# CVEs published 2026-07-02

265 CVEs were published on July 2, 2026: 33 critical, 148 high. Days are UTC.

- [CVE-2026-54477](https://cve.now/CVE-2026-54477.md): Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax (CVSS 5.4, Gardyn Home Firmware · Gardyn Studio Firmware +1)
- [CVE-2026-55726](https://cve.now/CVE-2026-55726.md): Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVSS 5.3, Gardyn Home Firmware · Gardyn Studio Firmware +1)
- [CVE-2026-13768](https://cve.now/CVE-2026-13768.md): Gardyn IoT Hub Use of Hard-coded Credentials (CVSS 10.0, Gardyn Home Firmware · Gardyn Studio Firmware +1)
- [CVE-2026-13053](https://cve.now/CVE-2026-13053.md): WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-13050](https://cve.now/CVE-2026-13050.md): WatchGuard Firebox networkd Out of Bounds Write Vulnerability (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-13054](https://cve.now/CVE-2026-13054.md): WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-13079](https://cve.now/CVE-2026-13079.md): WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation (CVSS 7.3, WatchGuard Mobile VPN with SSL Client)
- [CVE-2026-8247](https://cve.now/CVE-2026-8247.md): WatchGuard Firebox admd Out of Bounds Write Vulnerability (CVSS 7.7, WatchGuard Fireware OS)
- [CVE-2026-13728](https://cve.now/CVE-2026-13728.md): WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database (CVSS 5.9, WatchGuard Fireware OS)
- [CVE-2026-13084](https://cve.now/CVE-2026-13084.md): Null Pointer Dereference in WatchGuard Fireware OS iked Process (CVSS 8.7, WatchGuard Fireware OS)
- [CVE-2026-13368](https://cve.now/CVE-2026-13368.md): WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication (CVSS 9.2, WatchGuard Fireware OS)
- [CVE-2026-13722](https://cve.now/CVE-2026-13722.md): WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-13384](https://cve.now/CVE-2026-13384.md): WatchGuard Firebox wgagent Out of Bounds Write Vulnerability (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-13383](https://cve.now/CVE-2026-13383.md): WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-13377](https://cve.now/CVE-2026-13377.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2026-13376](https://cve.now/CVE-2026-13376.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2026-13375](https://cve.now/CVE-2026-13375.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2026-13374](https://cve.now/CVE-2026-13374.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2026-13373](https://cve.now/CVE-2026-13373.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2026-13371](https://cve.now/CVE-2026-13371.md): WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization (CVSS 6.9, WatchGuard Fireware OS)
- [CVE-2026-54998](https://cve.now/CVE-2026-54998.md): Microsoft Exchange Online Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Exchange Online)
- [CVE-2026-41106](https://cve.now/CVE-2026-41106.md): Microsoft 365 Copilot Elevation of Privilege Vulnerability (CVSS 9.3, Microsoft 365 Copilot)
- [CVE-2026-26145](https://cve.now/CVE-2026-26145.md): Microsoft Azure Synapse Elevation of Privilege Vulnerability (CVSS 4.8, Microsoft Azure Synapse)
- [CVE-2026-45499](https://cve.now/CVE-2026-45499.md): Azure OpenAI Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Open AI)
- [CVE-2026-57100](https://cve.now/CVE-2026-57100.md): Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Entra Provisioning Service)
- [CVE-2026-50721](https://cve.now/CVE-2026-50721.md): IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload (CVSS 7.5, The Libreswan Project libreswan)
- [CVE-2026-50722](https://cve.now/CVE-2026-50722.md): IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1\_5) authentication payload (CVSS 7.5, The Libreswan Project libreswan)
- [CVE-2026-12413](https://cve.now/CVE-2026-12413.md): IKEv2 Denial of Service via malformed fragmentation (CVSS 7.5, The Libreswan Project libreswan)
- [CVE-2026-52830](https://cve.now/CVE-2026-52830.md): fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection (CVSS 9.4, leshchenko1979 fast-mcp-telegram · fast-mcp-telegram)
- [CVE-2026-58460](https://cve.now/CVE-2026-58460.md): react-native-receive-sharing-intent Path Traversal via \_display\_name (CVSS 7.0, ajith-ab react-native-receive-sharing-intent)
- [CVE-2026-58467](https://cve.now/CVE-2026-58467.md): Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php (CVSS 8.2, cockpit-hq cockpit)
- [CVE-2026-58466](https://cve.now/CVE-2026-58466.md): AutoBangumi \< 3.2.8 - Hard-coded Default Credentials via add\_default\_user() (CVSS 9.8, EstrellaXD Auto\_Bangumi)
- [CVE-2026-58381](https://cve.now/CVE-2026-58381.md): Gimp: gimp: double-free in read\_layer\_block() (CVSS 6.1, Red Hat Enterprise Linux)
- [CVE-2026-59102](https://cve.now/CVE-2026-59102.md): Forgejo \< 15.0.3 - Stored XSS via Actions Run Full Name Rendering (CVSS 5.4, forgejo)
- [CVE-2026-59101](https://cve.now/CVE-2026-59101.md): AutoBangumi \< 3.2.8 - SSRF via /api/v1/setup/test-downloader (CVSS 5.8, EstrellaXD Auto\_Bangumi)
- [CVE-2026-59100](https://cve.now/CVE-2026-59100.md): LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations (CVSS 5.0, lobehub)
- [CVE-2026-59099](https://cve.now/CVE-2026-59099.md): Apereo CAS 7.3.0 \< 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure (CVSS 9.1, apereo cas)
- [CVE-2026-59098](https://cve.now/CVE-2026-59098.md): LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search (CVSS 6.5, lobehub)
- [CVE-2026-59097](https://cve.now/CVE-2026-59097.md): Taiga \< 6.10.2 - Unauthorized Due-Date Creation via API Viewsets (CVSS 5.3, taiga-back)
- [CVE-2026-59096](https://cve.now/CVE-2026-59096.md): Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host (CVSS 7.5, dapr)
- [CVE-2026-59095](https://cve.now/CVE-2026-59095.md): LobeChat \< 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl (CVSS 7.7, lobehub)
- [CVE-2026-59094](https://cve.now/CVE-2026-59094.md): Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store (CVSS 7.5, pathwaycom pathway)
- [CVE-2026-59093](https://cve.now/CVE-2026-59093.md): Weaviate \< 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment (CVSS 8.8, weaviate)
- [CVE-2026-59092](https://cve.now/CVE-2026-59092.md): JuiceFS - Authentication Bypass via pprof and metrics Endpoints (CVSS 7.7, juicedata juicefs)
- [CVE-2026-58580](https://cve.now/CVE-2026-58580.md): LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes (CVSS 5.9, lobehub)
- [CVE-2026-58579](https://cve.now/CVE-2026-58579.md): RAGFlow \< 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name (CVSS 5.4, infiniflow ragflow)
- [CVE-2026-58578](https://cve.now/CVE-2026-58578.md): LobeChat \< 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import (CVSS 6.5, lobehub)
- [CVE-2025-71385](https://cve.now/CVE-2025-71385.md): Netdata \< 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint (CVSS 6.1, netdata)
- [CVE-2026-13743](https://cve.now/CVE-2026-13743.md): Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel (CVSS 3.3, CubeSpace CW0057 Reaction Wheel)
- [CVE-2026-7311](https://cve.now/CVE-2026-7311.md): TinyPNG \<= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny\_compress\_images' Post Meta (CVSS 8.1, TinyPNG – JPEG, PNG & WebP image compression)
- [CVE-2026-58465](https://cve.now/CVE-2026-58465.md): Eclipse Wakaama CoAP Block1 Handler Unbounded Memory Allocation DoS (CVSS 8.7, eclipse-wakaama wakaama)
- [CVE-2024-58352](https://cve.now/CVE-2024-58352.md): Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do (CVSS 8.7, Shenzhen Landray Software Co. Landry Office Automation)
- [CVE-2022-50973](https://cve.now/CVE-2022-50973.md): Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload Servlet (CVSS 9.3, Yonyou Network Technology Co. KSOA)
- [CVE-2024-14037](https://cve.now/CVE-2024-14037.md): Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob (CVSS 9.3, Guangzhou Red Sea Cloud Computing Co. Red Sea Cloud eHR)
- [CVE-2026-8699](https://cve.now/CVE-2026-8699.md): Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web Management Interface (CVSS 7.0, TP-Link Systems Archer C5)
- [CVE-2026-50282](https://cve.now/CVE-2026-50282.md): Craft CMS: Unauthorized Deletion of Destination Folders During Forced Moves (CVSS 4.9, craftcms cms · craftcms/cms)
- [CVE-2026-54891](https://cve.now/CVE-2026-54891.md): Plaintext APPLICATION\_DATA injected during TLS handshake delivered to client application post-handshake in ssl (CVSS 6.3, Erlang OTP)
- [CVE-2026-55950](https://cve.now/CVE-2026-55950.md): DTLS listener crash via race condition in dtls\_packet\_demux causes denial of service for all sessions (CVSS 8.7, Erlang OTP)
- [CVE-2026-54886](https://cve.now/CVE-2026-54886.md): SSH SFTP server denial of service via extended channel data infinite loop (CVSS 5.3, Erlang OTP)
- [CVE-2026-55952](https://cve.now/CVE-2026-55952.md): TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension (CVSS 8.2, Erlang OTP)
- [CVE-2026-54887](https://cve.now/CVE-2026-54887.md): DTLS server cookie bypass during startup window due to empty initial cookie secret (CVSS 6.3, Erlang OTP)
- [CVE-2026-53422](https://cve.now/CVE-2026-53422.md): SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root (CVSS 2.3, Erlang OTP)
- [CVE-2026-50281](https://cve.now/CVE-2026-50281.md): Craft CMS: Mass assignment via id in newAttributes during bulk duplicate overwrites existing elements (CVSS 7.1, craftcms cms · craftcms/cms)
- [CVE-2026-44935](https://cve.now/CVE-2026-44935.md): Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated \`valuesFrom\` references in Helm Deployer (CVSS 9.9, SUSE Rancher · github.com/rancher/fleet)
- [CVE-2026-44941](https://cve.now/CVE-2026-44941.md): libzypp path traversal via "keyhint" in repomd.xml (CVSS 8.4, SUSE libzypp)
- [CVE-2026-58455](https://cve.now/CVE-2026-58455.md): Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php (CVSS 9.2, Notifiarr dockwatch)
- [CVE-2026-56004](https://cve.now/CVE-2026-56004.md): obs-service-tar\_scm: command injection via mercurial handler (CVSS 10.0, openSUSE buildservice)
- [CVE-2026-55119](https://cve.now/CVE-2026-55119.md): A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk A (CVSS 8.1, Ubiquiti UniFi Talk Application)
- [CVE-2026-55114](https://cve.now/CVE-2026-55114.md): A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Networ (CVSS 8.8, Ubiquiti UniFi Network Application)
- [CVE-2026-56842](https://cve.now/CVE-2026-56842.md): A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in Un (CVSS 7.5, Ubiquiti UniFi Network Application)
- [CVE-2026-55116](https://cve.now/CVE-2026-55116.md): A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability (CVSS 9.0, Ubiquiti Dream Machines · Ubiquiti Enterprise Fortress G… +5)
- [CVE-2026-56841](https://cve.now/CVE-2026-56841.md): A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Pr (CVSS 8.8, Ubiquiti UniFi Protect Application)
- [CVE-2026-55115](https://cve.now/CVE-2026-55115.md): A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Applicat (CVSS 9.9, Ubiquiti UniFi Protect Application)
- [CVE-2026-55118](https://cve.now/CVE-2026-55118.md): A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerabil (CVSS 8.3, Ubiquiti UniFi Network Application)
- [CVE-2026-55112](https://cve.now/CVE-2026-55112.md): A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulner (CVSS 7.5, Ubiquiti Dream Machines · Ubiquiti Dream Wall +5)
- [CVE-2026-55117](https://cve.now/CVE-2026-55117.md): A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files (CVSS 8.6, Ubiquiti UniFi Access Application)
- [CVE-2026-55113](https://cve.now/CVE-2026-55113.md): A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Applicatio (CVSS 7.5, Ubiquiti UniFi Talk Application)
- [CVE-2026-55111](https://cve.now/CVE-2026-55111.md): A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to acces (CVSS 7.5, Ubiquiti UniFi Protect Floodlight)
- [CVE-2026-54401](https://cve.now/CVE-2026-54401.md): A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges wi (CVSS 7.7, Ubiquiti UniFi OS Server · Ubiquiti Dream Machines +10)
- [CVE-2026-54402](https://cve.now/CVE-2026-54402.md): A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS t (CVSS 9.9, Ubiquiti UniFi OS Server · Ubiquiti Dream Machines +10)
- [CVE-2026-50747](https://cve.now/CVE-2026-50747.md): A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found (CVSS 9.9, Ubiquiti UniFi Talk Application)
- [CVE-2026-50746](https://cve.now/CVE-2026-50746.md): A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to ex (CVSS 10.0, Ubiquiti UniFi Connect Application)
- [CVE-2026-55110](https://cve.now/CVE-2026-55110.md): A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration (CVSS 7.5, Ubiquiti UniFi OS Server · Ubiquiti Dream Machines +10)
- [CVE-2026-54404](https://cve.now/CVE-2026-54404.md): A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found (CVSS 8.8, Ubiquiti UniFi OS Server · Ubiquiti Dream Machines +10)
- [CVE-2026-54400](https://cve.now/CVE-2026-54400.md): A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Acces (CVSS 9.1, Ubiquiti UniFi Access Application)
- [CVE-2026-54406](https://cve.now/CVE-2026-54406.md): A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances (CVSS 8.7, Ubiquiti UniFi Network Application)
- [CVE-2026-50748](https://cve.now/CVE-2026-50748.md): A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce (CVSS 9.9, Ubiquiti UniFi Access Application)
- [CVE-2026-54408](https://cve.now/CVE-2026-54408.md): A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to by (CVSS 8.6, Ubiquiti UniFi Protect Application)
- [CVE-2026-54409](https://cve.now/CVE-2026-54409.md): A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in Un (CVSS 7.5, Ubiquiti UniFi Protect Application)
- [CVE-2026-54403](https://cve.now/CVE-2026-54403.md): A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypas (CVSS 8.6, Ubiquiti UniFi OS Server · Ubiquiti Dream Machines +10)
- [CVE-2026-54405](https://cve.now/CVE-2026-54405.md): A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to (CVSS 7.5, Ubiquiti UniFi Network Application)
- [CVE-2026-54407](https://cve.now/CVE-2026-54407.md): A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to by (CVSS 8.6, Ubiquiti UniFi Protect Application)
- [CVE-2026-12168](https://cve.now/CVE-2026-12168.md): CVE-2026-12168 (CVSS 7.8, Little Orbit GameFirst Anti-Cheat)
- [CVE-2026-12166](https://cve.now/CVE-2026-12166.md): CVE-2026-12166 (CVSS 5.5, Little Orbit GameFirst Anti-Cheat)
- [CVE-2026-12167](https://cve.now/CVE-2026-12167.md): CVE-2026-12167 (CVSS 7.8, Little Orbit GameFirst Anti-Cheat)
- [CVE-2026-8079](https://cve.now/CVE-2026-8079.md): Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon (CVSS 8.7, Progress Software Flowmon)
- [CVE-2026-9272](https://cve.now/CVE-2026-9272.md): Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS (CVSS 8.7, Progress Software Flowmon ADS)
- [CVE-2026-53358](https://cve.now/CVE-2026-53358.md): Bluetooth: L2CAP: use chan timer to close channels in cleanup\_listen() (CVSS 8.8, Linux)
- [CVE-2026-53357](https://cve.now/CVE-2026-53357.md): Bluetooth: fix UAF in l2cap\_sock\_cleanup\_listen() vs l2cap\_conn\_del() (CVSS 8.0, Linux)
- [CVE-2026-4767](https://cve.now/CVE-2026-4767.md): Improper Access Control in TR7's WAF-ASP (CVSS 9.8, TR7 Cyber ​​Defense WAF-ASP)
- [CVE-2026-4772](https://cve.now/CVE-2026-4772.md): Stored XSS in TR7's WAF-ASP (CVSS 5.4, TR7 Cyber ​​Defense WAF-ASP)
- [CVE-2026-4770](https://cve.now/CVE-2026-4770.md): DOM-Based XSS in TR7's WAF-ASP (CVSS 4.6, TR7 Cyber ​​Defense WAF-ASP)
- [CVE-2026-5524](https://cve.now/CVE-2026-5524.md): Divi Form Builder \<= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter (CVSS 9.8, Divi Engine Divi Form Builder)
- [CVE-2026-58653](https://cve.now/CVE-2026-58653.md): PraisonAI - Authorization Bypass via Unvalidated project\_id in Issue Create/Update (CVSS 5.3, PraisonAI · praisonai-platform)
- [CVE-2026-58652](https://cve.now/CVE-2026-58652.md): luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter (CVSS 7.7, openwrt luci-app-travelmate · openwrt travelmate)
- [CVE-2026-14449](https://cve.now/CVE-2026-14449.md): POST-based reflected XSS via the thanks parameter in form components (CVSS 6.4, u5CMS)
- [CVE-2026-57760](https://cve.now/CVE-2026-57760.md): WordPress Sendcloud Shipping plugin \<= 1.0.29 - Broken Access Control vulnerability (CVSS 5.3, Sendcloud Shipping)
- [CVE-2026-57678](https://cve.now/CVE-2026-57678.md): WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemePunch Slider Revolution)
- [CVE-2026-56037](https://cve.now/CVE-2026-56037.md): WordPress Themify Popup plugin \<= 1.4.3 - PHP Object Injection vulnerability (CVSS 8.8, Themify Popup)
- [CVE-2026-57766](https://cve.now/CVE-2026-57766.md): WordPress WPIDE – File Manager & Code Editor plugin \<= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, XplodedThemes WPIDE – File Manager & Code Editor)
- [CVE-2026-57765](https://cve.now/CVE-2026-57765.md): WordPress WP EasyCart plugin \<= 5.9.0 - SQL Injection vulnerability (CVSS 8.5, Levelfourdevelopment WP EasyCart)
- [CVE-2026-57764](https://cve.now/CVE-2026-57764.md): WordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin \<= 1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Surbma | Yoast SEO Breadcrumb Shortcode)
- [CVE-2026-57763](https://cve.now/CVE-2026-57763.md): WordPress Structured Content plugin \<= 1.7.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Gordon Böhme Structured Content)
- [CVE-2026-57762](https://cve.now/CVE-2026-57762.md): WordPress Simple URLs plugin \<= 151 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Andrew Fiebert Simple URLs)
- [CVE-2026-57761](https://cve.now/CVE-2026-57761.md): WordPress SEOWP theme \<= 3.12.2 - CSRF to Stored XSS vulnerability (CVSS 7.1, BlueAstralThemes SEOWP)
- [CVE-2026-57759](https://cve.now/CVE-2026-57759.md): WordPress ProfileGrid plugin \<= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Metagauss ProfileGrid)
- [CVE-2026-57758](https://cve.now/CVE-2026-57758.md): WordPress Permalink Manager for WooCommerce plugin \<= 1.0.8.2 - CSRF to Stored XSS vulnerability (CVSS 7.1, BeRocket Permalink Manager for WooCommerce)
- [CVE-2026-57757](https://cve.now/CVE-2026-57757.md): WordPress pCloud WP Backup plugin \<= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, ploudapp pCloud WP Backup)
- [CVE-2026-57756](https://cve.now/CVE-2026-57756.md): WordPress nicen-localize-image plugin \<= 1.4.9 - SQL Injection vulnerability (CVSS 8.5, 友人a丶 nicen-localize-image)
- [CVE-2026-57755](https://cve.now/CVE-2026-57755.md): WordPress Mosaic Gallery &#8211; Advanced Gallery plugin \<= 1.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Misbah WP Mosaic Gallery &#8211; Advanced Gallery)
- [CVE-2026-57754](https://cve.now/CVE-2026-57754.md): WordPress Livemesh Addons for WPBakery Page Builder plugin \<= 3.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Livemesh Addons for WPBakery Page Builder)
- [CVE-2026-57753](https://cve.now/CVE-2026-57753.md): WordPress Kit (formerly ConvertKit) for WooCommerce plugin \<= 2.1.5 - Sensitive Data Exposure vulnerability (CVSS 5.3, Nathanbarry Kit (formerly ConvertKit) for WooCommerce)
- [CVE-2026-57752](https://cve.now/CVE-2026-57752.md): WordPress iNET Webkit plugin 1.2.4 - SQL Injection vulnerability (CVSS 8.5, iNET Webkit)
- [CVE-2026-57751](https://cve.now/CVE-2026-57751.md): WordPress Heateor Social Login plugin \<= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.1, Heateor Support Heateor Social Login)
- [CVE-2026-57750](https://cve.now/CVE-2026-57750.md): WordPress ez Form Calculator Premium plugin \<= 2.14.1.2 - Broken Access Control vulnerability (CVSS 5.3, Keksdieb ez Form Calculator Premium)
- [CVE-2026-57749](https://cve.now/CVE-2026-57749.md): WordPress SportsPress Pro plugin \<= 2.7.29 - Local File Inclusion vulnerability (CVSS 7.5, ThemeBoy SportsPress Pro)
- [CVE-2026-57748](https://cve.now/CVE-2026-57748.md): WordPress Shopify plugin \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 7.5, Shopify Help Center Shopify)
- [CVE-2026-57747](https://cve.now/CVE-2026-57747.md): WordPress Booked plugin \<= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5, ThemeREX Booked)
- [CVE-2026-57746](https://cve.now/CVE-2026-57746.md): WordPress Booked plugin \<= 3.0.0 - Broken Access Control vulnerability (CVSS 7.1, ThemeREX Booked)
- [CVE-2026-57731](https://cve.now/CVE-2026-57731.md): WordPress Flatsome theme \<= 3.20.5 - Broken Access Control vulnerability (CVSS 6.5, UX-themes Flatsome)
- [CVE-2026-57730](https://cve.now/CVE-2026-57730.md): WordPress Flatsome theme \<= 3.20.5 - Broken Access Control vulnerability (CVSS 4.3, UX-themes Flatsome)
- [CVE-2026-57690](https://cve.now/CVE-2026-57690.md): WordPress Werkstatt theme \<= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Fuelthemes Werkstatt)
- [CVE-2026-57689](https://cve.now/CVE-2026-57689.md): WordPress Werkstatt theme \<= 4.7.2 - Broken Access Control vulnerability (CVSS 4.3, Fuelthemes Werkstatt)
- [CVE-2026-57688](https://cve.now/CVE-2026-57688.md): WordPress POS Entegratör plugin \<= 3.7.103 - Broken Access Control vulnerability (CVSS 8.2, Gurmehub POS Entegratör)
- [CVE-2026-57687](https://cve.now/CVE-2026-57687.md): WordPress Custom Field Template plugin \<= 2.7.8 - SQL Injection vulnerability (CVSS 8.5, Hiroaki Miyashita Custom Field Template)
- [CVE-2026-57686](https://cve.now/CVE-2026-57686.md): WordPress WowAddons plugin \<= 1.6.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPXPO WowAddons)
- [CVE-2026-57685](https://cve.now/CVE-2026-57685.md): WordPress Martfury - WooCommerce Marketplace WordPress theme theme \<= 3.2.8 - Broken Access Control vulnerability (CVSS 4.3, drfuri Martfury - WooCommerce Marketplace WordPress Theme)
- [CVE-2026-57684](https://cve.now/CVE-2026-57684.md): WordPress TheFox theme \<= 3.9.70 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, tranmautritam TheFox)
- [CVE-2026-57683](https://cve.now/CVE-2026-57683.md): WordPress WP Fast Total Search plugin \<= 1.80.280 - SQL Injection vulnerability (CVSS 9.3, Epsiloncool WP Fast Total Search)
- [CVE-2026-57682](https://cve.now/CVE-2026-57682.md): WordPress Simple Link Directory plugin \<= 15.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, QuantumCloud Simple Link Directory)
- [CVE-2026-57681](https://cve.now/CVE-2026-57681.md): WordPress GeoDirectory plugin \<= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4, Paolo GeoDirectory)
- [CVE-2026-57680](https://cve.now/CVE-2026-57680.md): WordPress Kirki plugin \<= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Themeum Kirki)
- [CVE-2026-57679](https://cve.now/CVE-2026-57679.md): WordPress GeekyBot plugin \<= 1.2.5 - SQL Injection vulnerability (CVSS 9.3, Ahmadgb GeekyBot)
- [CVE-2026-57677](https://cve.now/CVE-2026-57677.md): WordPress Novalnet Payment Gateway for WooCommerce plugin \<= 12.10.3 - PHP Object Injection vulnerability (CVSS 9.8, Novalnet Payment Gateway for WooCommerce)
- [CVE-2026-57675](https://cve.now/CVE-2026-57675.md): WordPress WP Photo Album Plus plugin \<= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jacob N. Breetvelt WP Photo Album Plus)
- [CVE-2026-57674](https://cve.now/CVE-2026-57674.md): WordPress Timetics plugin \<= 1.0.58 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Arraytics Timetics)
- [CVE-2026-57673](https://cve.now/CVE-2026-57673.md): WordPress Optimole plugin \<= 4.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Optimole)
- [CVE-2026-57672](https://cve.now/CVE-2026-57672.md): WordPress wpDataTables plugin \<= 6.5.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Melograno Venture Studio wpDataTables)
- [CVE-2026-57671](https://cve.now/CVE-2026-57671.md): WordPress perfmatters plugin \<= 2.6.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, perfmatters)
- [CVE-2026-57670](https://cve.now/CVE-2026-57670.md): WordPress Google Maps CP plugin \<= 1.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Codepeople Google Maps CP)
- [CVE-2026-57669](https://cve.now/CVE-2026-57669.md): WordPress Advanced Contact form 7 DB plugin \<= 2.0.9 - Broken Access Control vulnerability (CVSS 6.5, Vsourz Digital Advanced Contact form 7 DB)
- [CVE-2026-57625](https://cve.now/CVE-2026-57625.md): WordPress Admin and Site Enhancements (ASE) Pro plugin \<= 8.8.5 - Cross Site Scripting (XSS) vulnerability (CVSS 9.6, Admin and Site Enhancements (ASE) Pro)
- [CVE-2026-57624](https://cve.now/CVE-2026-57624.md): WordPress Blocksy Companion Pro plugin \<= 2.1.46 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, Creative Themes Blocksy Companion Pro)
- [CVE-2026-57623](https://cve.now/CVE-2026-57623.md): WordPress W3 Total Cache plugin \<= 2.9.4 - Arbitrary Code Execution vulnerability (CVSS 9.0, BoldGrid W3 Total Cache)
- [CVE-2026-57621](https://cve.now/CVE-2026-57621.md): WordPress Booktics plugin \<= 1.0.21 - PHP Object Injection vulnerability (CVSS 9.8, Arraytics Booktics)
- [CVE-2026-57426](https://cve.now/CVE-2026-57426.md): WordPress Modula - PRO plugin \<= 2.10.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Chill Media Labs S.R.L. Modula - PRO)
- [CVE-2026-57366](https://cve.now/CVE-2026-57366.md): WordPress WPAdverts plugin \<= 2.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Greg Winiarski WPAdverts)
- [CVE-2026-57362](https://cve.now/CVE-2026-57362.md): WordPress ChatBot plugin \<= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, QuantumCloud ChatBot)
- [CVE-2026-57361](https://cve.now/CVE-2026-57361.md): WordPress Survey Maker plugin \<= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ays Pro Survey Maker)
- [CVE-2026-57360](https://cve.now/CVE-2026-57360.md): WordPress eCommerce Product Catalog plugin \<= 3.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, impleCode eCommerce Product Catalog)
- [CVE-2026-57359](https://cve.now/CVE-2026-57359.md): WordPress ReviewX plugin \<= 2.3.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ReviewX)
- [CVE-2026-57358](https://cve.now/CVE-2026-57358.md): WordPress Customize My Account for WooCommerce plugin \<= 4.3.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SysBasics Customize My Account for WooCommerce)
- [CVE-2026-57357](https://cve.now/CVE-2026-57357.md): WordPress Search Atlas SEO plugin \<= 2.6.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Search Atlas Group Search Atlas SEO)
- [CVE-2026-57356](https://cve.now/CVE-2026-57356.md): WordPress MC Woocommerce Wishlist plugin \<= 1.9.19 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Moreconvert Team MC Woocommerce Wishlist)
- [CVE-2026-57355](https://cve.now/CVE-2026-57355.md): WordPress Classified Listing plugin \<= 5.4.2 - Broken Access Control vulnerability (CVSS 6.5, RadiusTheme Classified Listing)
- [CVE-2026-57354](https://cve.now/CVE-2026-57354.md): WordPress JetReviews plugin \<= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock. Jetimpex JetReviews)
- [CVE-2026-57353](https://cve.now/CVE-2026-57353.md): WordPress Link Whisper Premium plugin \<= 2.9.0 - Broken Access Control vulnerability (CVSS 6.5, LinkWhisper Link Whisper Premium)
- [CVE-2026-57352](https://cve.now/CVE-2026-57352.md): WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin \<= 2.2.0 - Broken Authentication vulnerability (CVSS 4.8, VillaTheme ALD – Dropshipping and Fulfillment for AliExpres…)
- [CVE-2026-57351](https://cve.now/CVE-2026-57351.md): WordPress HandL UTM Grabber plugin \<= 2.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Haktan Suren HandL UTM Grabber)
- [CVE-2026-57350](https://cve.now/CVE-2026-57350.md): WordPress WP Debugging plugin \<= 2.12.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Andy Fragen WP Debugging)
- [CVE-2026-57349](https://cve.now/CVE-2026-57349.md): WordPress WPeMatico RSS Feed Fetcher plugin \<= 2.8.17 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, etruel WPeMatico RSS Feed Fetcher)
- [CVE-2026-57348](https://cve.now/CVE-2026-57348.md): WordPress Paid Member Subscriptions plugin \<= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Cozmoslabs Paid Member Subscriptions)
- [CVE-2026-57347](https://cve.now/CVE-2026-57347.md): WordPress Hotel Booking Lite plugin \<= 6.0.3 - Sensitive Data Exposure vulnerability (CVSS 6.5, jetmonsters Hotel Booking Lite)
- [CVE-2026-57345](https://cve.now/CVE-2026-57345.md): WordPress Internal Links Manager plugin \<= 3.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Webraketen Internal Links Manager)
- [CVE-2026-57344](https://cve.now/CVE-2026-57344.md): WordPress Classified Listing plugin \<= 5.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RadiusTheme Classified Listing)
- [CVE-2026-57343](https://cve.now/CVE-2026-57343.md): WordPress Real Estate 7 theme \<= 3.5.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Contempoinc Real Estate)
- [CVE-2026-57342](https://cve.now/CVE-2026-57342.md): WordPress ShortPixel Adaptive Images plugin \<= 3.11.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ShortPixel Adaptive Images)
- [CVE-2026-49779](https://cve.now/CVE-2026-49779.md): WordPress Tax Exempt for WooCommerce plugin \< 1.9.5 - Path Traversal vulnerability (CVSS 6.5, Addify Tax Exempt for WooCommerce)
- [CVE-2026-42382](https://cve.now/CVE-2026-42382.md): WordPress Audrey theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Audrey)
- [CVE-2026-39448](https://cve.now/CVE-2026-39448.md): WordPress NOWPayments for WooCommerce plugin \<= 1.4.0 - Broken Access Control vulnerability (CVSS 7.5, CoderPress NOWPayments for WooCommerce)
- [CVE-2026-27436](https://cve.now/CVE-2026-27436.md): WordPress Five Star Business Profile and Schema plugin \<= 2.3.19 - Arbitrary Code Execution vulnerability (CVSS 9.1, Rustaurius Five Star Business Profile and Schema)
- [CVE-2026-27433](https://cve.now/CVE-2026-27433.md): WordPress Motors theme \< 5.6.85 - Broken Access Control vulnerability (CVSS 6.5, StylemixThemes Motors)
- [CVE-2026-27430](https://cve.now/CVE-2026-27430.md): WordPress TheFox theme \<= 3.9.76 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, tranmautritam TheFox)
- [CVE-2026-27426](https://cve.now/CVE-2026-27426.md): WordPress Automotive Car Dealership Business theme \<= 13.3.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themesuite Automotive Car Dealership Business)
- [CVE-2026-27425](https://cve.now/CVE-2026-27425.md): WordPress Automotive Listings plugin \<= 18.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themesuite Automotive Listings)
- [CVE-2026-27419](https://cve.now/CVE-2026-27419.md): WordPress Zegen theme \<= 1.1.9 - Arbitrary File Upload vulnerability (CVSS 9.9, Zozothemes Zegen)
- [CVE-2026-27414](https://cve.now/CVE-2026-27414.md): WordPress Werkstatt theme \<= 4.8.3 - PHP Object Injection vulnerability (CVSS 8.8, Fuelthemes Werkstatt)
- [CVE-2026-27412](https://cve.now/CVE-2026-27412.md): WordPress Pearl - Corporate Business theme \<= 3.4.10 - Local File Inclusion vulnerability (CVSS 8.1, StylemixThemes Pearl - Corporate Business)
- [CVE-2026-27408](https://cve.now/CVE-2026-27408.md): WordPress NativeChurch theme \< 4.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, imithemes NativeChurch)
- [CVE-2026-27404](https://cve.now/CVE-2026-27404.md): WordPress LMS theme \<= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Designthemes LMS)
- [CVE-2026-27402](https://cve.now/CVE-2026-27402.md): WordPress Kids Life | Children School WordPress theme \<= 5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Designthemes Kids Life | Children School WordPress)
- [CVE-2026-27060](https://cve.now/CVE-2026-27060.md): WordPress ARMember Premium plugin \< 7.6 - PHP Object Injection vulnerability (CVSS 8.8, Repute Infosystems ARMember Premium)
- [CVE-2025-69156](https://cve.now/CVE-2025-69156.md): WordPress Kids Zone - Children WordPress Theme theme \<= 5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Design themes Kids Zone - Children WordPress Theme)
- [CVE-2025-69155](https://cve.now/CVE-2025-69155.md): WordPress Fitness Zone WordPress Theme theme \<= 5.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Designthemes Fitness Zone WordPress Theme)
- [CVE-2025-69154](https://cve.now/CVE-2025-69154.md): WordPress SpaLab | Beauty Salon WordPress Theme theme \<= 6.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, designthemes SpaLab | Beauty Salon WordPress Theme)
- [CVE-2025-69153](https://cve.now/CVE-2025-69153.md): WordPress Trendy Travel theme \<= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, designthemes Trendy Travel)
- [CVE-2025-69152](https://cve.now/CVE-2025-69152.md): WordPress Artale | Wedding Photography WordPress theme \<= 2.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Artale | Wedding Photography WordPress)
- [CVE-2025-69134](https://cve.now/CVE-2025-69134.md): WordPress OpenAI Chatbot for WordPress – Helper plugin \<= 1.1.4 - Arbitrary Content Deletion vulnerability (CVSS 7.5, Merkulove OpenAI Chatbot for WordPress – Helper)
- [CVE-2025-69133](https://cve.now/CVE-2025-69133.md): WordPress Tourmaster plugin \<= 5.4.5 - Local File Inclusion vulnerability (CVSS 7.5, GoodLayers Tourmaster)
- [CVE-2025-69132](https://cve.now/CVE-2025-69132.md): WordPress Corpkit theme \<= 1.0.5 - Sensitive Data Exposure vulnerability (CVSS 6.5, Zozothemes Corpkit)
- [CVE-2025-69094](https://cve.now/CVE-2025-69094.md): WordPress Unicamp theme \<= 2.2.2 - SQL Injection vulnerability (CVSS 8.5, ThemeMove Unicamp)
- [CVE-2025-66076](https://cve.now/CVE-2025-66076.md): WordPress Woostify Sites Library plugin \<= 1.6.2 - Broken Access Control vulnerability (CVSS 5.3, dylan ngo Woostify Sites Library)
- [CVE-2025-58902](https://cve.now/CVE-2025-58902.md): WordPress Lighthouse theme \<= 1.2.12 - Local File Inclusion vulnerability (CVSS 8.1, AncoraThemes Lighthouse)
- [CVE-2026-11946](https://cve.now/CVE-2026-11946.md): GetEndpoints Memory Exhaustion in open62541 (CVSS 7.5, open62541 project / o6 Automation open62541)
- [CVE-2026-54431](https://cve.now/CVE-2026-54431.md): Improper Data Validation in liboauth2 (CVSS 5.1, OpenIDC liboauth2)
- [CVE-2026-54430](https://cve.now/CVE-2026-54430.md): Server-Site Request Forgery in liboauth2 (CVSS 5.1, OpenIDC liboauth2)
- [CVE-2026-13369](https://cve.now/CVE-2026-13369.md): Ninja Forms - File Uploads \<= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files\[\].data.file\_path' Parameter (CVSS 7.5, SaturdayDrive Ninja Forms - File Uploads)
- [CVE-2026-8441](https://cve.now/CVE-2026-8441.md): WP Review Slider Pro \<= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter (CVSS 7.5, https://wpreviewslider.com/ WP Review Slider Pro)
- [CVE-2026-9145](https://cve.now/CVE-2026-9145.md): Database for Contact Form 7, WPforms, Elementor forms \<= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw\_value' (CVSS 6.5, crmperks Database for Contact Form 7, WPforms, Elementor fo…)
- [CVE-2026-13251](https://cve.now/CVE-2026-13251.md): Perfmatters \<= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter (CVSS 7.5, Perfmatters)
- [CVE-2026-8482](https://cve.now/CVE-2026-8482.md): Information leak in NSRPC client history (CVSS 4.3, Stormshield Network Security)
- [CVE-2026-14029](https://cve.now/CVE-2026-14029.md): Groundhogg \<= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter (CVSS 6.5, trainingbusinesspros Groundhogg — CRM, Newsletters, and Mar…)
- [CVE-2026-10104](https://cve.now/CVE-2026-10104.md): Product Video Gallery for Woocommerce \<= 1.5.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via custom\_thumbnail Parameter (CVSS 4.4, nikhilgadhiya Product Video Gallery for Woocommerce)
- [CVE-2026-13252](https://cve.now/CVE-2026-13252.md): RSS Aggregator by Feedzy \<= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute (CVSS 6.4, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…)
- [CVE-2026-12472](https://cve.now/CVE-2026-12472.md): Kirki \<= 6.0.11 - Missing Authorization to Unauthenticated Arbitrary Email Content Injection (Mail Relay / Phishing) via 'emailBody' and 'emailSubject' Parameters (CVSS 5.3, themeum Kirki – Freeform Page Builder, Website Builder & Cu…)
- [CVE-2026-11896](https://cve.now/CVE-2026-11896.md): My Calendar \<= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter (CVSS 5.3, joedolson My Calendar – Accessible Event Manager)
- [CVE-2026-12134](https://cve.now/CVE-2026-12134.md): JoomSport \<= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season\_groupedit AJAX action (CVSS 4.3, beardev JoomSport – for Sports: Team & League, Football, Ho…)
- [CVE-2026-12122](https://cve.now/CVE-2026-12122.md): Kirki \<= 6.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via kirki\_post\_apis\_nopriv AJAX Action (CVSS 5.3, themeum Kirki – Freeform Page Builder, Website Builder & Cu…)
- [CVE-2026-13459](https://cve.now/CVE-2026-13459.md): JetFormBuilder \<= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter (CVSS 5.3, jetmonsters JetFormBuilder — Dynamic Blocks Form Builder)
- [CVE-2026-9834](https://cve.now/CVE-2026-9834.md): WP Database Backup \<= 7.11 - Authenticated (Administrator+) OS Command Injection via 'wp\_db\_exclude\_table' Parameter (CVSS 7.2, databasebackup WP Database Backup – Unlimited Database & Fi…)
- [CVE-2026-12657](https://cve.now/CVE-2026-12657.md): LatePoint \<= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation via 'service\_id' Parameter (CVSS 5.3, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-9188](https://cve.now/CVE-2026-9188.md): Appointment Bookings for Zoom GoogleMeet and more – Wappointment \<= 2.7.6 - Unauthenticated Insecure Direct Object Reference via Predictable 'edit\_key' / 'appointmentkey' Parameter (CVSS 5.3, Appointment Bookings for Zoom GoogleMeet and more – Wappoin…)
- [CVE-2026-14336](https://cve.now/CVE-2026-14336.md): PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is\_issuer\_k (CVSS 8.2, Eclipse Foundation Eclipse CSI - PIA)
- [CVE-2026-9563](https://cve.now/CVE-2026-9563.md): In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number o (CVSS 7.5, Eclipse Foundation Eclipse Parsson)
- [CVE-2026-8147](https://cve.now/CVE-2026-8147.md): Authorization Bypass in mlflow/mlflow (CVSS 8.1, mlflow/mlflow · mlflow)
- [CVE-2026-33592](https://cve.now/CVE-2026-33592.md): FindServers Memory Exhaustion in open62541 (CVSS 7.5, open62541 project / o6 Automation open62541)
- [CVE-2026-11965](https://cve.now/CVE-2026-11965.md): User Registration & Membership \< 5.2.0 - Unauthenticated Paid Membership Bypass (CVSS 6.5, User Registration & Membership)
- [CVE-2026-11781](https://cve.now/CVE-2026-11781.md): Adminify \< 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX (CVSS 2.7, Adminify)
- [CVE-2026-11578](https://cve.now/CVE-2026-11578.md): Fluent Forms \< 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR (CVSS 2.7, Fluent Forms)
- [CVE-2026-10077](https://cve.now/CVE-2026-10077.md): YOOtheme Pro \< 5.0.35 - Author+ Stored XSS via UIkit Data Attributes (CVSS 6.8, yootheme)
- [CVE-2026-13704](https://cve.now/CVE-2026-13704.md): GiveWP \<= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form (CVSS 6.4, stellarwp GiveWP – Donation Plugin and Fundraising Platform)
- [CVE-2026-5348](https://cve.now/CVE-2026-5348.md): Academy LMS \<= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure (CVSS 5.3, kodezen Academy LMS – WordPress LMS Plugin for Complete eLe…)
- [CVE-2026-10089](https://cve.now/CVE-2026-10089.md): Insert Pages \<= 3.11.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Field Keys (Meta Key Names) (CVSS 6.4, figureone Insert Pages)
- [CVE-2026-11592](https://cve.now/CVE-2026-11592.md): Email Subscribers & Newsletters \<= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig\_es\_handle\_request AJAX Action (CVSS 4.3, Email Subscribers & Newsletters by Icegram Express – Email…)
- [CVE-2026-5821](https://cve.now/CVE-2026-5821.md): Image Optimizer \<= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection (CVSS 8.1, elemntor Image Optimizer – Compress Images and Convert to W…)
- [CVE-2026-13357](https://cve.now/CVE-2026-13357.md): Houzez Property Feed \<= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter (CVSS 4.9, propertyhive Houzez Property Feed)
- [CVE-2026-14249](https://cve.now/CVE-2026-14249.md): Request a Quote Form Plugin \<= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter (CVSS 7.5, emarket-design Request a Quote – Quote Forms for Any WordPr…)
- [CVE-2026-11600](https://cve.now/CVE-2026-11600.md): Envo's Templates & Widgets for Elementor and WooCommerce \<= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting (CVSS 4.3, envothemes Envo's Templates & Widgets for Elementor and Woo…)
- [CVE-2026-57278](https://cve.now/CVE-2026-57278.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57277](https://cve.now/CVE-2026-57277.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57276](https://cve.now/CVE-2026-57276.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57275](https://cve.now/CVE-2026-57275.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57274](https://cve.now/CVE-2026-57274.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57273](https://cve.now/CVE-2026-57273.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57272](https://cve.now/CVE-2026-57272.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57271](https://cve.now/CVE-2026-57271.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57270](https://cve.now/CVE-2026-57270.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57269](https://cve.now/CVE-2026-57269.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57268](https://cve.now/CVE-2026-57268.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57267](https://cve.now/CVE-2026-57267.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57266](https://cve.now/CVE-2026-57266.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57265](https://cve.now/CVE-2026-57265.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-57264](https://cve.now/CVE-2026-57264.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-13132](https://cve.now/CVE-2026-13132.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-13131](https://cve.now/CVE-2026-13131.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3, GeoVision GeoWebPlayer)
- [CVE-2026-13125](https://cve.now/CVE-2026-13125.md): GeoVision GeoWebPlayer 1.1.1.0 Websocket Server function vulnerability (CVSS 8.8, GeoVision GeoWebPlayer)
- [CVE-2026-38968](https://cve.now/CVE-2026-38968.md): ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. (CVSS 9.8)
- [CVE-2026-38970](https://cve.now/CVE-2026-38970.md): pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. (CVSS 7.5)
- [CVE-2026-38971](https://cve.now/CVE-2026-38971.md): ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS\_MAVLink/GCS\_serial\_control.cpp in GCS\_MAVLIN (CVSS 9.1)
- [CVE-2026-38972](https://cve.now/CVE-2026-38972.md): Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. (CVSS 7.8)
- [CVE-2026-52187](https://cve.now/CVE-2026-52187.md): Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohea (CVSS 7.5)
- [CVE-2026-52188](https://cve.now/CVE-2026-52188.md): Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohea (CVSS 6.5)
- [CVE-2026-52189](https://cve.now/CVE-2026-52189.md): Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohea (CVSS 7.5)
- [CVE-2026-52191](https://cve.now/CVE-2026-52191.md): Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohea (CVSS 7.5)
- [CVE-2026-52192](https://cve.now/CVE-2026-52192.md): An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub\_445C5C componen (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.