# CVEs published 2026-07-13

336 CVEs were published on July 13, 2026: 49 critical, 149 high. Days are UTC.

- [CVE-2026-15618](https://cve.now/CVE-2026-15618.md): mosaxiv clawlet exec Safety Guard tool\_exec.go guardExecCommand protection mechanism (CVSS 5.3, mosaxiv clawlet)
- [CVE-2026-15607](https://cve.now/CVE-2026-15607.md): tanstack db Alias Path select.ts select prototype pollution (CVSS 5.3, tanstack db)
- [CVE-2026-15605](https://cve.now/CVE-2026-15605.md): wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash (CVSS 2.3, wandb)
- [CVE-2026-57856](https://cve.now/CVE-2026-57856.md): Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API (CVSS 8.7, Cockpit HQ Cockpit CMS)
- [CVE-2026-58489](https://cve.now/CVE-2026-58489.md): HedgeDoc: CSRF in GitHub Gist export callback (CVSS 6.8, hedgedoc)
- [CVE-2026-57855](https://cve.now/CVE-2026-57855.md): Cockpit CMS Missing Authorization in Bucket File Storage API (CVSS 8.7, Cockpit HQ Cockpit CMS)
- [CVE-2026-58102](https://cve.now/CVE-2026-58102.md): Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv\_exts (CVSS 9.1, JONASBN Crypt::OpenSSL::X509)
- [CVE-2026-58101](https://cve.now/CVE-2026-58101.md): Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference (CVSS 7.5, JONASBN Crypt::OpenSSL::X509)
- [CVE-2026-58486](https://cve.now/CVE-2026-58486.md): HedgeDoc: Denial-of-service via YAML alias expansion in note frontmatter (CVSS 8.3, hedgedoc)
- [CVE-2026-15598](https://cve.now/CVE-2026-15598.md): antv layout object.js setNestedValue prototype pollution (CVSS 5.3, antv layout)
- [CVE-2026-58487](https://cve.now/CVE-2026-58487.md): HedgeDoc: Stored HTML injection via email local-part (CVSS 5.1, hedgedoc)
- [CVE-2026-56877](https://cve.now/CVE-2026-56877.md): The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter a (CVSS 6.3, Skillable SCORM Lab Launch Integration)
- [CVE-2026-15597](https://cve.now/CVE-2026-15597.md): SourceCodester Class and Exam Timetabling System edit\_exam2.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-58488](https://cve.now/CVE-2026-58488.md): HedgeDoc: Rate-limit bypass via CF-Connecting-IP header spoofing (CVSS 6.9, hedgedoc)
- [CVE-2026-62328](https://cve.now/CVE-2026-62328.md): 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints (CVSS 8.7, decolua 9Router · 9router)
- [CVE-2026-62327](https://cve.now/CVE-2026-62327.md): 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats (CVSS 9.3, decolua 9Router · 9router)
- [CVE-2026-15680](https://cve.now/CVE-2026-15680.md): Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability (CVSS 7.5, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2026-15681](https://cve.now/CVE-2026-15681.md): AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability (CVSS 4.7, AnyDesk)
- [CVE-2026-62185](https://cve.now/CVE-2026-62185.md): Argo CD Helm Chart \< 10.0.0 Missing Network Policy RCE (CVSS 8.6, argoproj argo-helm)
- [CVE-2026-15682](https://cve.now/CVE-2026-15682.md): AnyDesk Support Information Link Following Denial-of-Service Vulnerability (CVSS 4.7, AnyDesk)
- [CVE-2026-15683](https://cve.now/CVE-2026-15683.md): Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability (CVSS 7.5, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2026-15684](https://cve.now/CVE-2026-15684.md): Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability (CVSS 7.3, Glarysoft Glary Utilities)
- [CVE-2026-62200](https://cve.now/CVE-2026-62200.md): OpenClaw \< 2026.6.6 Authentication Bypass via Git ext transport (CVSS 8.7, OpenClaw)
- [CVE-2026-62199](https://cve.now/CVE-2026-62199.md): OpenClaw \< 2026.6.6 Authentication Bypass via Environment Filtering (CVSS 8.7, OpenClaw)
- [CVE-2026-62198](https://cve.now/CVE-2026-62198.md): OpenClaw 2026.5.28 \< 2026.6.6 Authorization Bypass via Web Search (CVSS 5.3, OpenClaw)
- [CVE-2026-62197](https://cve.now/CVE-2026-62197.md): OpenClaw \< 2026.6.6 Policy Bypass via CDP Discovery (CVSS 6.3, OpenClaw)
- [CVE-2026-62196](https://cve.now/CVE-2026-62196.md): OpenClaw 2026.3.22 \< 2026.6.6 Authorization Bypass via WhatsApp Group IDs (CVSS 8.7, OpenClaw)
- [CVE-2026-62195](https://cve.now/CVE-2026-62195.md): OpenClaw 2026.5.20 \< 2026.6.6 Authorization Bypass via MCP loopback (CVSS 8.7, OpenClaw)
- [CVE-2026-62194](https://cve.now/CVE-2026-62194.md): OpenClaw 2026.5.20 \< 2026.6.9 Privilege Escalation via Plugin Install (CVSS 8.7, OpenClaw)
- [CVE-2026-62193](https://cve.now/CVE-2026-62193.md): OpenClaw 2026.6.5 \< 2026.6.9 Authentication Bypass via Plugin Install (CVSS 6.9, OpenClaw)
- [CVE-2026-62192](https://cve.now/CVE-2026-62192.md): OpenClaw 2026.6.6 \< 2026.6.9 Authorization Bypass (CVSS 7.2, OpenClaw)
- [CVE-2026-62191](https://cve.now/CVE-2026-62191.md): OpenClaw 2026.6.6 \< 2026.6.9 Authorization Bypass via Message Mutations (CVSS 7.1, OpenClaw)
- [CVE-2026-62190](https://cve.now/CVE-2026-62190.md): OpenClaw \< 2026.6.9 Authorization Bypass via flock wrapper (CVSS 8.7, OpenClaw)
- [CVE-2026-62189](https://cve.now/CVE-2026-62189.md): OpenClaw \< 2026.6.9 Symlink Following via Mirror Sync (CVSS 7.6, OpenClaw)
- [CVE-2026-62188](https://cve.now/CVE-2026-62188.md): OpenClaw \< 2026.6.9 Feishu Authorization Bypass (CVSS 8.6, openclaw feishu · @openclaw/feishu)
- [CVE-2026-62187](https://cve.now/CVE-2026-62187.md): OpenClaw \< 2026.6.9 Feishu tools Authorization Bypass (CVSS 8.6, openclaw feishu · @openclaw/feishu)
- [CVE-2026-62186](https://cve.now/CVE-2026-62186.md): OpenClaw \< 2026.6.8 Authorization Bypass via HTTP Model Override (CVSS 7.2, OpenClaw)
- [CVE-2026-62184](https://cve.now/CVE-2026-62184.md): luci-app-banip Log Monitor IP Extraction Bypass (CVSS 8.7, openwrt luci-app-banip)
- [CVE-2026-15685](https://cve.now/CVE-2026-15685.md): Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability (CVSS 7.5, Ollama)
- [CVE-2026-15596](https://cve.now/CVE-2026-15596.md): SourceCodester Class and Exam Timetabling System subject.php cross site scripting (CVSS 5.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-61458](https://cve.now/CVE-2026-61458.md): PasswordPusher \< 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint (CVSS 8.7, pglombardo PasswordPusher)
- [CVE-2026-59801](https://cve.now/CVE-2026-59801.md): 9Router 0.4.41 - Unauthenticated API Exposure via /api/providers (CVSS 9.3, decolua 9Router · 9router)
- [CVE-2026-58500](https://cve.now/CVE-2026-58500.md): MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI) (CVSS 8.2, appium-mcp)
- [CVE-2026-58411](https://cve.now/CVE-2026-58411.md): ChurchCRM has Reflected Cross-Site Scripting (XSS) via unsanitized request parameter names and values (CVSS 7.0, ChurchCRM CRM)
- [CVE-2026-62242](https://cve.now/CVE-2026-62242.md): Spring Boot Admin Server \< 4.1.2 SSRF via Unauthenticated Instance Registration (CVSS 7.7, codecentric spring-boot-admin)
- [CVE-2026-62240](https://cve.now/CVE-2026-62240.md): CrewAI \< 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools (CVSS 8.3, crewAIInc crewAI · crewai-tools)
- [CVE-2026-62239](https://cve.now/CVE-2026-62239.md): FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py (CVSS 5.3, Dao-AILab flash-attention)
- [CVE-2026-15595](https://cve.now/CVE-2026-15595.md): SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting (CVSS 5.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-58410](https://cve.now/CVE-2026-58410.md): ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ records (CVSS 7.1, ChurchCRM CRM)
- [CVE-2026-15594](https://cve.now/CVE-2026-15594.md): waooAI waoowaoo Media hash.ts stablePublicIdFromStorageKey improper authorization (CVSS 6.3, waooAI waoowaoo)
- [CVE-2026-58409](https://cve.now/CVE-2026-58409.md): ChurchCRM: Authenticated Remote Code Execution (RCE) via Malicious Plugin Upload (CVSS 9.1, ChurchCRM CRM)
- [CVE-2026-48363](https://cve.now/CVE-2026-48363.md): ColdFusion | Uncontrolled Search Path Element (CWE-427) (CVSS 8.2, Adobe ColdFusion)
- [CVE-2026-48364](https://cve.now/CVE-2026-48364.md): ColdFusion | Uncontrolled Search Path Element (CWE-427) (CVSS 8.2, Adobe ColdFusion)
- [CVE-2026-58408](https://cve.now/CVE-2026-58408.md): ChurchCRM : Broken Access Control in \`CSVCreateFile.php\` Allows Low-Privileged Users to Export All Members' PII (CVSS 6.5, ChurchCRM CRM)
- [CVE-2026-12385](https://cve.now/CVE-2026-12385.md): Smart Slider 3 \<= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP\_Query Parameter Injection via 'keyword' Parameter (CVSS 4.3, nextendweb Smart Slider)
- [CVE-2026-12536](https://cve.now/CVE-2026-12536.md): Avada Builder \<= 3.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Title (CVSS 6.4, themefusion Avada (Fusion) Builder)
- [CVE-2026-55771](https://cve.now/CVE-2026-55771.md): CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities (CVSS 8.8, cedar-policy cedar-java · com.cedarpolicy:cedar-java)
- [CVE-2026-55773](https://cve.now/CVE-2026-55773.md): CedarJava has a policy injection vulnerability (CVSS 8.8, cedar-policy cedar-java · com.cedarpolicy:cedar-java)
- [CVE-2026-55772](https://cve.now/CVE-2026-55772.md): CedarJava has a type confusion vulnerability (CVSS 8.8, cedar-policy cedar-java · com.cedarpolicy:cedar-java)
- [CVE-2026-14906](https://cve.now/CVE-2026-14906.md): Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS (CVSS 5.3, Mozilla Firefox for iOS)
- [CVE-2026-6875](https://cve.now/CVE-2026-6875.md): Sandbox Escape in ServiceNow AI Platform (CVSS 9.5, ServiceNow AI Platform)
- [CVE-2026-49972](https://cve.now/CVE-2026-49972.md): Laravel-Mediable \< 7.0.0 File Upload RCE via Extension Bypass (CVSS 7.7, plank laravel-mediable)
- [CVE-2026-49971](https://cve.now/CVE-2026-49971.md): Laravel-Mediable \< 7.0.0 Stored XSS via SVG File Upload (CVSS 5.3, plank laravel-mediable)
- [CVE-2026-49970](https://cve.now/CVE-2026-49970.md): Laravel-Mediable \< 7.0.0 Path Traversal via File::sanitizePath() (CVSS 8.7, plank laravel-mediable · plank/laravel-mediable)
- [CVE-2026-49969](https://cve.now/CVE-2026-49969.md): Laravel-Mediable \< 7.0.0 SSRF via RemoteUrlAdapter URL Handling (CVSS 5.3, plank laravel-mediable)
- [CVE-2026-58228](https://cve.now/CVE-2026-58228.md): Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via \<.link\> (CVSS 5.1, phoenixframework phoenix\_live\_view)
- [CVE-2026-60103](https://cve.now/CVE-2026-60103.md): Blender 3.0.0 - 5.1.2 Out-of-Bounds Read via crafted .blend SDNA block (CVSS 6.8, blender)
- [CVE-2026-53365](https://cve.now/CVE-2026-53365.md): vsock/virtio: fix zerocopy completion for multi-skb sends (CVSS 7.8, Linux)
- [CVE-2026-53364](https://cve.now/CVE-2026-53364.md): Bluetooth: hci\_conn: Fix memory leak in hci\_le\_big\_terminate() (no CVSS, Linux)
- [CVE-2026-61505](https://cve.now/CVE-2026-61505.md): Rejetto HFS \< 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter (CVSS 6.9, rejetto hfs)
- [CVE-2026-61504](https://cve.now/CVE-2026-61504.md): Rejetto HFS \< 3.2.1 Stored XSS via File Names in Basic Web Listing (CVSS 5.1, rejetto hfs)
- [CVE-2026-61503](https://cve.now/CVE-2026-61503.md): Rejetto HFS \< 3.2.1 Username Enumeration via Login Response Differences (CVSS 6.9, rejetto hfs)
- [CVE-2026-61502](https://cve.now/CVE-2026-61502.md): Rejetto HFS \< 3.2.1 Cross-Site Request Forgery via GET Requests (CVSS 5.1, rejetto hfs)
- [CVE-2026-61463](https://cve.now/CVE-2026-61463.md): Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account (CVSS 8.7, go-shiori shiori)
- [CVE-2026-61501](https://cve.now/CVE-2026-61501.md): Rejetto HFS \< 3.2.1 Stored XSS in Admin Log Viewer (CVSS 5.3, rejetto hfs)
- [CVE-2026-61500](https://cve.now/CVE-2026-61500.md): Rejetto HFS \< 3.2.1 Session Forgery via Predictable Signing Key (CVSS 9.3, rejetto hfs)
- [CVE-2026-61462](https://cve.now/CVE-2026-61462.md): mcp-gitlab Path Traversal via job\_id Parameter (CVSS 9.2, zereight mcp-gitlab)
- [CVE-2026-13221](https://cve.now/CVE-2026-13221.md): Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl\_study\_chunk (CVSS 9.1, perl)
- [CVE-2026-57432](https://cve.now/CVE-2026-57432.md): Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S\_measure\_struct leading to an out-of-bounds heap read in pack and unpack (CVSS 8.4, perl)
- [CVE-2026-57433](https://cve.now/CVE-2026-57433.md): Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX\_HOOK record (CVSS 9.8, HAARG Storable)
- [CVE-2026-59245](https://cve.now/CVE-2026-59245.md): Apache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access\_control privilege escalation via resource\_name() collision) (CVSS 8.1, Apache Software Foundation Apache Airflow FAB provider)
- [CVE-2026-58065](https://cve.now/CVE-2026-58065.md): Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification (CVSS 8.1, Apache Software Foundation Apache Airflow Git provider)
- [CVE-2026-6847](https://cve.now/CVE-2026-6847.md): Unauthenticated Remote Code Execution in ThemisNETPanel (CVSS 9.3, 4real ThemisNETPanel)
- [CVE-2026-61498](https://cve.now/CVE-2026-61498.md): Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen\_graphs.php (CVSS 9.3, VITEC Flamingo)
- [CVE-2026-60121](https://cve.now/CVE-2026-60121.md): Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php (CVSS 9.3, VITEC Flamingo)
- [CVE-2026-40553](https://cve.now/CVE-2026-40553.md): Stack-based buffer overflow in gawk (CVSS 5.1, GNU gawk)
- [CVE-2026-40469](https://cve.now/CVE-2026-40469.md): Heap buffer overflow in gawk (CVSS 5.1, GNU gawk)
- [CVE-2026-40468](https://cve.now/CVE-2026-40468.md): Heap buffer overflow in gawk (CVSS 2.1, GNU gawk)
- [CVE-2026-40467](https://cve.now/CVE-2026-40467.md): Use after free in gawk (CVSS 5.1, GNU gawk)
- [CVE-2026-15584](https://cve.now/CVE-2026-15584.md): Redhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root (CVSS 7.5, Pen Drive Powered by Red Hat Lightspeed)
- [CVE-2026-15559](https://cve.now/CVE-2026-15559.md): CodeAstro Simple Online Leave Management System POST accept.php sql injection (CVSS 5.3, CodeAstro Simple Online Leave Management System)
- [CVE-2026-62147](https://cve.now/CVE-2026-62147.md): Tempo-operator: tempo operator: query rbac bypass (CVSS 6.5, Red Hat OpenShift distributed tracing)
- [CVE-2026-15558](https://cve.now/CVE-2026-15558.md): CodeAstro Simple Online Leave Management System deletemp.php sql injection (CVSS 5.3, CodeAstro Simple Online Leave Management System)
- [CVE-2026-12257](https://cve.now/CVE-2026-12257.md): Remote code execution in Mura Software’s CMS (CVSS 9.3, Mura Software CMS)
- [CVE-2026-6541](https://cve.now/CVE-2026-6541.md): Unscoped updates to other playbooks' metric configuration (CVSS 4.3, Mattermost)
- [CVE-2026-9820](https://cve.now/CVE-2026-9820.md): Mattermost schemes teams endpoint exposes private team invite IDs (CVSS 3.8, Mattermost)
- [CVE-2026-9824](https://cve.now/CVE-2026-9824.md): Remote cluster metadata enumeration via /share-channel autocomplete (CVSS 4.3, Mattermost)
- [CVE-2026-14934](https://cve.now/CVE-2026-14934.md): Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise (CVSS 9.4, Google Cloud BigQuery · Google Cloud Dataform +1)
- [CVE-2026-4765](https://cve.now/CVE-2026-4765.md): Self Cross-Site Scripting (Self-XSS) in Tallos Chat by RD Station Conversas (CVSS 0.0, RD Station Conversas Tallos Chat)
- [CVE-2026-13014](https://cve.now/CVE-2026-13014.md): Remote Code Execution vulnerability in "Suspicious" application (CVSS 9.2, Thales CERT Suspicious)
- [CVE-2026-14846](https://cve.now/CVE-2026-14846.md): Incorrect neutralisation in the PrestaShop firmware (CVSS 4.5, PrestaShop The firmware)
- [CVE-2026-15557](https://cve.now/CVE-2026-15557.md): waooAI waoowaoo Internal Task Header api-auth.ts requireProjectAuthLight improper authentication (CVSS 6.9, waooAI waoowaoo)
- [CVE-2026-22103](https://cve.now/CVE-2026-22103.md): Command injection in NPC start web endpoint (CVSS 9.3, EVbee DC-80)
- [CVE-2026-22098](https://cve.now/CVE-2026-22098.md): Sensitive information is written to logs (CVSS 9.2, EVbee DC-80)
- [CVE-2026-22097](https://cve.now/CVE-2026-22097.md): Missing firmware validation allows remote code execution (CVSS 9.3, EVbee DC-80)
- [CVE-2026-22099](https://cve.now/CVE-2026-22099.md): Missing authentication for Bluetooth communication (CVSS 8.7, EVbee DC-80)
- [CVE-2026-22102](https://cve.now/CVE-2026-22102.md): Arbitrary file overwrite through certificate update functionality (CVSS 9.3, EVbee DC-80)
- [CVE-2026-22096](https://cve.now/CVE-2026-22096.md): Missing authentication for webserver endpoints (CVSS 9.3, EVbee DC-80)
- [CVE-2026-22100](https://cve.now/CVE-2026-22100.md): Comnand injection in OCPP ReserveLogin message (CVSS 8.6, EVbee DC-80)
- [CVE-2026-22095](https://cve.now/CVE-2026-22095.md): Command injection in diagnosis web endpoint (CVSS 9.3, EVbee DC-80)
- [CVE-2026-22093](https://cve.now/CVE-2026-22093.md): Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app (CVSS 9.5, EVbee Service)
- [CVE-2026-41041](https://cve.now/CVE-2026-41041.md): Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints. (CVSS 9.1, Apache Software Foundation Apache Gravitino · apache-gravit…)
- [CVE-2026-49876](https://cve.now/CVE-2026-49876.md): Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs (CVSS 6.5, Apache Software Foundation Apache Gravitino · apache-gravit…)
- [CVE-2026-15548](https://cve.now/CVE-2026-15548.md): Shibby Tomato DNS List Rendering httpd sub\_407220 stack-based overflow (CVSS 8.7, Shibby Tomato)
- [CVE-2026-61985](https://cve.now/CVE-2026-61985.md): WordPress Car Rental Manager plugin \<= 1.3.7 - Broken Access Control vulnerability (CVSS 5.3, magepeopleteam Car Rental Manager)
- [CVE-2026-61977](https://cve.now/CVE-2026-61977.md): WordPress JetSearch plugin \<= 3.6.1.2 - Sensitive Data Exposure vulnerability (CVSS 5.3, Crocoblock JetSearch)
- [CVE-2026-61983](https://cve.now/CVE-2026-61983.md): WordPress Church Admin plugin \<= 5.0.30 - Broken Access Control vulnerability (CVSS 5.3, andy\_moyle Church Admin)
- [CVE-2026-61976](https://cve.now/CVE-2026-61976.md): WordPress JetBlocks For Elementor plugin \<= 1.5.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Crocoblock JetBlocks For Elementor)
- [CVE-2026-61975](https://cve.now/CVE-2026-61975.md): WordPress JetReviews plugin \<= 3.0.1 - Sensitive Data Exposure vulnerability (CVSS 5.3, Crocoblock JetReviews)
- [CVE-2026-61971](https://cve.now/CVE-2026-61971.md): WordPress User Profile Picture plugin \<= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 2.7, Cozmoslabs User Profile Picture)
- [CVE-2026-61970](https://cve.now/CVE-2026-61970.md): WordPress Auto Featured Image (Auto Post Thumbnail) plugin \<= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, Themeisle Auto Featured Image)
- [CVE-2026-61968](https://cve.now/CVE-2026-61968.md): WordPress myCred plugin \<= 3.1.2 - Broken Access Control vulnerability (CVSS 5.4, Saad Iqbal myCred)
- [CVE-2026-61958](https://cve.now/CVE-2026-61958.md): WordPress License Manager for WooCommerce plugin \<= 3.0.17 - Arbitrary Content Deletion vulnerability (CVSS 5.4, Saad Iqbal License Manager for WooCommerce)
- [CVE-2026-61956](https://cve.now/CVE-2026-61956.md): WordPress ووسلام – همگام سازی ووکامرس و باسلام plugin \<= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, hamsalam ووسلام &#8211; همگام سازی ووکامرس و باسلام)
- [CVE-2026-61955](https://cve.now/CVE-2026-61955.md): WordPress گرویتی فرم فارسی plugin \<= 3.0.2 - SQL Injection vulnerability (CVSS 7.6, Hannan گرویتی فرم فارسی)
- [CVE-2026-59523](https://cve.now/CVE-2026-59523.md): WordPress Simply Schedule Appointments plugin \<= 1.6.11.11 - Broken Access Control vulnerability (CVSS 6.5, NSquared Simply Schedule Appointments)
- [CVE-2026-61952](https://cve.now/CVE-2026-61952.md): WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin \<= 1.8.21 - Broken Access Control vulnerability (CVSS 4.9, Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor)
- [CVE-2026-59521](https://cve.now/CVE-2026-59521.md): WordPress Real Testimonials plugin \<= 3.1.15 - PHP Object Injection vulnerability (CVSS 7.2, ShapedPlugin Real Testimonials)
- [CVE-2026-59518](https://cve.now/CVE-2026-59518.md): WordPress Directorist plugin \<= 8.8.2 - PHP Object Injection vulnerability (CVSS 9.8, wpWax Directorist)
- [CVE-2026-59516](https://cve.now/CVE-2026-59516.md): WordPress ICS Calendar plugin \<= 12.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Room 34 Creative Services ICS Calendar)
- [CVE-2026-59515](https://cve.now/CVE-2026-59515.md): WordPress AIWU plugin \<= 1.5.4 - SQL Injection vulnerability (CVSS 9.3, Sergey AIWU)
- [CVE-2026-57816](https://cve.now/CVE-2026-57816.md): WordPress Funnel Builder by FunnelKit plugin \<= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Funnel Builder by FunnelKit)
- [CVE-2026-57815](https://cve.now/CVE-2026-57815.md): WordPress Forminator plugin \<= 1.55.0.2 - Arbitrary File Download vulnerability (CVSS 7.5, WPMU DEV - Your All-in-One WordPress Platform Forminator)
- [CVE-2026-57814](https://cve.now/CVE-2026-57814.md): WordPress Forminator plugin \<= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPMU DEV - Your All-in-One WordPress Platform Forminator)
- [CVE-2026-57813](https://cve.now/CVE-2026-57813.md): WordPress MailOptin plugin \<= 1.2.77.3 - Privilege Escalation vulnerability (CVSS 9.8, properfraction MailOptin)
- [CVE-2026-57812](https://cve.now/CVE-2026-57812.md): WordPress Simply Schedule Appointments plugin \<= 1.6.12.4 - Broken Access Control vulnerability (CVSS 6.5, NSquared Simply Schedule Appointments)
- [CVE-2026-57811](https://cve.now/CVE-2026-57811.md): WordPress Realtyna Organic IDX plugin plugin \<= 5.2.0 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, Realtyna Organic IDX plugin)
- [CVE-2026-57810](https://cve.now/CVE-2026-57810.md): WordPress APIExperts Square for WooCommerce plugin \<= 4.7.4 - SQL Injection vulnerability (CVSS 8.5, Saad Iqbal APIExperts Square for WooCommerce)
- [CVE-2026-57805](https://cve.now/CVE-2026-57805.md): WordPress Tonda theme \<= 2.5 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Tonda)
- [CVE-2026-57804](https://cve.now/CVE-2026-57804.md): WordPress TheGem Theme Elements (for Elementor) plugin \< 5.12.1.1 - Local File Inclusion vulnerability (CVSS 7.5, CodexThemes TheGem Theme Elements)
- [CVE-2026-57803](https://cve.now/CVE-2026-57803.md): WordPress Struktur Core plugin \< 2.7 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Struktur Core)
- [CVE-2026-57802](https://cve.now/CVE-2026-57802.md): WordPress Struktur theme \< 2.7 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Struktur)
- [CVE-2026-57801](https://cve.now/CVE-2026-57801.md): WordPress SetSail theme \<= 2.1 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes SetSail)
- [CVE-2026-57800](https://cve.now/CVE-2026-57800.md): WordPress Overworld theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 7.5, Edge-Themes Overworld)
- [CVE-2026-57799](https://cve.now/CVE-2026-57799.md): WordPress Nuss theme \<= 1.3.6 - Local File Inclusion vulnerability (CVSS 7.5, uxper Nuss)
- [CVE-2026-57797](https://cve.now/CVE-2026-57797.md): WordPress EduMall theme \<= 4.5.1 - Broken Access Control vulnerability (CVSS 4.3, ThemeMove EduMall)
- [CVE-2026-57798](https://cve.now/CVE-2026-57798.md): WordPress NewsPlus Shortcodes plugin \<= 4.2.0 - Local File Inclusion vulnerability (CVSS 7.5, SaurabhSharma NewsPlus Shortcodes)
- [CVE-2026-57796](https://cve.now/CVE-2026-57796.md): WordPress Leedo theme \<= 3.0.0 - Local File Inclusion vulnerability (CVSS 7.5, VLThemes Leedo)
- [CVE-2026-57795](https://cve.now/CVE-2026-57795.md): WordPress Kitchor theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 7.5, themelexus Kitchor)
- [CVE-2026-57794](https://cve.now/CVE-2026-57794.md): WordPress Golo Framework plugin \<= 1.7.3 - Local File Inclusion vulnerability (CVSS 7.5, uxper Golo Framework)
- [CVE-2026-57793](https://cve.now/CVE-2026-57793.md): WordPress Flow theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 7.5, Elated-Themes Flow)
- [CVE-2026-57792](https://cve.now/CVE-2026-57792.md): WordPress Dør theme \<= 2.4.1 - Local File Inclusion vulnerability (CVSS 7.5, Mikado-Themes Dør)
- [CVE-2026-57791](https://cve.now/CVE-2026-57791.md): WordPress Brook theme \<= 2.9.0 - Local File Inclusion vulnerability (CVSS 7.5, ThemeMove Brook)
- [CVE-2026-57789](https://cve.now/CVE-2026-57789.md): WordPress Aqua theme \<= 5.1.2 - Local File Inclusion vulnerability (CVSS 7.5, jwsthemes Aqua)
- [CVE-2026-57790](https://cve.now/CVE-2026-57790.md): WordPress Billey theme \<= 2.1.8 - Local File Inclusion vulnerability (CVSS 7.5, ThemeMove Billey)
- [CVE-2026-57788](https://cve.now/CVE-2026-57788.md): WordPress Aalto theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 7.5, Edge-Themes Aalto)
- [CVE-2026-57786](https://cve.now/CVE-2026-57786.md): WordPress WorkScout-Core plugin \<= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability (CVSS 8.8, purethemes WorkScout-Core)
- [CVE-2026-57787](https://cve.now/CVE-2026-57787.md): WordPress CWS SVGicons plugin \<= 1.5.5 - SQL Injection vulnerability (CVSS 8.5, CreativeWS CWS SVGicons)
- [CVE-2026-57783](https://cve.now/CVE-2026-57783.md): WordPress Speaker plugin \<= 4.1.13 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, merkulove Speaker)
- [CVE-2026-57782](https://cve.now/CVE-2026-57782.md): WordPress Universal Clocks plugin \<= 1.2.0 - Broken Access Control vulnerability (CVSS 5.3, PressTigers Universal Clocks)
- [CVE-2026-57781](https://cve.now/CVE-2026-57781.md): WordPress MeetingHub plugin \<= 1.25.10 - Broken Access Control vulnerability (CVSS 5.3, Sovlix MeetingHub)
- [CVE-2026-57780](https://cve.now/CVE-2026-57780.md): WordPress Envision Page Builder plugin \<= 0.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Plugin Envision Envision Page Builder)
- [CVE-2026-57779](https://cve.now/CVE-2026-57779.md): WordPress Fascinate theme \<= 1.1.5 - Broken Access Control vulnerability (CVSS 5.3, themebeez Fascinate)
- [CVE-2026-57778](https://cve.now/CVE-2026-57778.md): WordPress Booking calendar, Appointment Booking System plugin \<= 3.2.36 - Broken Access Control vulnerability (CVSS 5.3, wpdevart Booking calendar, Appointment Booking System)
- [CVE-2026-57776](https://cve.now/CVE-2026-57776.md): WordPress VW Wedding theme \<= 1.3.7 - Broken Access Control vulnerability (CVSS 5.3, vowelweb VW Wedding)
- [CVE-2026-57774](https://cve.now/CVE-2026-57774.md): WordPress VW Food Corner theme \<= 1.1.0 - Broken Access Control vulnerability (CVSS 5.3, vowelweb VW Food Corner)
- [CVE-2026-57773](https://cve.now/CVE-2026-57773.md): WordPress Advanced Shipment Tracking for WooCommerce plugin \<= 4.0 - SQL Injection vulnerability (CVSS 7.6, Zorem Advanced Shipment Tracking for WooCommerce)
- [CVE-2026-57772](https://cve.now/CVE-2026-57772.md): WordPress WP Inventory Manager plugin \<= 2.4.0 - SQL Injection vulnerability (CVSS 8.5, WP Inventory Manager)
- [CVE-2026-57771](https://cve.now/CVE-2026-57771.md): WordPress GD Rating System plugin \<= 3.7 - SQL Injection vulnerability (CVSS 8.5, Milan Petrovic GD Rating System)
- [CVE-2026-57770](https://cve.now/CVE-2026-57770.md): WordPress Grand Photography theme \<= 5.7.8 - PHP Object Injection vulnerability (CVSS 9.8, ThemeGoods Grand Photography)
- [CVE-2026-57768](https://cve.now/CVE-2026-57768.md): WordPress Houzez Login Register plugin \<= 3.3.3 - Privilege Escalation vulnerability (CVSS 8.2, favethemes Houzez Login Register)
- [CVE-2026-57745](https://cve.now/CVE-2026-57745.md): WordPress RT-Theme 18 | Extensions plugin \<= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, stmcan RT-Theme 18 | Extensions)
- [CVE-2026-57744](https://cve.now/CVE-2026-57744.md): WordPress RT-Theme 18 | Extensions plugin \<= 2.5 - PHP Object Injection vulnerability (CVSS 9.8, stmcan RT-Theme 18 | Extensions)
- [CVE-2026-57743](https://cve.now/CVE-2026-57743.md): WordPress RT-Theme 18 | Extensions plugin \<= 2.5 - Local File Inclusion vulnerability (CVSS 8.1, stmcan RT-Theme 18 | Extensions)
- [CVE-2026-57741](https://cve.now/CVE-2026-57741.md): WordPress AcyMailing SMTP Newsletter plugin \<= 10.11.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, AcyMailing Newsletter Team AcyMailing SMTP Newsletter)
- [CVE-2026-57738](https://cve.now/CVE-2026-57738.md): WordPress 777 theme \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8, axiomthemes)
- [CVE-2026-57739](https://cve.now/CVE-2026-57739.md): WordPress AcyMailing SMTP Newsletter plugin \<= 10.11.0 - SQL Injection vulnerability (CVSS 9.3, AcyMailing Newsletter Team AcyMailing SMTP Newsletter)
- [CVE-2026-57740](https://cve.now/CVE-2026-57740.md): WordPress AcyMailing SMTP Newsletter plugin \<= 10.11.1 - Broken Access Control vulnerability (CVSS 7.1, AcyMailing Newsletter Team AcyMailing SMTP Newsletter)
- [CVE-2026-57734](https://cve.now/CVE-2026-57734.md): WordPress tagDiv Composer plugin \<= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, tagDiv Composer)
- [CVE-2026-57733](https://cve.now/CVE-2026-57733.md): WordPress tagDiv Cloud Library plugin \<= 3.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, tagDiv Cloud Library)
- [CVE-2026-57732](https://cve.now/CVE-2026-57732.md): WordPress tagDiv Opt-In Builder plugin \<= 1.7.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, tagDiv Opt-In Builder)
- [CVE-2026-57729](https://cve.now/CVE-2026-57729.md): WordPress Flatsome theme \<= 3.20.5 - Broken Access Control vulnerability (CVSS 7.5, UX-themes Flatsome)
- [CVE-2026-57724](https://cve.now/CVE-2026-57724.md): WordPress Kirki plugin \<= 6.0.12 - PHP Object Injection vulnerability (CVSS 9.8, Themeum Kirki)
- [CVE-2026-57725](https://cve.now/CVE-2026-57725.md): WordPress Kirki plugin \<= 6.0.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themeum Kirki)
- [CVE-2026-57726](https://cve.now/CVE-2026-57726.md): WordPress Kirki plugin \<= 6.0.12 - SQL Injection vulnerability (CVSS 9.3, Themeum Kirki)
- [CVE-2026-57728](https://cve.now/CVE-2026-57728.md): WordPress Flatsome theme \<= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, UX-themes Flatsome)
- [CVE-2026-57727](https://cve.now/CVE-2026-57727.md): WordPress Kirki plugin \<= 6.2.0 - Broken Access Control vulnerability (CVSS 7.5, Themeum Kirki)
- [CVE-2026-57719](https://cve.now/CVE-2026-57719.md): WordPress Aimogen Pro plugin \<= 2.8.3 - Arbitrary File Upload vulnerability (CVSS 10.0, CodeRevolution Aimogen Pro)
- [CVE-2026-57718](https://cve.now/CVE-2026-57718.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Unlimited Elements For Elementor)
- [CVE-2026-57715](https://cve.now/CVE-2026-57715.md): WordPress Fluent CRM plugin \<= 3.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPManageNinja Fluent CRM)
- [CVE-2026-57714](https://cve.now/CVE-2026-57714.md): WordPress LatePoint plugin \<= 5.6.3 - SQL Injection vulnerability (CVSS 9.3, LatePoint)
- [CVE-2026-57713](https://cve.now/CVE-2026-57713.md): WordPress Events Manager plugin \<= 7.3.6 - PHP Object Injection vulnerability (CVSS 8.8, Marcus (aka @msykes) Events Manager)
- [CVE-2026-57712](https://cve.now/CVE-2026-57712.md): WordPress WPZOOM Portfolio plugin \<= 1.4.29 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPZOOM Portfolio)
- [CVE-2026-57710](https://cve.now/CVE-2026-57710.md): WordPress WoowBot Pro Max plugin \<= 14.1.7 - Arbitrary File Upload vulnerability (CVSS 9.9, quantumcloud WoowBot Pro Max)
- [CVE-2026-57711](https://cve.now/CVE-2026-57711.md): WordPress SupportCandy plugin \<= 3.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PSM Plugins SupportCandy)
- [CVE-2026-57707](https://cve.now/CVE-2026-57707.md): WordPress Simple Business Directory Pro plugin \<= 15.9.4 - SQL Injection vulnerability (CVSS 9.3, quantumcloud Simple Business Directory Pro)
- [CVE-2026-57709](https://cve.now/CVE-2026-57709.md): WordPress Membership For WooCommerce plugin \<= 3.1.0 - Arbitrary File Deletion vulnerability (CVSS 8.6, WP Swings Membership For WooCommerce)
- [CVE-2026-57708](https://cve.now/CVE-2026-57708.md): WordPress Contact Form Entries plugin \<= 1.5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CRM Perks Contact Form Entries)
- [CVE-2026-57706](https://cve.now/CVE-2026-57706.md): WordPress Dokan plugin \<= 5.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dokan)
- [CVE-2026-57705](https://cve.now/CVE-2026-57705.md): WordPress Event Tickets plugin \<= 5.28.5 - Broken Access Control vulnerability (CVSS 7.5, Nexcess Event Tickets)
- [CVE-2026-57702](https://cve.now/CVE-2026-57702.md): WordPress Amelia plugin \<= 2.4.2 - SQL Injection vulnerability (CVSS 9.3, Melograno Venture Studio Amelia)
- [CVE-2026-57698](https://cve.now/CVE-2026-57698.md): WordPress Abandoned Cart Recovery for WooCommerce plugin \<= 1.1.12 - Broken Authentication vulnerability (CVSS 6.5, VillaTheme Abandoned Cart Recovery for WooCommerce)
- [CVE-2026-57697](https://cve.now/CVE-2026-57697.md): WordPress ProfileGrid plugin \<= 5.9.9.6 - Broken Authentication vulnerability (CVSS 7.5, Metagauss ProfileGrid)
- [CVE-2026-57695](https://cve.now/CVE-2026-57695.md): WordPress Document Gallery plugin \<= 5.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dan Rossiter Document Gallery)
- [CVE-2026-57693](https://cve.now/CVE-2026-57693.md): WordPress Ad Inserter plugin \<= 2.8.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Spacetime Ad Inserter)
- [CVE-2026-57668](https://cve.now/CVE-2026-57668.md): WordPress NEX-Forms plugin \<= 9.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Basix NEX-Forms)
- [CVE-2026-57691](https://cve.now/CVE-2026-57691.md): WordPress Anti-Malware Security and Brute-Force Firewall plugin \<= 4.23.89 - Cross Site Scripting (XSS) vulnerability (CVSS 5.8, Eli Anti-Malware Security and Brute-Force Firewall)
- [CVE-2026-57694](https://cve.now/CVE-2026-57694.md): WordPress Tutor LMS plugin \<= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Themeum Tutor LMS)
- [CVE-2026-57424](https://cve.now/CVE-2026-57424.md): WordPress Razorpay Payment Links for WooCommerce plugin \<= 2.1.4 - Broken Access Control vulnerability (CVSS 6.5, knitpay Razorpay Payment Links for WooCommerce)
- [CVE-2026-57423](https://cve.now/CVE-2026-57423.md): WordPress Message Filter for Contact Form 7 plugin \<= 1.6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kofi Mokome Message Filter for Contact Form)
- [CVE-2026-57422](https://cve.now/CVE-2026-57422.md): WordPress Bopo – WooCommerce Product Bundle Builder plugin \<= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VillaTheme Bopo – WooCommerce Product Bundle Builder)
- [CVE-2026-57421](https://cve.now/CVE-2026-57421.md): WordPress CRM Perks Forms plugin \<= 1.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CRM Perks Forms)
- [CVE-2026-57420](https://cve.now/CVE-2026-57420.md): WordPress Author Box WP Lens plugin \<= 2.1.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Netrr Author Box WP Lens)
- [CVE-2026-57418](https://cve.now/CVE-2026-57418.md): WordPress Client Invoicing by Sprout Invoices plugin \<= 20.8.13 - Broken Access Control vulnerability (CVSS 6.5, BoldGrid Client Invoicing by Sprout Invoices)
- [CVE-2026-57417](https://cve.now/CVE-2026-57417.md): WordPress Cart Lift plugin \<= 3.1.57 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RexTheme Cart Lift)
- [CVE-2026-57419](https://cve.now/CVE-2026-57419.md): WordPress Stock Locations for WooCommerce plugin \<= 3.1.8 - Broken Access Control vulnerability (CVSS 6.5, Fahad Mahmood Stock Locations for WooCommerce)
- [CVE-2026-57416](https://cve.now/CVE-2026-57416.md): WordPress SiteGround Email Marketing plugin \<= 1.7.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SiteGround Email Marketing)
- [CVE-2026-57415](https://cve.now/CVE-2026-57415.md): WordPress Gift Vouchers plugin \<= 4.7.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Codemenschen Gift Vouchers)
- [CVE-2026-57414](https://cve.now/CVE-2026-57414.md): WordPress ChatBot for eCommerce – WoowBot plugin \<= 4.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, QuantumCloud ChatBot for eCommerce &#8211; WoowBot)
- [CVE-2026-57413](https://cve.now/CVE-2026-57413.md): WordPress Instant Image Generator plugin \<= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4, bdthemes Instant Image Generator)
- [CVE-2026-57412](https://cve.now/CVE-2026-57412.md): WordPress Gift Vouchers plugin \<= 4.6.9 - Broken Access Control vulnerability (CVSS 6.5, Codemenschen Gift Vouchers)
- [CVE-2026-57411](https://cve.now/CVE-2026-57411.md): WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin \<= 3.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Aman CF7 Views &#8211; Complete Entry Management for Contac…)
- [CVE-2026-57410](https://cve.now/CVE-2026-57410.md): WordPress MailerPress plugin \<= 2.0.2 - Privilege Escalation vulnerability (CVSS 8.8, MailerPress Team MailerPress)
- [CVE-2026-57409](https://cve.now/CVE-2026-57409.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RealMag777 Active Products Tables for WooCommerce)
- [CVE-2026-57408](https://cve.now/CVE-2026-57408.md): WordPress Peach Payments Gateway plugin \<= 4.0.2 - Broken Access Control vulnerability (CVSS 6.5, peachpayments Peach Payments Gateway)
- [CVE-2026-57406](https://cve.now/CVE-2026-57406.md): WordPress FundEngine plugin \<= 1.7.6 - Broken Access Control vulnerability (CVSS 6.5, Roxnor FundEngine)
- [CVE-2026-57407](https://cve.now/CVE-2026-57407.md): WordPress PDF Generator for WordPress plugin \<= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, WP Swings PDF Generator for WordPress)
- [CVE-2026-57404](https://cve.now/CVE-2026-57404.md): WordPress Booking and Rental Manager plugin \<= 2.6.9 - Broken Access Control vulnerability (CVSS 6.5, magepeopleteam Booking and Rental Manager)
- [CVE-2026-57405](https://cve.now/CVE-2026-57405.md): WordPress Open Shop theme \<= 1.7.1 - Broken Access Control vulnerability (CVSS 7.1, themehunk Open Shop)
- [CVE-2026-57403](https://cve.now/CVE-2026-57403.md): WordPress GD Security Headers plugin \<= 1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Milan Petrovic GD Security Headers)
- [CVE-2026-57402](https://cve.now/CVE-2026-57402.md): WordPress Flexible Refund and Return Order for WooCommerce plugin \<= 1.0.51 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, wpdesk Flexible Refund and Return Order for WooCommerce)
- [CVE-2026-57401](https://cve.now/CVE-2026-57401.md): WordPress SureDash plugin \<= 1.8.0 - Arbitrary File Deletion vulnerability (CVSS 9.9, Brainstorm Force SureDash)
- [CVE-2026-57400](https://cve.now/CVE-2026-57400.md): WordPress Event Tickets Manager for WooCommerce plugin \<= 1.5.5 - Broken Access Control vulnerability (CVSS 6.5, WP Swings Event Tickets Manager for WooCommerce)
- [CVE-2026-57398](https://cve.now/CVE-2026-57398.md): WordPress Real Estate Manager Pro plugin \<= 12.8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WebCodingPlace Real Estate Manager Pro)
- [CVE-2026-57399](https://cve.now/CVE-2026-57399.md): WordPress Proxy & VPN Blocker plugin \<= 3.5.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Proxy &amp; VPN Blocker)
- [CVE-2026-57395](https://cve.now/CVE-2026-57395.md): WordPress Tourfic plugin \<= 2.22.5 - Broken Access Control vulnerability (CVSS 6.5, Themefic Tourfic)
- [CVE-2026-57396](https://cve.now/CVE-2026-57396.md): WordPress Free Gifts for WooCommerce plugin \<= 13.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Flintop Free Gifts for WooCommerce)
- [CVE-2026-57393](https://cve.now/CVE-2026-57393.md): WordPress WooCommerce PDF Invoice Builder plugin \<= 2.0.8 - Sensitive Data Exposure vulnerability (CVSS 6.5, EDGARROJAS WooCommerce PDF Invoice Builder)
- [CVE-2026-57394](https://cve.now/CVE-2026-57394.md): WordPress Newsletters plugin \<= 4.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Tribulant Software Newsletters)
- [CVE-2026-57392](https://cve.now/CVE-2026-57392.md): WordPress Tourfic plugin \<= 2.22.5 - Broken Access Control vulnerability (CVSS 6.5, Themefic Tourfic)
- [CVE-2026-57391](https://cve.now/CVE-2026-57391.md): WordPress Loops & Logic plugin \<= 4.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Tangible Loops & Logic)
- [CVE-2026-57390](https://cve.now/CVE-2026-57390.md): WordPress Extra Product Options Builder for WooCommerce plugin \<= 1.2.167 - Broken Access Control vulnerability (CVSS 6.5, EDGARROJAS Extra Product Options Builder for WooCommerce)
- [CVE-2026-57389](https://cve.now/CVE-2026-57389.md): WordPress Groundhogg plugin \<= 4.4.1 - Arbitrary File Deletion vulnerability (CVSS 8.6, Adrian Tobey Groundhogg)
- [CVE-2026-57388](https://cve.now/CVE-2026-57388.md): WordPress Hydra Booking plugin \<= 1.1.44 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themefic Hydra Booking)
- [CVE-2026-57387](https://cve.now/CVE-2026-57387.md): WordPress picu plugin \<= 3.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, picu)
- [CVE-2026-57382](https://cve.now/CVE-2026-57382.md): WordPress Simple File List plugin \<= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Mitchell Bennis Simple File List)
- [CVE-2026-57383](https://cve.now/CVE-2026-57383.md): WordPress JobSearch plugin \<= 3.2.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, eyecix JobSearch)
- [CVE-2026-57385](https://cve.now/CVE-2026-57385.md): WordPress Vitepos plugin \<= 3.4.2 - SQL Injection vulnerability (CVSS 8.5, appsbd Vitepos)
- [CVE-2026-57386](https://cve.now/CVE-2026-57386.md): WordPress aBlocks plugin \< 2.9.1 - Privilege Escalation vulnerability (CVSS 8.8, Kodezen aBlocks)
- [CVE-2026-57381](https://cve.now/CVE-2026-57381.md): WordPress PropertyHive plugin \<= 2.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Property Hive PropertyHive)
- [CVE-2026-57379](https://cve.now/CVE-2026-57379.md): WordPress FormyChat plugin \<= 2.15.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPPOOL FormyChat)
- [CVE-2026-57380](https://cve.now/CVE-2026-57380.md): WordPress Extensions for Leaflet Map plugin \<= 5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, hupe13 Extensions for Leaflet Map)
- [CVE-2026-57378](https://cve.now/CVE-2026-57378.md): WordPress Advanced Forms plugin \<= 1.9.3.7 - Broken Access Control vulnerability (CVSS 7.5, Phil Kurth Advanced Forms)
- [CVE-2026-57364](https://cve.now/CVE-2026-57364.md): WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin \<= 2.2.0 - Other Vulnerability Type vulnerability (CVSS 6.5, WPDeveloper Better Payment – Instant Payments, Donations, F…)
- [CVE-2026-57368](https://cve.now/CVE-2026-57368.md): WordPress Jobmonster theme \<= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NooTheme Jobmonster)
- [CVE-2026-57375](https://cve.now/CVE-2026-57375.md): WordPress MStore API plugin \<= 4.18.4 - Broken Access Control vulnerability (CVSS 6.5, FluxBuilder MStore API)
- [CVE-2026-57372](https://cve.now/CVE-2026-57372.md): WordPress WPJAM Basic plugin \<= 7.0 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, denishua WPJAM Basic)
- [CVE-2026-57363](https://cve.now/CVE-2026-57363.md): WordPress ChatBot plugin \<= 8.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, QuantumCloud ChatBot)
- [CVE-2026-57371](https://cve.now/CVE-2026-57371.md): WordPress WPJAM Basic plugin \<= 7.0 - PHP Object Injection vulnerability (CVSS 8.8, denishua WPJAM Basic)
- [CVE-2026-57365](https://cve.now/CVE-2026-57365.md): WordPress reCAPTCHA (v2 & v3) for Asgaros Forum plugin \<= 1.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Hitesh Chandwani reCAPTCHA (v2 &amp; v3) for Asgaros Forum)
- [CVE-2026-57376](https://cve.now/CVE-2026-57376.md): WordPress ElementInvader Addons for Elementor plugin \<= 1.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Element Invader ElementInvader Addons for Elementor)
- [CVE-2026-57369](https://cve.now/CVE-2026-57369.md): WordPress Themify Builder plugin \<= 7.7.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, themifyme Themify Builder)
- [CVE-2026-57377](https://cve.now/CVE-2026-57377.md): WordPress WowAddons plugin \<= 1.6.8 - Broken Access Control vulnerability (CVSS 6.5, WPXPO WowAddons)
- [CVE-2026-15547](https://cve.now/CVE-2026-15547.md): Shibby Tomato CIFS Mount sub\_2D048 os command injection (CVSS 5.3, Shibby Tomato)
- [CVE-2026-14453](https://cve.now/CVE-2026-14453.md): A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets (CVSS 9.6, Centreon Infra Monitoring)
- [CVE-2026-9597](https://cve.now/CVE-2026-9597.md): Deactivated guest accounts can authenticate via magic-link token in Mattermost REST API login endpoint (CVSS 5.4, Mattermost)
- [CVE-2026-15546](https://cve.now/CVE-2026-15546.md): Shibby Tomato start\_jffs2 sub\_2D568 os command injection (CVSS 5.3, Shibby Tomato)
- [CVE-2026-6850](https://cve.now/CVE-2026-6850.md): Crafted message attachment causes client-side denial of service via markdown parser regex backtracking in Mattermost (CVSS 6.5, Mattermost)
- [CVE-2026-10106](https://cve.now/CVE-2026-10106.md): Unauthorized users can trigger interactive post actions in private channels via action cookie channel mismatch in Mattermost (CVSS 6.5, Mattermost)
- [CVE-2026-10085](https://cve.now/CVE-2026-10085.md): Ordinary group/direct message member can enable group\_constrained and remove all channel participants (CVSS 5.4, Mattermost)
- [CVE-2026-15574](https://cve.now/CVE-2026-15574.md): Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default (CVSS 7.5, Red Hat OpenShift AI)
- [CVE-2026-15545](https://cve.now/CVE-2026-15545.md): Shibby Tomato apcupsd tomatodata.cgi main out-of-bounds write (CVSS 8.7, Shibby Tomato)
- [CVE-2026-9708](https://cve.now/CVE-2026-9708.md): Incoming webhook user attribution via unvalidated webhook owner (CVSS 4.9, Mattermost)
- [CVE-2026-10103](https://cve.now/CVE-2026-10103.md): Authenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channels (CVSS 4.3, Mattermost)
- [CVE-2026-62143](https://cve.now/CVE-2026-62143.md): Server-Side Request Forgery protection bypass in misp-modules html\_to\_markdown via IPv4-mapped IPv6 addresses (CVSS 8.3, misp-modules)
- [CVE-2026-9571](https://cve.now/CVE-2026-9571.md): Deactivated user accounts can continue to obtain valid OAuth access tokens via refresh token grant in Mattermost (CVSS 5.9, Mattermost)
- [CVE-2026-15544](https://cve.now/CVE-2026-15544.md): Shibby Tomato apcupsd tomatodata.cgi getupsvar stack-based overflow (CVSS 8.7, Shibby Tomato)
- [CVE-2026-57830](https://cve.now/CVE-2026-57830.md): Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate \< 2.2.7 (CVSS 8.8, joomshaper.com Helix Ultimate extension for Joomla)
- [CVE-2026-57829](https://cve.now/CVE-2026-57829.md): Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate \< 2.2.7 (CVSS 8.7, joomshaper.com Helix Ultimate extension for Joomla)
- [CVE-2026-15543](https://cve.now/CVE-2026-15543.md): Tenda CH22 CertListInfo formCertListInfo buffer overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-14165](https://cve.now/CVE-2026-14165.md): Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 7.5, Dassault Systèmes Tuleap Enterprise Edition)
- [CVE-2026-15542](https://cve.now/CVE-2026-15542.md): will-moss Isaiah Websocket Connection Authentication main.go improper authentication (CVSS 6.9, will-moss Isaiah)
- [CVE-2026-15541](https://cve.now/CVE-2026-15541.md): will-moss Isaiah Master Websocket server.go Server.Handle authorization (CVSS 6.9, will-moss Isaiah)
- [CVE-2026-4769](https://cve.now/CVE-2026-4769.md): Unauthenticated Access to Internal Diagnostic Interface (CVSS 9.3, WAGO 0765-110x/0100-0000 · WAGO 0765-120x/0100-0000 +6)
- [CVE-2026-15540](https://cve.now/CVE-2026-15540.md): SourceCodester Online Book Store System Administrative index.php php file inclusion (CVSS 5.3, SourceCodester Online Book Store System)
- [CVE-2026-15539](https://cve.now/CVE-2026-15539.md): SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload (CVSS 5.1, SourceCodester Online Book Store System)
- [CVE-2026-15538](https://cve.now/CVE-2026-15538.md): primefaces primereact API ObjectUtils.js ObjectUtils.mutateFieldData prototype pollution (CVSS 5.3, primefaces primereact)
- [CVE-2026-12582](https://cve.now/CVE-2026-12582.md): Library Management System \< 3.5.8 - Unauthenticated SQL Injection via book\_id (CVSS 8.6, Library Management System)
- [CVE-2026-12397](https://cve.now/CVE-2026-12397.md): WP Job Portal \< 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR (CVSS 4.3, WP Job Portal)
- [CVE-2026-12396](https://cve.now/CVE-2026-12396.md): WP Job Portal \< 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection (CVSS 5.4, WP Job Portal)
- [CVE-2026-12275](https://cve.now/CVE-2026-12275.md): Tutor LMS \< 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration (CVSS 7.1, Tutor LMS)
- [CVE-2026-12274](https://cve.now/CVE-2026-12274.md): Tutor LMS \< 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR (CVSS 6.5, Tutor LMS)
- [CVE-2026-12273](https://cve.now/CVE-2026-12273.md): Tutor LMS \< 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment Creation (CVSS 4.3, Tutor LMS)
- [CVE-2026-12271](https://cve.now/CVE-2026-12271.md): Tutor LMS \< 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDOR (CVSS 5.4, Tutor LMS)
- [CVE-2026-12081](https://cve.now/CVE-2026-12081.md): Database for Contact Form 7, WPforms, Elementor forms \< 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field (CVSS 5.0, Database for Contact Form 7, WPforms, Elementor forms)
- [CVE-2026-11964](https://cve.now/CVE-2026-11964.md): User Registration & Membership \< 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation (CVSS 9.1, User Registration & Membership)
- [CVE-2026-11963](https://cve.now/CVE-2026-11963.md): User Registration & Membership \< 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDOR (CVSS 8.1, User Registration & Membership)
- [CVE-2026-10551](https://cve.now/CVE-2026-10551.md): Breeze Cache \< 2.5.6 - Unauthenticated Stored XSS via Minify Library (CVSS 6.1, Breeze Cache)
- [CVE-2026-15537](https://cve.now/CVE-2026-15537.md): SourceCodester Online Book Store System login.php sql injection (CVSS 6.9, SourceCodester Online Book Store System)
- [CVE-2026-15536](https://cve.now/CVE-2026-15536.md): itsourcecode Hospital Management System patviewprescription.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-15535](https://cve.now/CVE-2026-15535.md): AkariAsai self-rag retrieval\_lm index.py Indexer.deserialize\_from deserialization (CVSS 5.3, AkariAsai self-rag)
- [CVE-2026-15533](https://cve.now/CVE-2026-15533.md): DedeCMS Column Management search.php code injection (CVSS 5.1, DedeCMS)
- [CVE-2026-15532](https://cve.now/CVE-2026-15532.md): SourceCodester Online Book Store System User Management cross site scripting (CVSS 4.8, SourceCodester Online Book Store System)
- [CVE-2026-15531](https://cve.now/CVE-2026-15531.md): yashbhalgat HashNeRF-pytorch Checkpoint File run\_nerf.py torch.load deserialization (CVSS 4.8, yashbhalgat HashNeRF-pytorch)
- [CVE-2026-15530](https://cve.now/CVE-2026-15530.md): WuzhiCMS Attachment API index.php listimage information disclosure (CVSS 6.9, WuzhiCMS)
- [CVE-2026-15529](https://cve.now/CVE-2026-15529.md): yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization (CVSS 5.3, yzhao062 pyod · pyod)
- [CVE-2026-9492](https://cve.now/CVE-2026-9492.md): GIGABYTE｜Gigabyte Control Center - Improper Access Control (CVSS 8.5, GIGABYTE MBStorage)
- [CVE-2026-15528](https://cve.now/CVE-2026-15528.md): lamaalrajih kicad-mcp path\_validator.py protection mechanism (CVSS 4.8, lamaalrajih kicad-mcp)
- [CVE-2026-15553](https://cve.now/CVE-2026-15553.md): Ragic｜Enterprise Cloud Database - Arbitrary File Upload (CVSS 6.9, Ragic Enterprise Cloud Database)
- [CVE-2026-15527](https://cve.now/CVE-2026-15527.md): better-auth better-icons scan\_project\_icons/sync\_icon path traversal (CVSS 4.8, better-auth better-icons)
- [CVE-2026-15552](https://cve.now/CVE-2026-15552.md): Ragic｜Enterprise Cloud Database - Stored Cross-Site Scripting (CVSS 5.3, Ragic Enterprise Cloud Database)
- [CVE-2026-15526](https://cve.now/CVE-2026-15526.md): augmnt augments-mcp-server scan\_project\_deps scan-project-deps.ts scanProjectDeps path traversal (CVSS 4.8, augmnt augments-mcp-server)
- [CVE-2026-7162](https://cve.now/CVE-2026-7162.md): Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected softwar (CVSS 7.8, WinFsp)
- [CVE-2026-15525](https://cve.now/CVE-2026-15525.md): kLOsk adloop write.py \_validate\_urls server-side request forgery (CVSS 5.3, kLOsk adloop)
- [CVE-2026-15524](https://cve.now/CVE-2026-15524.md): alioshr memory-bank-mcp list-project-files-validation-factory.ts path traversal (CVSS 4.8, alioshr memory-bank-mcp)
- [CVE-2026-15523](https://cve.now/CVE-2026-15523.md): CodeAstro Simple Online Leave Management System dashboard.php sql injection (CVSS 5.3, CodeAstro Simple Online Leave Management System)
- [CVE-2026-15522](https://cve.now/CVE-2026-15522.md): tugcantopaloglu godot-mcp run\_project index.js validatePath path traversal (CVSS 4.8, tugcantopaloglu godot-mcp)
- [CVE-2026-15521](https://cve.now/CVE-2026-15521.md): makafeli n8n-workflow-builder update\_node\_from\_file server.cjs path traversal (CVSS 4.8, makafeli n8n-workflow-builder)
- [CVE-2026-15520](https://cve.now/CVE-2026-15520.md): GNU LibreDWG R2004 Section Decompression decode.c decompress\_R2004\_section heap-based overflow (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-15519](https://cve.now/CVE-2026-15519.md): usestrix PyPI system\_prompt.jinja inclusion of functionality from untrusted control sphere (CVSS 2.3, usestrix strix)
- [CVE-2026-15518](https://cve.now/CVE-2026-15518.md): AREA 17 Twill CMS Media Library Insert FileLibraryController.php storeFile unrestricted upload (CVSS 5.1, AREA 17 Twill CMS)
- [CVE-2026-15517](https://cve.now/CVE-2026-15517.md): Jinher OA PlanGiveOut.aspx sql injection (CVSS 6.9, Jinher OA)
- [CVE-2026-15516](https://cve.now/CVE-2026-15516.md): MacCMS Pro Installation Index.php step5 authorization (CVSS 6.3, MacCMS Pro)
- [CVE-2026-15551](https://cve.now/CVE-2026-15551.md): Samsung rlottie: Numeric truncation in gray\_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size (CVSS 5.5, Samsung Open Source rlottie)
- [CVE-2026-15515](https://cve.now/CVE-2026-15515.md): Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path (CVSS 7.3, Tencent PC Manager)
- [CVE-2025-45869](https://cve.now/CVE-2025-45869.md): LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). (CVSS 7.3)
- [CVE-2026-26396](https://cve.now/CVE-2026-26396.md): OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace (CVSS 7.5)
- [CVE-2026-39042](https://cve.now/CVE-2026-39042.md): An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a (CVSS 7.5)
- [CVE-2026-51536](https://cve.now/CVE-2026-51536.md): In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsisten (CVSS 9.1)
- [CVE-2026-51537](https://cve.now/CVE-2026-51537.md): EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when proc (CVSS 9.1)
- [CVE-2026-51538](https://cve.now/CVE-2026-51538.md): EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions (CVSS 9.1)
- [CVE-2026-51539](https://cve.now/CVE-2026-51539.md): A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. (CVSS 7.5)
- [CVE-2026-51540](https://cve.now/CVE-2026-51540.md): OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the pr (CVSS 9.8)
- [CVE-2026-51541](https://cve.now/CVE-2026-51541.md): OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged (CVSS 9.1)
- [CVE-2026-51821](https://cve.now/CVE-2026-51821.md): SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /use (CVSS 9.8)
- [CVE-2026-52533](https://cve.now/CVE-2026-52533.md): An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.