413.md): WordPress WPBookit Pro plugin \<= 1.6.18 - Arbitrary File Upload vulnerability (CVSS 9.9, iqonicdesign WPBookit Pro)
- [CVE-2026-25406](https://cve.now/CVE-2026-25406.md): WordPress Tutor LMS Pro plugin \<= 3.9.4 - Broken Authentication vulnerability (CVSS 8.1, Themeum Tutor LMS Pro)
- [CVE-2026-25401](https://cve.now/CVE-2026-25401.md): WordPress WPCargo Track & Trace plugin \<= 8.0.2 - Broken Access Control vulnerability (CVSS 7.5, Arni Cinco WPCargo Track & Trace)
- [CVE-2026-25400](https://cve.now/CVE-2026-25400.md): WordPress Apicona theme \<= 24.1.0 - PHP Object Injection vulnerability (CVSS 8.8, thememount Apicona)
- [CVE-2026-25398](https://cve.now/CVE-2026-25398.md): WordPress Vertex Addons for Elementor plugin \<= 1.6.4 - Broken Access Control vulnerability (CVSS 6.5, Webilia Vertex Addons for Elementor)
- [CVE-2026-25397](https://cve.now/CVE-2026-25397.md): WordPress File Uploader for WooCommerce plugin \<= 1.0.4 - Path Traversal vulnerability (CVSS 7.5, Snowray Software File Uploader for WooCommerce)
- [CVE-2026-25396](https://cve.now/CVE-2026-25396.md): WordPress Commerce Coinbase For WooCommerce plugin \<= 1.6.6 - Broken Access Control vulnerability (CVSS 7.5, CoderPress Commerce Coinbase For WooCommerce)
- [CVE-2026-25390](https://cve.now/CVE-2026-25390.md): WordPress New User Approve plugin \<= 3.2.3 - Broken Access Control vulnerability (CVSS 6.5, Saad Iqbal New User Approve)
- [CVE-2026-25383](https://cve.now/CVE-2026-25383.md): WordPress KiviCare plugin \<= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Iqonic Design KiviCare)
- [CVE-2026-25382](https://cve.now/CVE-2026-25382.md): WordPress IdealAuto theme \< 3.8.6 - Local File Inclusion vulnerability (CVSS 8.1, jwsthemes IdealAuto)
- [CVE-2026-25381](https://cve.now/CVE-2026-25381.md): WordPress LoveDate theme \< 3.8.6 - Local File Inclusion vulnerability (CVSS 8.1, jwsthemes LoveDate)
- [CVE-2026-25380](https://cve.now/CVE-2026-25380.md): WordPress Feedy theme \< 2.1.5 - Local File Inclusion vulnerability (CVSS 8.1, jwsthemes Feedy)
- [CVE-2026-25379](https://cve.now/CVE-2026-25379.md): WordPress StreamVid theme \< 6.8.6 - Local File Inclusion vulnerability (CVSS 8.1, jwsthemes StreamVid)
- [CVE-2026-25377](https://cve.now/CVE-2026-25377.md): WordPress Addon Jobsearch Chat plugin \<= 3.0 - SQL Injection vulnerability (CVSS 9.3, eyecix Addon Jobsearch Chat)
- [CVE-2026-25376](https://cve.now/CVE-2026-25376.md): WordPress Addon Jobsearch Chat plugin \<= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, eyecix Addon Jobsearch Chat)
- [CVE-2026-25373](https://cve.now/CVE-2026-25373.md): WordPress Vayvo - Media Streaming & Membership WordPress Theme theme \< 6.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ProgressionStudios Vayvo)
- [CVE-2026-25371](https://cve.now/CVE-2026-25371.md): WordPress Lumise Product Designer plugin \< 2.0.9 - SQL Injection vulnerability (CVSS 9.3, King-Theme Lumise Product Designer)
- [CVE-2026-25366](https://cve.now/CVE-2026-25366.md): WordPress Woody ad snippets plugin \<= 2.7.1 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, Themeisle Woody ad snippets)
- [CVE-2026-25365](https://cve.now/CVE-2026-25365.md): WordPress Kargo Takip plugin \< 0.2.4 - Broken Access Control vulnerability (CVSS 6.5, Özgür KARALAR Kargo Takip)
- [CVE-2026-25361](https://cve.now/CVE-2026-25361.md): WordPress WpEvently plugin \<= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, magepeopleteam WpEvently)
- [CVE-2026-25360](https://cve.now/CVE-2026-25360.md): WordPress Vex theme \< 1.2.9 - PHP Object Injection vulnerability (CVSS 8.8, rascals Vex)
- [CVE-2026-25359](https://cve.now/CVE-2026-25359.md): WordPress Pendulum theme \< 3.1.5 - PHP Object Injection vulnerability (CVSS 8.8, rascals Pendulum)
- [CVE-2026-25358](https://cve.now/CVE-2026-25358.md): WordPress Meloo theme \< 2.8.2 - PHP Object Injection vulnerability (CVSS 8.8, rascals Meloo)
- [CVE-2026-25357](https://cve.now/CVE-2026-25357.md): WordPress Ultimate Membership Pro plugin \<= 13.7 - Account Takeover vulnerability (CVSS 8.1, azzaroco Ultimate Membership Pro)
- [CVE-2026-25356](https://cve.now/CVE-2026-25356.md): WordPress Yobazar theme \< 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Yobazar)
- [CVE-2026-25355](https://cve.now/CVE-2026-25355.md): WordPress Sanzo theme \< 2.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, skygroup Sanzo)
- [CVE-2026-25354](https://cve.now/CVE-2026-25354.md): WordPress Reebox theme \< 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Reebox)
- [CVE-2026-25353](https://cve.now/CVE-2026-25353.md): WordPress Nooni theme \< 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Nooni)
- [CVE-2026-25352](https://cve.now/CVE-2026-25352.md): WordPress MyDecor theme \< 1.5.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup MyDecor)
- [CVE-2026-25351](https://cve.now/CVE-2026-25351.md): WordPress MyMedi theme \< 1.7.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup MyMedi)
- [CVE-2026-25350](https://cve.now/CVE-2026-25350.md): WordPress Miti theme \< 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Miti)
- [CVE-2026-25349](https://cve.now/CVE-2026-25349.md): WordPress Loobek theme \< 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Loobek)
- [CVE-2026-25347](https://cve.now/CVE-2026-25347.md): WordPress WP REST Cache plugin \<= 2026.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Acato WP REST Cache)
- [CVE-2026-25346](https://cve.now/CVE-2026-25346.md): WordPress FAQ Builder AYS plugin \<= 1.8.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ays Pro FAQ Builder AYS)
- [CVE-2026-25345](https://cve.now/CVE-2026-25345.md): WordPress SimpLy Gallery plugin \<= 3.3.2 - Arbitrary Code Execution vulnerability (CVSS 9.9, GalleryCreator SimpLy Gallery)
- [CVE-2026-25344](https://cve.now/CVE-2026-25344.md): WordPress Review Schema plugin \<= 2.2.6 - Sensitive Data Exposure vulnerability (CVSS 6.5, RadiusTheme Review Schema)
- [CVE-2026-25342](https://cve.now/CVE-2026-25342.md): WordPress Boutique theme \< 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, kutethemes Boutique)
- [CVE-2026-25341](https://cve.now/CVE-2026-25341.md): WordPress RSFirewall! plugin \<= 1.1.45 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RSJoomla! RSFirewall!)
- [CVE-2026-25340](https://cve.now/CVE-2026-25340.md): WordPress Jobmonster theme \< 4.8.4 - SQL Injection vulnerability (CVSS 9.3, NooTheme Jobmonster)
- [CVE-2026-25339](https://cve.now/CVE-2026-25339.md): WordPress Contact Form by WPForms plugin \<= 1.9.8.7 - Sensitive Data Exposure vulnerability (CVSS 6.5, Syed Balkhi Contact Form by WPForms)
- [CVE-2026-25334](https://cve.now/CVE-2026-25334.md): WordPress Salon Booking System Pro plugin \< 10.30.12 - Account Takeover vulnerability (CVSS 8.1, wordpresschef Salon Booking System Pro)
- [CVE-2026-25328](https://cve.now/CVE-2026-25328.md): WordPress Product File Upload for WooCommerce plugin \<= 2.2.4 - Arbitrary File Deletion vulnerability (CVSS 6.8, add-ons.org Product File Upload for WooCommerce)
- [CVE-2026-25327](https://cve.now/CVE-2026-25327.md): WordPress Five Star Restaurant Reservations plugin \<= 2.7.9 - Broken Access Control vulnerability (CVSS 6.5, Rustaurius Five Star Restaurant Reservations)
- [CVE-2026-25317](https://cve.now/CVE-2026-25317.md): WordPress Print Invoice & Delivery Notes for WooCommerce plugin \<= 5.9.0 - Broken Access Control vulnerability (CVSS 7.5, tychesoftwares Print Invoice & Delivery Notes for WooCommer…)
- [CVE-2026-25309](https://cve.now/CVE-2026-25309.md): WordPress PublishPress Authors plugin \<= 4.10.1 - Broken Access Control vulnerability (CVSS 7.5, PublishPress Authors)
- [CVE-2026-25306](https://cve.now/CVE-2026-25306.md): WordPress XStore Core plugin \<= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, 8theme XStore Core)
- [CVE-2026-25304](https://cve.now/CVE-2026-25304.md): WordPress Jaroti theme \< 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, skygroup Jaroti)
- [CVE-2026-25035](https://cve.now/CVE-2026-25035.md): WordPress Contest Gallery plugin \<= 28.1.2.2 - Account Takeover vulnerability (CVSS 9.8, Wasiliy Strecker / ContestGallery developer Contest Gallery)
- [CVE-2026-25034](https://cve.now/CVE-2026-25034.md): WordPress KiviCare plugin \<= 3.6.16 - Broken Access Control vulnerability (CVSS 6.5, Iqonic Design KiviCare)
- [CVE-2026-25033](https://cve.now/CVE-2026-25033.md): WordPress Motta Addons plugin \< 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, uixthemes Motta Addons)
- [CVE-2026-25032](https://cve.now/CVE-2026-25032.md): WordPress Ricky theme \< 2.31 - PHP Object Injection vulnerability (CVSS 9.8, park\_of\_ideas Ricky)
- [CVE-2026-25031](https://cve.now/CVE-2026-25031.md): WordPress Tasty Daily theme \< 1.27 - PHP Object Injection vulnerability (CVSS 9.8, park\_of\_ideas Tasty Daily)
- [CVE-2026-25030](https://cve.now/CVE-2026-25030.md): WordPress Goldish theme \< 3.47 - PHP Object Injection vulnerability (CVSS 9.8, park\_of\_ideas Goldish)
- [CVE-2026-25029](https://cve.now/CVE-2026-25029.md): WordPress KIDZ theme \<= 5.24 - PHP Object Injection vulnerability (CVSS 9.8, park\_of\_ideas KIDZ)
- [CVE-2026-25026](https://cve.now/CVE-2026-25026.md): WordPress Team plugin \<= 5.0.11 - Broken Access Control vulnerability (CVSS 7.5, RadiusTheme Team)
- [CVE-2026-25025](https://cve.now/CVE-2026-25025.md): WordPress VikRestaurants plugin \<= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, e4jvikwp VikRestaurants)
- [CVE-2026-25018](https://cve.now/CVE-2026-25018.md): WordPress NaturaLife Extensions plugin \<= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, stmcan NaturaLife Extensions)
- [CVE-2026-25017](https://cve.now/CVE-2026-25017.md): WordPress NaturaLife Extensions plugin \<= 2.1 - Local File Inclusion vulnerability (CVSS 8.1, stmcan NaturaLife Extensions)
- [CVE-2026-25013](https://cve.now/CVE-2026-25013.md): WordPress Phox Hosting plugin \<= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WHMCSdes Phox Hosting)
- [CVE-2026-25009](https://cve.now/CVE-2026-25009.md): WordPress Education Zone theme \<= 1.3.8 - Broken Access Control vulnerability (CVSS 6.5, raratheme Education Zone)
- [CVE-2026-25007](https://cve.now/CVE-2026-25007.md): WordPress ElementInvader Addons for Elementor plugin \<= 1.4.2 - SQL Injection vulnerability (CVSS 8.5, Element Invader ElementInvader Addons for Elementor)
- [CVE-2026-25002](https://cve.now/CVE-2026-25002.md): WordPress LearnPress – Sepay Payment plugin \<= 4.0.0 - Broken Authentication vulnerability (CVSS 7.5, ThimPress LearnPress – Sepay Payment)
- [CVE-2026-25001](https://cve.now/CVE-2026-25001.md): WordPress Post Snippets plugin \<= 4.0.12 - Remote Code Execution (RCE) vulnerability (CVSS 8.5, Saad Iqbal Post Snippets)
- [CVE-2026-24993](https://cve.now/CVE-2026-24993.md): WordPress Advanced WooCommerce Product Sales Reporting plugin \<= 4.1.3 - SQL Injection vulnerability (CVSS 9.3, WPFactory Advanced WooCommerce Product Sales Reporting)
- [CVE-2026-24989](https://cve.now/CVE-2026-24989.md): WordPress SUMO Affiliates Pro plugin \< 11.4.0 - PHP Object Injection vulnerability (CVSS 9.8, FantasticPlugins SUMO Affiliates Pro)
- [CVE-2026-24987](https://cve.now/CVE-2026-24987.md): WordPress WP System Log plugin \<= 1.2.7 - Broken Access Control vulnerability (CVSS 6.5, activity-log.com WP System Log)
- [CVE-2026-24983](https://cve.now/CVE-2026-24983.md): WordPress UpSolution Core plugin \<= 8.41 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, UpSolution Core)
- [CVE-2026-24981](https://cve.now/CVE-2026-24981.md): WordPress Visionary Core plugin \<= 1.4.9 - PHP Object Injection vulnerability (CVSS 8.8, NooTheme Visionary Core)
- [CVE-2026-24980](https://cve.now/CVE-2026-24980.md): WordPress Visionary Core plugin \<= 1.4.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NooTheme Visionary Core)
- [CVE-2026-24979](https://cve.now/CVE-2026-24979.md): WordPress Jobica Core plugin \<= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NooTheme Jobica Core)
- [CVE-2026-24978](https://cve.now/CVE-2026-24978.md): WordPress Jobica Core plugin \<= 1.4.1 - PHP Object Injection vulnerability (CVSS 8.8, NooTheme Jobica Core)
- [CVE-2026-24977](https://cve.now/CVE-2026-24977.md): WordPress Organici Library plugin \<= 2.1.2 - SQL Injection vulnerability (CVSS 8.5, NooTheme Organici Library)
- [CVE-2026-24976](https://cve.now/CVE-2026-24976.md): WordPress Organici Library plugin \<= 2.1.2 - PHP Object Injection vulnerability (CVSS 8.8, NooTheme Organici Library)
- [CVE-2026-24975](https://cve.now/CVE-2026-24975.md): WordPress Organici Library plugin \<= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NooTheme Organici Library)
- [CVE-2026-24974](https://cve.now/CVE-2026-24974.md): WordPress CitiLights theme \<= 3.7.1 - PHP Object Injection vulnerability (CVSS 8.8, NooTheme CitiLights)
- [CVE-2026-24973](https://cve.now/CVE-2026-24973.md): WordPress CitiLights theme \<= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NooTheme CitiLights)
- [CVE-2026-24972](https://cve.now/CVE-2026-24972.md): WordPress Elated Listing plugin \<= 1.4 - Broken Access Control vulnerability (CVSS 6.5, Elated-Themes Elated Listing)
- [CVE-2026-24971](https://cve.now/CVE-2026-24971.md): WordPress Search & Go theme \<= 2.8 - Privilege Escalation vulnerability (CVSS 9.8, Elated-Themes Search & Go)
- [CVE-2026-24970](https://cve.now/CVE-2026-24970.md): WordPress Energox theme \<= 1.2 - Arbitrary File Deletion vulnerability (CVSS 7.7, designingmedia Energox)
- [CVE-2026-24969](https://cve.now/CVE-2026-24969.md): WordPress Instant VA theme \<= 1.0.1 - Arbitrary File Deletion vulnerability (CVSS 7.7, designingmedia Instant VA)
- [CVE-2026-24968](https://cve.now/CVE-2026-24968.md): WordPress Xagio SEO plugin \<= 7.1.0.30 - Privilege Escalation vulnerability (CVSS 9.8, Xagio SEO)
- [CVE-2026-24964](https://cve.now/CVE-2026-24964.md): WordPress Contest Gallery plugin \<= 28.1.2.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4, Wasiliy Strecker / ContestGallery developer Contest Gallery)
- [CVE-2026-24391](https://cve.now/CVE-2026-24391.md): WordPress Car Dealer theme \<= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeMakers Car Dealer)
- [CVE-2026-24382](https://cve.now/CVE-2026-24382.md): WordPress News Magazine X theme \<= 1.2.50 - Broken Access Control vulnerability (CVSS 7.5, wproyal News Magazine X)
- [CVE-2026-24378](https://cve.now/CVE-2026-24378.md): WordPress EventPrime plugin \<= 4.2.8.0 - PHP Object Injection vulnerability (CVSS 9.8, Metagauss EventPrime)
- [CVE-2026-24376](https://cve.now/CVE-2026-24376.md): WordPress WPVulnerability plugin \<= 4.2.1 - Broken Access Control vulnerability (CVSS 6.5, Javier Casares WPVulnerability)
- [CVE-2026-24373](https://cve.now/CVE-2026-24373.md): WordPress RegistrationMagic plugin \<= 6.0.7.1 - Account Takeover vulnerability (CVSS 8.1, Metagauss RegistrationMagic)
- [CVE-2026-24372](https://cve.now/CVE-2026-24372.md): WordPress Subscriptions for WooCommerce plugin \<= 1.8.10 - Bypass Vulnerability vulnerability (CVSS 7.5, WP Swings Subscriptions for WooCommerce)
- [CVE-2026-24370](https://cve.now/CVE-2026-24370.md): WordPress The Grid plugin \<= 2.8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeOne The Grid)
- [CVE-2026-24369](https://cve.now/CVE-2026-24369.md): WordPress The Grid plugin \<= 2.8.0 - Broken Access Control vulnerability (CVSS 7.1, ThemeOne The Grid)
- [CVE-2026-24364](https://cve.now/CVE-2026-24364.md): WordPress WP User Frontend plugin \<= 4.2.5 - Broken Access Control vulnerability (CVSS 6.5, weDevs WP User Frontend)
- [CVE-2026-24363](https://cve.now/CVE-2026-24363.md): WordPress WP Cost Estimation & Payment Forms Builder plugin \< 10.3.0 - Broken Access Control vulnerability (CVSS 7.5, loopus WP Cost Estimation & Payment Forms Builder)
- [CVE-2026-24362](https://cve.now/CVE-2026-24362.md): WordPress Ultimate Post Kit plugin \<= 4.0.21 - Broken Access Control vulnerability (CVSS 6.4, bdthemes Ultimate Post Kit)
- [CVE-2026-24359](https://cve.now/CVE-2026-24359.md): WordPress Dokan plugin \<= 4.2.4 - Broken Authentication vulnerability (CVSS 8.8, Dokan)
- [CVE-2026-23979](https://cve.now/CVE-2026-23979.md): WordPress Gyan Elements plugin \<= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Softwebmedia Gyan Elements)
- [CVE-2026-23977](https://cve.now/CVE-2026-23977.md): WordPress Helpdesk Support Ticket System for WooCommerce plugin \<= 2.1.2 - Broken Access Control vulnerability (CVSS 7.5, WPFactory Helpdesk Support Ticket System for WooCommerce)
- [CVE-2026-23973](https://cve.now/CVE-2026-23973.md): WordPress Golo theme \< 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, uxper Golo)
- [CVE-2026-23972](https://cve.now/CVE-2026-23972.md): WordPress Booking and Rental Manager plugin \<= 2.6.0 - Broken Access Control vulnerability (CVSS 6.5, magepeopleteam Booking and Rental Manager)
- [CVE-2026-23971](https://cve.now/CVE-2026-23971.md): WordPress WoodMart theme \<= 8.3.8 - PHP Object Injection vulnerability (CVSS 8.1, xtemos WoodMart)
- [CVE-2026-23807](https://cve.now/CVE-2026-23807.md): WordPress WP Telegram Widget and Join Link plugin \<= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Socio WP Telegram Widget and Join Link)
- [CVE-2026-23806](https://cve.now/CVE-2026-23806.md): WordPress Jobs for WordPress plugin \<= 2.8 - Broken Access Control vulnerability (CVSS 7.5, BlueGlass Interactive AG Jobs for WordPress)
- [CVE-2026-22524](https://cve.now/CVE-2026-22524.md): WordPress Legacy Admin plugin \<= 9.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, themepassion Legacy Admin)
- [CVE-2026-22523](https://cve.now/CVE-2026-22523.md): WordPress Ultra WordPress Admin plugin \<= 11.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, themepassion Ultra WordPress Admin)
- [CVE-2026-22520](https://cve.now/CVE-2026-22520.md): WordPress Handmade Framework plugin \<= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, G5Theme Handmade Framework)
- [CVE-2026-22516](https://cve.now/CVE-2026-22516.md): WordPress Wizor's theme \<= 2.12 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Wizor's)
- [CVE-2026-22515](https://cve.now/CVE-2026-22515.md): WordPress VegaDays theme \<= 1.2.0 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes VegaDays)
- [CVE-2026-22514](https://cve.now/CVE-2026-22514.md): WordPress Unica theme \<= 1.4.1 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Unica)
- [CVE-2026-22513](https://cve.now/CVE-2026-22513.md): WordPress Triompher theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Triompher)
- [CVE-2026-22512](https://cve.now/CVE-2026-22512.md): WordPress Roisin theme \<= 1.2.1 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Roisin)
- [CVE-2026-22511](https://cve.now/CVE-2026-22511.md): WordPress NeoBeat theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes NeoBeat)
- [CVE-2026-22510](https://cve.now/CVE-2026-22510.md): WordPress Melody theme \<= 1.6.3 - PHP Object Injection vulnerability (CVSS 8.1, AncoraThemes Melody)
- [CVE-2026-22509](https://cve.now/CVE-2026-22509.md): WordPress Gioia theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Gioia)
- [CVE-2026-22508](https://cve.now/CVE-2026-22508.md): WordPress Dentalux theme \<= 3.3 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Dentalux)
- [CVE-2026-22507](https://cve.now/CVE-2026-22507.md): WordPress Beelove theme \<= 1.2.6 - PHP Object Injection vulnerability (CVSS 9.8, AncoraThemes Beelove)
- [CVE-2026-22506](https://cve.now/CVE-2026-22506.md): WordPress Amoli theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Amoli)
- [CVE-2026-22505](https://cve.now/CVE-2026-22505.md): WordPress Morning Records theme \<= 1.2 - PHP Object Injection vulnerability (CVSS 8.1, AncoraThemes Morning Records)
- [CVE-2026-22504](https://cve.now/CVE-2026-22504.md): WordPress ProLingua theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX ProLingua)
- [CVE-2026-22503](https://cve.now/CVE-2026-22503.md): WordPress Nelson theme \<= 1.2.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Nelson)
- [CVE-2026-22502](https://cve.now/CVE-2026-22502.md): WordPress Mr. Cobbler theme \<= 1.1.9 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Mr. Cobbler)
- [CVE-2026-22500](https://cve.now/CVE-2026-22500.md): WordPress m2 | Construction and Tools Store theme \<= 1.1.2 - PHP Object Injection vulnerability (CVSS 9.8, axiomthemes m2 | Construction and Tools Store)
- [CVE-2026-22499](https://cve.now/CVE-2026-22499.md): WordPress Lella theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Lella)
- [CVE-2026-22498](https://cve.now/CVE-2026-22498.md): WordPress Laurent theme \<= 3.1 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Laurent)
- [CVE-2026-22496](https://cve.now/CVE-2026-22496.md): WordPress Hypnotherapy theme \<= 1.2.10 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Hypnotherapy)
- [CVE-2026-22495](https://cve.now/CVE-2026-22495.md): WordPress Greenville theme \<= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Greenville)
- [CVE-2026-22494](https://cve.now/CVE-2026-22494.md): WordPress Good Homes theme \<= 1.3.13 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Good Homes)
- [CVE-2026-22493](https://cve.now/CVE-2026-22493.md): WordPress Gaspard theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Gaspard)
- [CVE-2026-22491](https://cve.now/CVE-2026-22491.md): WordPress My auctions allegro plugin \<= 3.6.35 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wphocus My auctions allegro)
- [CVE-2026-22485](https://cve.now/CVE-2026-22485.md): WordPress My Album Gallery plugin \<= 1.0.4 - Arbitrary File Deletion vulnerability (CVSS 6.5, Ruhul Amin My Album Gallery)
- [CVE-2026-22484](https://cve.now/CVE-2026-22484.md): WordPress Lisfinity Core plugin \<= 1.5.0 - SQL Injection vulnerability (CVSS 9.3, pebas Lisfinity Core)
- [CVE-2026-22480](https://cve.now/CVE-2026-22480.md): WordPress Product Feed for WooCommerce plugin \<= 2.3.3 - PHP Object Injection vulnerability (CVSS 7.2, WebToffee Product Feed for WooCommerce)
- [CVE-2026-22448](https://cve.now/CVE-2026-22448.md): WordPress PitchPrint plugin \<= 11.1.2 - Arbitrary File Deletion vulnerability (CVSS 7.5, flexcubed PitchPrint)
- [CVE-2025-69358](https://cve.now/CVE-2025-69358.md): WordPress EventPrime plugin \<= 4.2.6.0 - Broken Access Control vulnerability (CVSS 7.5, Metagauss EventPrime)
- [CVE-2025-69347](https://cve.now/CVE-2025-69347.md): WordPress WPSubscription plugin \<= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability (CVSS 8.6, Convers Lab WPSubscription)
- [CVE-2025-69096](https://cve.now/CVE-2025-69096.md): WordPress Zorka theme \<= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, G5Theme Zorka)
- [CVE-2026-20108](https://cve.now/CVE-2026-20108.md): A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to cond (CVSS 5.4, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-20112](https://cve.now/CVE-2026-20112.md): A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an auth (CVSS 4.8, Cisco IOS XE Software)
- [CVE-2026-20113](https://cve.now/CVE-2026-20113.md): A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unau (CVSS 5.3, Cisco IOS XE Software)
- [CVE-2026-20114](https://cve.now/CVE-2026-20114.md): A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to e (CVSS 5.4, Cisco IOS XE Software)
- [CVE-2026-20115](https://cve.now/CVE-2026-20115.md): A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device informa (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2026-20083](https://cve.now/CVE-2026-20083.md): A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2026-20110](https://cve.now/CVE-2026-20110.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) conditio (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2026-20104](https://cve.now/CVE-2026-20104.md): A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series S (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2026-20004](https://cve.now/CVE-2026-20004.md): A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memor (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2024-58341](https://cve.now/CVE-2024-58341.md): OpenCart Core 4.0.2.3 SQL Injection via search Parameter (CVSS 8.8, OpenCart Core)
- [CVE-2026-20125](https://cve.now/CVE-2026-20125.md): A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote a (CVSS 7.7, Cisco IOS)
- [CVE-2026-20012](https://cve.now/CVE-2026-20012.md): A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall A (CVSS 8.6, Cisco IOS · Cisco Secure Firewall Adaptive Security Appl… +1)
- [CVE-2026-20086](https://cve.now/CVE-2026-20086.md): A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20084](https://cve.now/CVE-2026-20084.md): A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-3218](https://cve.now/CVE-2026-3218.md): Responsive Favicons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-019 (CVSS 4.8, Drupal Responsive Favicons · drupal/responsive\_favicons)
- [CVE-2026-3217](https://cve.now/CVE-2026-3217.md): SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018 (CVSS 6.1, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-3216](https://cve.now/CVE-2026-3216.md): Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017 (CVSS 5.0, Drupal Canvas · drupal/canvas)
- [CVE-2026-3215](https://cve.now/CVE-2026-3215.md): Islandora - Moderately critical - Arbitrary file upload, Cross-site scripting - SA-CONTRIB-2026-016 (CVSS 5.4, Drupal Islandora · drupal/islandora)
- [CVE-2026-3214](https://cve.now/CVE-2026-3214.md): CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015 (CVSS 6.5, Drupal CAPTCHA · drupal/captcha)
- [CVE-2026-3213](https://cve.now/CVE-2026-3213.md): Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014 (CVSS 4.7, Drupal Anti-Spam by CleanTalk · drupal/cleantalk)
- [CVE-2026-24750](https://cve.now/CVE-2026-24750.md): Kiteworks Secure Data Forms vulnerable to Cross-site Scripting (CVSS 7.6, kiteworks Secure Data Forms)
- [CVE-2026-3212](https://cve.now/CVE-2026-3212.md): Tagify - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-013 (CVSS 5.4, Drupal Tagify · drupal/tagify)
- [CVE-2026-3211](https://cve.now/CVE-2026-3211.md): Theme Negotiation by Rules - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-012 (CVSS 4.3, Drupal Theme Negotiation by Rules · drupal/theme\_rule)
- [CVE-2026-3210](https://cve.now/CVE-2026-3210.md): Material Icons - Moderately critical - Access bypass - SA-CONTRIB-2026-011 (CVSS 5.3, Drupal Material Icons · drupal/material\_icons)
- [CVE-2026-2349](https://cve.now/CVE-2026-2349.md): UI Icons - Critical - Cross-site Scripting - SA-CONTRIB-2026-010 (CVSS 6.1, Drupal UI Icons · drupal/ui\_icons)
- [CVE-2026-2348](https://cve.now/CVE-2026-2348.md): Quick Edit - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-009 (CVSS 5.4, Drupal Quick Edit · drupal/quickedit)
- [CVE-2026-1917](https://cve.now/CVE-2026-1917.md): Login Disable - Less critical - Access bypass - SA-CONTRIB-2026-008 (CVSS 4.3, Drupal Login Disable · drupal/login\_disable)
- [CVE-2026-4363](https://cve.now/CVE-2026-4363.md): Incorrect Authorization in GitLab (CVSS 3.7, GitLab)
- [CVE-2026-33268](https://cve.now/CVE-2026-33268.md): Nanoleaf Lines unauthenticated firmware file store (CVSS 6.9, Nanoleaf Lines)
- [CVE-2026-23514](https://cve.now/CVE-2026-23514.md): Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management (CVSS 8.8, kiteworks core)
- [CVE-2026-3591](https://cve.now/CVE-2026-3591.md): A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass (CVSS 5.4, ISC BIND)
- [CVE-2026-3119](https://cve.now/CVE-2026-3119.md): Authenticated query containing a TKEY record may cause named to terminate unexpectedly (CVSS 6.5, ISC BIND)
- [CVE-2026-4815](https://cve.now/CVE-2026-4815.md): SQL Injection vulnerability in Support Board (CVSS 8.7, Schiocco Support Board)
- [CVE-2026-4816](https://cve.now/CVE-2026-4816.md): Reflected Cross Site Scripting (XSS) vulnerability in Support Board (CVSS 4.8, Schiocco Support Board)
- [CVE-2026-3104](https://cve.now/CVE-2026-3104.md): Memory leak in code preparing DNSSEC proofs of non-existence (CVSS 7.5, ISC BIND)
- [CVE-2026-1519](https://cve.now/CVE-2026-1519.md): Excessive NSEC3 iterations cause high CPU load during insecure delegation validation (CVSS 7.5, ISC BIND)
- [CVE-2025-40842](https://cve.now/CVE-2025-40842.md): Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability (CVSS 8.5, Ericsson Indoor Connect)
- [CVE-2025-40841](https://cve.now/CVE-2025-40841.md): Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability (CVSS 5.1, Ericsson Indoor Connect)
- [CVE-2026-28529](https://cve.now/CVE-2026-28529.md): cryptodev-linux \<= 1.14 get\_userbuf Use After Free LPE (CVSS 8.5, cryptodev-linux)
- [CVE-2025-27260](https://cve.now/CVE-2025-27260.md): Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability (CVSS 7.2, Ericsson Indoor Connect)
- [CVE-2026-4761](https://cve.now/CVE-2026-4761.md): Unnecessary permissions on private keys of certificates installed by Network and Security Wizard (CVSS 3.3, CODRA Panorama Suite)
- [CVE-2026-4760](https://cve.now/CVE-2026-4760.md): Potential unauthorized access to files on the Web HMI server host (CVSS 7.7, CODRA Panorama Suite)
- [CVE-2026-23395](https://cve.now/CVE-2026-23395.md): Bluetooth: L2CAP: Fix accepting multiple L2CAP\_ECRED\_CONN\_REQ (CVSS 8.8, Linux)
- [CVE-2026-23394](https://cve.now/CVE-2026-23394.md): af\_unix: Give up GC if MSG\_PEEK intervened. (no CVSS, Linux)
- [CVE-2026-23393](https://cve.now/CVE-2026-23393.md): bridge: cfm: Fix race condition in peer\_mep deletion (CVSS 7.8, Linux)
- [CVE-2026-23392](https://cve.now/CVE-2026-23392.md): netfilter: nf\_tables: release flowtable after rcu grace period on error (CVSS 7.8, Linux)
- [CVE-2026-23391](https://cve.now/CVE-2026-23391.md): netfilter: xt\_CT: drop pending enqueued packets on template removal (CVSS 7.8, Linux)
- [CVE-2026-23390](https://cve.now/CVE-2026-23390.md): tracing/dma: Cap dma\_map\_sg tracepoint arrays to prevent buffer overflow (no CVSS, Linux)
- [CVE-2026-23389](https://cve.now/CVE-2026-23389.md): ice: Fix memory leak in ice\_set\_ringparam() (no CVSS, Linux)
- [CVE-2026-23388](https://cve.now/CVE-2026-23388.md): Squashfs: check metadata block offset is within range (no CVSS, Linux)
- [CVE-2026-23387](https://cve.now/CVE-2026-23387.md): pinctrl: cirrus: cs42l43: Fix double-put in cs42l43\_pin\_probe() (no CVSS, Linux)
- [CVE-2026-23386](https://cve.now/CVE-2026-23386.md): gve: fix incorrect buffer cleanup in gve\_tx\_clean\_pending\_packets for QPL (no CVSS, Linux)
- [CVE-2026-23385](https://cve.now/CVE-2026-23385.md): netfilter: nf\_tables: clone set on flush only (no CVSS, Linux)
- [CVE-2026-23384](https://cve.now/CVE-2026-23384.md): RDMA/ionic: Fix kernel stack leak in ionic\_create\_cq() (no CVSS, Linux)
- [CVE-2026-23383](https://cve.now/CVE-2026-23383.md): bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (CVSS 7.8, Linux)
- [CVE-2026-23382](https://cve.now/CVE-2026-23382.md): HID: Add HID\_CLAIMED\_INPUT guards in raw\_event callbacks missing them (no CVSS, Linux)
- [CVE-2026-23381](https://cve.now/CVE-2026-23381.md): net: bridge: fix nd\_tbl NULL dereference when IPv6 is disabled (no CVSS, Linux)
- [CVE-2026-23380](https://cve.now/CVE-2026-23380.md): tracing: Fix WARN\_ON in tracing\_buffers\_mmap\_close (no CVSS, Linux)
- [CVE-2026-23379](https://cve.now/CVE-2026-23379.md): net/sched: ets: fix divide by zero in the offload path (no CVSS, Linux)
- [CVE-2026-23378](https://cve.now/CVE-2026-23378.md): net/sched: act\_ife: Fix metalist update behavior (CVSS 7.8, Linux)
- [CVE-2026-23377](https://cve.now/CVE-2026-23377.md): ice: change XDP RxQ frag\_size from DMA write length to xdp.frame\_sz (no CVSS, Linux)
- [CVE-2026-23376](https://cve.now/CVE-2026-23376.md): nvmet-fcloop: Check remoteport port\_state before calling done callback (no CVSS, Linux)
- [CVE-2026-23375](https://cve.now/CVE-2026-23375.md): mm: thp: deny THP for files on anonymous inodes (no CVSS, Linux)
- [CVE-2026-23374](https://cve.now/CVE-2026-23374.md): blktrace: fix \_\_this\_cpu\_read/write in preemptible context (no CVSS, Linux)
- [CVE-2026-23373](https://cve.now/CVE-2026-23373.md): wifi: rsi: Don't default to -EOPNOTSUPP in rsi\_mac80211\_config (no CVSS, Linux)
- [CVE-2026-23372](https://cve.now/CVE-2026-23372.md): nfc: rawsock: cancel tx\_work before socket teardown (CVSS 7.8, Linux)
- [CVE-2026-23371](https://cve.now/CVE-2026-23371.md): sched/deadline: Fix missing ENQUEUE\_REPLENISH during PI de-boosting (no CVSS, Linux)
- [CVE-2026-23370](https://cve.now/CVE-2026-23370.md): platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (no CVSS, Linux)
- [CVE-2026-23369](https://cve.now/CVE-2026-23369.md): i2c: i801: Revert "i2c: i801: replace acpi\_lock with I2C bus lock" (no CVSS, Linux)
- [CVE-2026-23368](https://cve.now/CVE-2026-23368.md): net: phy: register phy led\_triggers during probe to avoid AB-BA deadlock (no CVSS, Linux)
- [CVE-2026-23367](https://cve.now/CVE-2026-23367.md): wifi: radiotap: reject radiotap with unknown bits (no CVSS, Linux)
- [CVE-2026-23366](https://cve.now/CVE-2026-23366.md): drm/client: Do not destroy NULL modes (no CVSS, Linux)
- [CVE-2026-23365](https://cve.now/CVE-2026-23365.md): net: usb: kalmia: validate USB endpoints (no CVSS, Linux)
- [CVE-2026-23364](https://cve.now/CVE-2026-23364.md): ksmbd: Compare MACs in constant time (CVSS 7.4, Linux)
- [CVE-2026-23363](https://cve.now/CVE-2026-23363.md): wifi: mt76: mt7925: Fix possible oob access in mt7925\_mac\_write\_txwi\_80211() (no CVSS, Linux)
- [CVE-2026-23362](https://cve.now/CVE-2026-23362.md): can: bcm: fix locking for bcm\_op runtime updates (no CVSS, Linux)
- [CVE-2026-23361](https://cve.now/CVE-2026-23361.md): PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (no CVSS, Linux)
- [CVE-2026-23360](https://cve.now/CVE-2026-23360.md): nvme: fix admin queue leak on controller reset (no CVSS, Linux)
- [CVE-2026-23359](https://cve.now/CVE-2026-23359.md): bpf: Fix stack-out-of-bounds write in devmap (no CVSS, Linux)
- [CVE-2026-23358](https://cve.now/CVE-2026-23358.md): drm/amdgpu: Fix error handling in slot reset (no CVSS, Linux)
- [CVE-2026-23357](https://cve.now/CVE-2026-23357.md): can: mcp251x: fix deadlock in error path of mcp251x\_open (no CVSS, Linux)
- [CVE-2026-23356](https://cve.now/CVE-2026-23356.md): drbd: fix "LOGIC BUG" in drbd\_al\_begin\_io\_nonblock() (no CVSS, Linux)
- [CVE-2026-23355](https://cve.now/CVE-2026-23355.md): ata: libata: cancel pending work after clearing deferred\_qc (no CVSS, Linux)
- [CVE-2026-23354](https://cve.now/CVE-2026-23354.md): x86/fred: Correct speculative safety in fred\_extint() (no CVSS, Linux)
- [CVE-2026-23353](https://cve.now/CVE-2026-23353.md): ice: fix crash in ethtool offline loopback test (no CVSS, Linux)
- [CVE-2026-23352](https://cve.now/CVE-2026-23352.md): x86/efi: defer freeing of boot services memory (no CVSS, Linux)
- [CVE-2026-23351](https://cve.now/CVE-2026-23351.md): netfilter: nft\_set\_pipapo: split gc into unlink and reclaim phase (CVSS 7.8, Linux)
- [CVE-2026-23350](https://cve.now/CVE-2026-23350.md): drm/xe/queue: Call fini on exec queue creation fail (CVSS 7.8, Linux)
- [CVE-2026-23349](https://cve.now/CVE-2026-23349.md): HID: pidff: Fix condition effect bit clearing (no CVSS, Linux)
- [CVE-2026-23348](https://cve.now/CVE-2026-23348.md): cxl: Fix race of nvdimm\_bus object when creating nvdimm objects (no CVSS, Linux)
- [CVE-2026-23347](https://cve.now/CVE-2026-23347.md): can: usb: f81604: correctly anchor the urb in the read bulk callback (no CVSS, Linux)
- [CVE-2026-23346](https://cve.now/CVE-2026-23346.md): arm64: io: Extract user memory type in ioremap\_prot() (no CVSS, Linux)
- [CVE-2026-23345](https://cve.now/CVE-2026-23345.md): arm64: gcs: Do not set PTE\_SHARED on GCS mappings if FEAT\_LPA2 is enabled (no CVSS, Linux)
- [CVE-2026-23344](https://cve.now/CVE-2026-23344.md): crypto: ccp - Fix use-after-free on error path (no CVSS, Linux)
- [CVE-2026-23343](https://cve.now/CVE-2026-23343.md): xdp: produce a warning when calculated tailroom is negative (no CVSS, Linux)
- [CVE-2026-23342](https://cve.now/CVE-2026-23342.md): bpf: Fix race in cpumap on PREEMPT\_RT (no CVSS, Linux)
- [CVE-2026-23341](https://cve.now/CVE-2026-23341.md): accel/amdxdna: Fix crash when destroying a suspended hardware context (no CVSS, Linux)
- [CVE-2026-23340](https://cve.now/CVE-2026-23340.md): net: sched: avoid qdisc\_reset\_all\_tx\_gt() vs dequeue race for lockless qdiscs (CVSS 7.8, Linux)
- [CVE-2026-23339](https://cve.now/CVE-2026-23339.md): nfc: nci: free skb on nci\_transceive early error paths (no CVSS, Linux)
- [CVE-2026-23338](https://cve.now/CVE-2026-23338.md): drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings (no CVSS, Linux)
- [CVE-2026-23337](https://cve.now/CVE-2026-23337.md): pinctrl: pinconf-generic: Fix memory leak in pinconf\_generic\_parse\_dt\_config() (no CVSS, Linux)
- [CVE-2026-23336](https://cve.now/CVE-2026-23336.md): wifi: cfg80211: cancel rfkill\_block work in wiphy\_unregister() (CVSS 7.8, Linux)
- [CVE-2026-23335](https://cve.now/CVE-2026-23335.md): RDMA/irdma: Fix kernel stack leak in irdma\_create\_user\_ah() (no CVSS, Linux)
- [CVE-2026-23334](https://cve.now/CVE-2026-23334.md): can: usb: f81604: handle short interrupt urb messages properly (no CVSS, Linux)
- [CVE-2026-23332](https://cve.now/CVE-2026-23332.md): cpufreq: intel\_pstate: Fix crash during turbo disable (no CVSS, Linux)
- [CVE-2026-23331](https://cve.now/CVE-2026-23331.md): udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. (no CVSS, Linux)
- [CVE-2026-23330](https://cve.now/CVE-2026-23330.md): nfc: nci: complete pending data exchange on device close (no CVSS, Linux)
- [CVE-2026-23329](https://cve.now/CVE-2026-23329.md): libie: don't unroll if fwlog isn't supported (no CVSS, Linux)
- [CVE-2026-23328](https://cve.now/CVE-2026-23328.md): accel/amdxdna: Fix NULL pointer dereference of mgmt\_chann (no CVSS, Linux)
- [CVE-2026-23327](https://cve.now/CVE-2026-23327.md): cxl/mbox: validate payload size before accessing contents in cxl\_payload\_from\_user\_allowed() (no CVSS, Linux)
- [CVE-2026-23326](https://cve.now/CVE-2026-23326.md): xsk: Fix fragment node deletion to prevent buffer leak (no CVSS, Linux)
- [CVE-2026-23325](https://cve.now/CVE-2026-23325.md): wifi: mt76: mt7996: Fix possible oob access in mt7996\_mac\_write\_txwi\_80211() (no CVSS, Linux)
- [CVE-2026-23324](https://cve.now/CVE-2026-23324.md): can: usb: etas\_es58x: correctly anchor the urb in the read bulk callback (no CVSS, Linux)
- [CVE-2026-23323](https://cve.now/CVE-2026-23323.md): hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver (no CVSS, Linux)
- [CVE-2026-23322](https://cve.now/CVE-2026-23322.md): ipmi: Fix use-after-free and list corruption on sender error (no CVSS, Linux)
- [CVE-2026-23321](https://cve.now/CVE-2026-23321.md): mptcp: pm: in-kernel: always mark signal+subflow endp as used (no CVSS, Linux)
- [CVE-2026-23319](https://cve.now/CVE-2026-23319.md): bpf: Fix a UAF issue in bpf\_trampoline\_link\_cgroup\_shim (no CVSS, Linux)
- [CVE-2026-23318](https://cve.now/CVE-2026-23318.md): ALSA: usb-audio: Use correct version for UAC3 header validation (no CVSS, Linux)
- [CVE-2026-23317](https://cve.now/CVE-2026-23317.md): drm/vmwgfx: Return the correct value in vmw\_translate\_ptr functions (CVSS 7.8, Linux)
- [CVE-2026-23316](https://cve.now/CVE-2026-23316.md): net: ipv4: fix ARM64 alignment fault in multipath hash seed (no CVSS, Linux)
- [CVE-2026-23315](https://cve.now/CVE-2026-23315.md): wifi: mt76: Fix possible oob access in mt76\_connac2\_mac\_write\_txwi\_80211() (no CVSS, Linux)
- [CVE-2026-23314](https://cve.now/CVE-2026-23314.md): regulator: bq257xx: Fix device node reference leak in bq257xx\_reg\_dt\_parse\_gpio() (no CVSS, Linux)
- [CVE-2026-23313](https://cve.now/CVE-2026-23313.md): i40e: Fix preempt count leak in napi poll tracepoint (no CVSS, Linux)
- [CVE-2026-23312](https://cve.now/CVE-2026-23312.md): net: usb: kaweth: validate USB endpoints (no CVSS, Linux)
- [CVE-2026-23311](https://cve.now/CVE-2026-23311.md): perf/core: Fix invalid wait context in ctx\_sched\_in() (no CVSS, Linux)
- [CVE-2026-23310](https://cve.now/CVE-2026-23310.md): bpf/bonding: reject vlan+srcmac xmit\_hash\_policy change when XDP is loaded (no CVSS, Linux)
- [CVE-2026-23309](https://cve.now/CVE-2026-23309.md): tracing: Add NULL pointer check to trigger\_data\_free() (no CVSS, Linux)
- [CVE-2026-23308](https://cve.now/CVE-2026-23308.md): pinctrl: equilibrium: fix warning trace on load (no CVSS, Linux)
- [CVE-2026-23307](https://cve.now/CVE-2026-23307.md): can: ems\_usb: ems\_usb\_read\_bulk\_callback(): check the proper length of a message (no CVSS, Linux)
- [CVE-2026-23306](https://cve.now/CVE-2026-23306.md): scsi: pm8001: Fix use-after-free in pm8001\_queue\_command() (CVSS 7.8, Linux)
- [CVE-2026-23305](https://cve.now/CVE-2026-23305.md): accel/rocket: fix unwinding in error path in rocket\_probe (no CVSS, Linux)
- [CVE-2026-23304](https://cve.now/CVE-2026-23304.md): ipv6: fix NULL pointer deref in ip6\_rt\_get\_dev\_rcu() (no CVSS, Linux)
- [CVE-2026-23303](https://cve.now/CVE-2026-23303.md): smb: client: Don't log plaintext credentials in cifs\_set\_cifscreds (no CVSS, Linux)
- [CVE-2026-23302](https://cve.now/CVE-2026-23302.md): net: annotate data-races around sk-\>sk\_{data\_ready,write\_space} (no CVSS, Linux)
- [CVE-2026-23301](https://cve.now/CVE-2026-23301.md): ASoC: SDCA: Add allocation failure check for Entity name (no CVSS, Linux)
- [CVE-2026-23300](https://cve.now/CVE-2026-23300.md): net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (no CVSS, Linux)
- [CVE-2026-23299](https://cve.now/CVE-2026-23299.md): Bluetooth: purge error queues in socket destructors (no CVSS, Linux)
- [CVE-2026-23298](https://cve.now/CVE-2026-23298.md): can: ucan: Fix infinite loop from zero-length messages (no CVSS, Linux)
- [CVE-2026-23297](https://cve.now/CVE-2026-23297.md): nfsd: Fix cred ref leak in nfsd\_nl\_threads\_set\_doit(). (no CVSS, Linux)
- [CVE-2026-23296](https://cve.now/CVE-2026-23296.md): scsi: core: Fix refcount leak for tagset\_refcnt (no CVSS, Linux)
- [CVE-2026-23295](https://cve.now/CVE-2026-23295.md): accel/amdxdna: Fix dead lock for suspend and resume (no CVSS, Linux)
- [CVE-2026-23294](https://cve.now/CVE-2026-23294.md): bpf: Fix race in devmap on PREEMPT\_RT (CVSS 7.0, Linux)
- [CVE-2026-23293](https://cve.now/CVE-2026-23293.md): net: vxlan: fix nd\_tbl NULL dereference when IPv6 is disabled (no CVSS, Linux)
- [CVE-2026-23292](https://cve.now/CVE-2026-23292.md): scsi: target: Fix recursive locking in \_\_configfs\_open\_file() (no CVSS, Linux)
- [CVE-2026-23291](https://cve.now/CVE-2026-23291.md): nfc: pn533: properly drop the usb interface reference on disconnect (no CVSS, Linux)
- [CVE-2026-23290](https://cve.now/CVE-2026-23290.md): net: usb: pegasus: validate USB endpoints (no CVSS, Linux)
- [CVE-2026-23289](https://cve.now/CVE-2026-23289.md): IB/mthca: Add missed mthca\_unmap\_user\_db() for mthca\_create\_srq() (no CVSS, Linux)
- [CVE-2026-23288](https://cve.now/CVE-2026-23288.md): accel/amdxdna: Fix out-of-bounds memset in command slot handling (CVSS 7.8, Linux)
- [CVE-2026-23287](https://cve.now/CVE-2026-23287.md): irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (no CVSS, Linux)
- [CVE-2026-23286](https://cve.now/CVE-2026-23286.md): atm: lec: fix null-ptr-deref in lec\_arp\_clear\_vccs (no CVSS, Linux)
- [CVE-2026-23285](https://cve.now/CVE-2026-23285.md): drbd: fix null-pointer dereference on local read error (no CVSS, Linux)
- [CVE-2026-23284](https://cve.now/CVE-2026-23284.md): net: ethernet: mtk\_eth\_soc: Reset prog ptr to old\_prog in case of error in mtk\_xdp\_setup() (no CVSS, Linux)
- [CVE-2026-23283](https://cve.now/CVE-2026-23283.md): regulator: fp9931: Fix PM runtime reference leak in fp9931\_hwmon\_read() (no CVSS, Linux)
- [CVE-2026-23282](https://cve.now/CVE-2026-23282.md): smb: client: fix oops due to uninitialised var in smb2\_unlink() (no CVSS, Linux)
- [CVE-2026-23281](https://cve.now/CVE-2026-23281.md): wifi: libertas: fix use-after-free in lbs\_free\_adapter() (no CVSS, Linux)
- [CVE-2026-23280](https://cve.now/CVE-2026-23280.md): accel/amdxdna: Prevent ubuf size overflow (CVSS 7.8, Linux)
- [CVE-2026-23279](https://cve.now/CVE-2026-23279.md): wifi: mac80211: fix NULL pointer dereference in mesh\_rx\_csa\_frame() (no CVSS, Linux)
- [CVE-2026-31788](https://cve.now/CVE-2026-31788.md): xen/privcmd: restrict usage in unprivileged domU (CVSS 8.2, Linux)
- [CVE-2026-3608](https://cve.now/CVE-2026-3608.md): Stack overflow in Kea daemons (CVSS 7.5, ISC Kea)
- [CVE-2026-32326](https://cve.now/CVE-2026-32326.md): SHARP routers do not perform authentication for some web APIs. (CVSS 5.7, Sharp home 5G HR01 · Sharp home 5G HR02 +6)
- [CVE-2026-2343](https://cve.now/CVE-2026-2343.md): PeproDev Ultimate Invoice \<= 2.2.5 - Unauthenticated Invoice Archive Download (CVSS 5.3, PeproDev Ultimate Invoice)
- [CVE-2026-26306](https://cve.now/CVE-2026-26306.md): The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an at (CVSS 7.8, OM Digital Solutions OM Workspace)
- [CVE-2026-33253](https://cve.now/CVE-2026-33253.md): SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. (CVSS 6.7, SANYO DENKI CO. SANUPS SOFTWARE STANDALONE · SANYO DENKI CO…)
- [CVE-2026-2072](https://cve.now/CVE-2026-2072.md): Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer (CVSS 8.2, Hitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…)
- [CVE-2026-1166](https://cve.now/CVE-2026-1166.md): Open Redirect Vulnerability in Hitachi Ops Center Administrator (CVSS 4.3, Hitachi Ops Center Administrator)
- [CVE-2026-4766](https://cve.now/CVE-2026-4766.md): Easy Image Gallery \<= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta (CVSS 6.4, devrix Easy Image Gallery)
- [CVE-2026-4784](https://cve.now/CVE-2026-4784.md): code-projects Simple Laundry System Parameter checkcheckout.php sql injection (CVSS 6.9, code-projects Simple Laundry System)
- [CVE-2026-28864](https://cve.now/CVE-2026-28864.md): This issue was addressed with improved permissions checking. (CVSS 3.3, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-20691](https://cve.now/CVE-2026-20691.md): An authorization issue was addressed with improved state management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-28833](https://cve.now/CVE-2026-28833.md): A permissions issue was addressed with additional restrictions. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28825](https://cve.now/CVE-2026-28825.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.1, Apple macOS)
- [CVE-2026-20668](https://cve.now/CVE-2026-20668.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-20687](https://cve.now/CVE-2026-20687.md): A use after free issue was addressed with improved memory management. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-20701](https://cve.now/CVE-2026-20701.md): An access issue was addressed with additional sandbox restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2025-43534](https://cve.now/CVE-2025-43534.md): A path handling issue was addressed with improved validation. (CVSS 6.8, Apple iOS and iPadOS)
- [CVE-2026-28868](https://cve.now/CVE-2026-28868.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-20633](https://cve.now/CVE-2026-20633.md): This issue was addressed with improved handling of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2026-28829](https://cve.now/CVE-2026-28829.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2026-20664](https://cve.now/CVE-2026-20664.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-28891](https://cve.now/CVE-2026-28891.md): A race condition was addressed with additional validation. (CVSS 8.1, Apple macOS)
- [CVE-2026-28852](https://cve.now/CVE-2026-28852.md): A stack overflow was addressed with improved input validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28844](https://cve.now/CVE-2026-28844.md): A file access issue was addressed with improved input validation. (CVSS 6.5, Apple macOS)
- [CVE-2026-28845](https://cve.now/CVE-2026-28845.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-28890](https://cve.now/CVE-2026-28890.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 5.5, Apple Xcode)
- [CVE-2026-20665](https://cve.now/CVE-2026-20665.md): This issue was addressed through improved state management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28828](https://cve.now/CVE-2026-28828.md): A permissions issue was addressed by removing the vulnerable code. (CVSS 5.3, Apple macOS)
- [CVE-2026-20632](https://cve.now/CVE-2026-20632.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 5.3, Apple macOS)
- [CVE-2026-28886](https://cve.now/CVE-2026-28886.md): A null pointer dereference was addressed with improved input validation. (CVSS 5.9, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-20686](https://cve.now/CVE-2026-20686.md): This issue was addressed with improved input validation. (CVSS 5.3, Apple iOS and iPadOS)
- [CVE-2026-28824](https://cve.now/CVE-2026-28824.md): An authorization issue was addressed with improved state management. (CVSS 5.3, Apple macOS)
- [CVE-2026-28832](https://cve.now/CVE-2026-28832.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 8.4, Apple macOS)
- [CVE-2026-20690](https://cve.now/CVE-2026-20690.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28865](https://cve.now/CVE-2026-28865.md): An authentication issue was addressed with improved state management. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28881](https://cve.now/CVE-2026-28881.md): A privacy issue was addressed by moving sensitive data. (CVSS 5.3, Apple macOS)
- [CVE-2026-28839](https://cve.now/CVE-2026-28839.md): The issue was addressed with improved checks. (CVSS 5.3, Apple macOS)
- [CVE-2026-28878](https://cve.now/CVE-2026-28878.md): A privacy issue was addressed by removing sensitive data. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28842](https://cve.now/CVE-2026-28842.md): The issue was addressed with improved bounds checks. (CVSS 7.5, Apple macOS)
- [CVE-2026-28862](https://cve.now/CVE-2026-28862.md): A privacy issue was addressed with improved private data redaction for log entries. (CVSS 5.3, Apple macOS)
- [CVE-2026-4783](https://cve.now/CVE-2026-4783.md): itsourcecode College Management System Parameter add-single-student-results.php sql injection (CVSS 5.3, itsourcecode College Management System)
- [CVE-2026-20697](https://cve.now/CVE-2026-20697.md): A permissions issue was addressed with additional restrictions. (CVSS 5.3, Apple macOS)
- [CVE-2026-28835](https://cve.now/CVE-2026-28835.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple macOS)
- [CVE-2026-28823](https://cve.now/CVE-2026-28823.md): A path handling issue was addressed with improved validation. (CVSS 4.9, Apple macOS)
- [CVE-2026-20639](https://cve.now/CVE-2026-20639.md): An integer overflow was addressed with improved input validation. (CVSS 7.5, Apple macOS)
- [CVE-2026-28874](https://cve.now/CVE-2026-28874.md): The issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2026-28858](https://cve.now/CVE-2026-28858.md): A buffer overflow was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS)
- [CVE-2026-28818](https://cve.now/CVE-2026-28818.md): A logging issue was addressed with improved data redaction. (CVSS 5.3, Apple macOS)
- [CVE-2026-28859](https://cve.now/CVE-2026-28859.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28875](https://cve.now/CVE-2026-28875.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2026-28822](https://cve.now/CVE-2026-28822.md): A type confusion issue was addressed with improved memory handling. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28834](https://cve.now/CVE-2026-28834.md): A race condition was addressed with improved state handling. (CVSS 5.1, Apple macOS)
- [CVE-2026-28863](https://cve.now/CVE-2026-28863.md): A permissions issue was addressed with additional restrictions. (CVSS 6.5, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2026-28855](https://cve.now/CVE-2026-28855.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28879](https://cve.now/CVE-2026-28879.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28838](https://cve.now/CVE-2026-28838.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 5.3, Apple macOS)
- [CVE-2026-20622](https://cve.now/CVE-2026-20622.md): A privacy issue was addressed with improved handling of temporary files. (CVSS 7.5, Apple macOS)
- [CVE-2026-28880](https://cve.now/CVE-2026-28880.md): A permissions issue was addressed with additional restrictions. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28817](https://cve.now/CVE-2026-28817.md): A race condition was addressed with improved state handling. (CVSS 8.1, Apple macOS)
- [CVE-2026-28856](https://cve.now/CVE-2026-28856.md): The issue was addressed with improved authentication. (CVSS 4.6, Apple iOS and iPadOS · Apple visionOS +1)
- [CVE-2026-28895](https://cve.now/CVE-2026-28895.md): The issue was addressed with improved checks. (CVSS 4.6, Apple iOS and iPadOS)
- [CVE-2026-20637](https://cve.now/CVE-2026-20637.md): A use after free issue was addressed with improved memory management. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-20699](https://cve.now/CVE-2026-20699.md): A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. (CVSS 6.2, Apple macOS)
- [CVE-2026-28876](https://cve.now/CVE-2026-28876.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28821](https://cve.now/CVE-2026-28821.md): A validation issue existed in the entitlement verification. (CVSS 8.4, Apple macOS)
- [CVE-2026-28837](https://cve.now/CVE-2026-28837.md): A logic issue was addressed with improved checks. (CVSS 7.5, Apple macOS)
- [CVE-2026-20695](https://cve.now/CVE-2026-20695.md): An information disclosure issue was addressed with improved memory management. (CVSS 6.2, Apple macOS)
- [CVE-2026-28861](https://cve.now/CVE-2026-28861.md): A logic issue was addressed with improved state management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-20694](https://cve.now/CVE-2026-20694.md): This issue was addressed with improved handling of symlinks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28820](https://cve.now/CVE-2026-28820.md): This issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-28877](https://cve.now/CVE-2026-28877.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-20657](https://cve.now/CVE-2026-20657.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-20698](https://cve.now/CVE-2026-20698.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28882](https://cve.now/CVE-2026-28882.md): This issue was addressed with improved checks. (CVSS 4.0, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28894](https://cve.now/CVE-2026-28894.md): A denial-of-service issue was addressed with improved input validation. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28857](https://cve.now/CVE-2026-28857.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-28841](https://cve.now/CVE-2026-28841.md): A buffer overflow was addressed with improved size validation. (CVSS 6.2, Apple macOS)
- [CVE-2026-28816](https://cve.now/CVE-2026-28816.md): A path handling issue was addressed with improved validation. (CVSS 4.0, Apple macOS)
- [CVE-2026-20607](https://cve.now/CVE-2026-20607.md): A permissions issue was addressed with additional restrictions. (CVSS 4.0, Apple macOS)
- [CVE-2026-28870](https://cve.now/CVE-2026-28870.md): An information leakage was addressed with additional validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28827](https://cve.now/CVE-2026-28827.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 9.3, Apple macOS)
- [CVE-2026-28831](https://cve.now/CVE-2026-28831.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-20693](https://cve.now/CVE-2026-20693.md): This issue was addressed through improved state management. (CVSS 4.9, Apple macOS)
- [CVE-2026-28866](https://cve.now/CVE-2026-28866.md): This issue was addressed with improved validation of symlinks. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28889](https://cve.now/CVE-2026-28889.md): A permissions issue was addressed with additional restrictions. (CVSS 6.2, Apple Xcode)
- [CVE-2026-28893](https://cve.now/CVE-2026-28893.md): A privacy issue was addressed with improved handling of temporary files. (CVSS 3.3, Apple macOS)
- [CVE-2026-20631](https://cve.now/CVE-2026-20631.md): A logic issue was addressed with improved checks. (CVSS 8.4, Apple macOS)
- [CVE-2026-20670](https://cve.now/CVE-2026-20670.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-20688](https://cve.now/CVE-2026-20688.md): A path handling issue was addressed with improved validation. (CVSS 9.3, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28892](https://cve.now/CVE-2026-28892.md): A permissions issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2026-28867](https://cve.now/CVE-2026-28867.md): This issue was addressed with improved authentication. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28888](https://cve.now/CVE-2026-28888.md): A race condition was addressed with improved state handling. (CVSS 5.1, Apple macOS)
- [CVE-2026-20692](https://cve.now/CVE-2026-20692.md): A privacy issue was addressed with improved handling of user preferences. (CVSS 5.3, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28826](https://cve.now/CVE-2026-28826.md): A logic issue was addressed with improved restrictions. (CVSS 4.0, Apple macOS)
- [CVE-2026-28871](https://cve.now/CVE-2026-28871.md): A logic issue was addressed with improved checks. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2026-20684](https://cve.now/CVE-2026-20684.md): A permissions issue was addressed with additional restrictions. (CVSS 3.3, Apple macOS)
- [CVE-2026-20651](https://cve.now/CVE-2026-20651.md): A privacy issue was addressed with improved handling of temporary files. (CVSS 6.2, Apple macOS)
- [CVE-2024-51346](https://cve.now/CVE-2024-51346.md): An issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive information via the cryptographic scheme. (CVSS 7.7)
- [CVE-2024-51347](https://cve.now/CVE-2024-51347.md): A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. (CVSS 7.2)
- [CVE-2024-51348](https://cve.now/CVE-2024-51348.md): A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated a (CVSS 8.8)
- [CVE-2025-32991](https://cve.now/CVE-2025-32991.md): In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution. (CVSS 9.0)
- [CVE-2025-59706](https://cve.now/CVE-2025-59706.md): In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution. (CVSS 9.8)
- [CVE-2025-59707](https://cve.now/CVE-2025-59707.md): In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vul (CVSS 9.8)
- [CVE-2025-67030](https://cve.now/CVE-2025-67030.md): Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d (CVSS 8.8, org.codehaus.plexus:plexus-utils)
- [CVE-2025-70887](https://cve.now/CVE-2025-70887.md): An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed\_data.py and the context.py compone (CVSS 8.8, signify)
- [CVE-2025-70888](https://cve.now/CVE-2025-70888.md): An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c compon (CVSS 9.8)
- [CVE-2025-70952](https://cve.now/CVE-2025-70952.md): pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names c (CVSS 7.5, org.pf4j:pf4j)
- [CVE-2026-26830](https://cve.now/CVE-2026-26830.md): pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter. (CVSS 9.8, pdf-image)
- [CVE-2026-26831](https://cve.now/CVE-2026-26831.md): textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. (CVSS 9.8, textract)
- [CVE-2026-26832](https://cve.now/CVE-2026-26832.md): node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. (CVSS 9.8, node-tesseract-ocr)
- [CVE-2026-26833](https://cve.now/CVE-2026-26833.md): thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user i (CVSS 9.8, thumbler)
- [CVE-2026-30587](https://cve.now/CVE-2026-30587.md): Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, (CVSS 5.4, @seafile/sdoc-editor)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.