# CVEs published 2026-07-23

376 CVEs were published on July 23, 2026: 57 critical, 142 high. Days are UTC.

- [CVE-2026-56160](https://cve.now/CVE-2026-56160.md): Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Azure Red Hat OpenShift)
- [CVE-2026-54120](https://cve.now/CVE-2026-54120.md): Microsoft Surface Remote Code Execution Vulnerability (CVSS 9.9, Microsoft Surface Management Services)
- [CVE-2026-56165](https://cve.now/CVE-2026-56165.md): Microsoft Account Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Account)
- [CVE-2026-56167](https://cve.now/CVE-2026-56167.md): Azure AI Search Elevation of Privilege Vulnerability (CVSS 8.5, Microsoft Azure AI Search)
- [CVE-2026-16767](https://cve.now/CVE-2026-16767.md): Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal (CVSS 6.9, Ne-Lexa php-zip)
- [CVE-2026-28698](https://cve.now/CVE-2026-28698.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs (CVSS 8.6, Pronetiqs Panduit Intravue)
- [CVE-2026-50044](https://cve.now/CVE-2026-50044.md): Inadequate Encryption Strength in Panduit IntraVUE by Pronetiqs (CVSS 6.8, Pronetiqs Panduit Intravue)
- [CVE-2026-44955](https://cve.now/CVE-2026-44955.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs (CVSS 5.3, Pronetiqs Panduit Intravue)
- [CVE-2026-42933](https://cve.now/CVE-2026-42933.md): Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs (CVSS 10.0, Pronetiqs Panduit Intravue)
- [CVE-2026-40430](https://cve.now/CVE-2026-40430.md): Plaintext Storage of a Password in Panduit IntraVUE by Pronetiqs (CVSS 7.5, Pronetiqs Panduit Intravue)
- [CVE-2026-16765](https://cve.now/CVE-2026-16765.md): CodeAstro Online Classroom loginlinkadmin.php sql injection (CVSS 6.9, CodeAstro Online Classroom)
- [CVE-2026-16804](https://cve.now/CVE-2026-16804.md): Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to poten (CVSS 8.3, Google Chrome)
- [CVE-2026-16805](https://cve.now/CVE-2026-16805.md): Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-16806](https://cve.now/CVE-2026-16806.md): Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-16807](https://cve.now/CVE-2026-16807.md): Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via (CVSS 8.8, Google Chrome)
- [CVE-2026-16764](https://cve.now/CVE-2026-16764.md): OWASP DefectDojo API/Web serializers.py UserSerializer privileges management (CVSS 5.3, OWASP DefectDojo)
- [CVE-2026-65694](https://cve.now/CVE-2026-65694.md): Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController (CVSS 8.7, microweber)
- [CVE-2026-65604](https://cve.now/CVE-2026-65604.md): Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass (CVSS 8.8, zalando skipper)
- [CVE-2026-63732](https://cve.now/CVE-2026-63732.md): 9router before 0.4.60 Remote Code Execution via default password (CVSS 9.4, decolua 9router)
- [CVE-2026-63313](https://cve.now/CVE-2026-63313.md): 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch (CVSS 8.3, decolua 9router)
- [CVE-2025-71389](https://cve.now/CVE-2025-71389.md): Cal.com before 5.9.9 Remote Code Execution via RSC (CVSS 10.0, calcom cal.diy)
- [CVE-2024-58355](https://cve.now/CVE-2024-58355.md): Cal.com through 4.7.15 Cross-Site Scripting via booking questions (CVSS 9.3, calcom cal.diy)
- [CVE-2024-58354](https://cve.now/CVE-2024-58354.md): cal.com Repository Takeover via pull\_request\_target Workflow (CVSS 8.5, calcom cal.diy)
- [CVE-2024-58353](https://cve.now/CVE-2024-58353.md): Cal.com through 4.7.15 Cross-Site Scripting via booking questions (CVSS 9.3, calcom cal.diy)
- [CVE-2026-16763](https://cve.now/CVE-2026-16763.md): localstack serverless-localstack Configuration index.js os command injection (CVSS 4.8, serverless-localstack)
- [CVE-2026-6924](https://cve.now/CVE-2026-6924.md): Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path (CVSS 8.7, Silicon Labs Matter Github)
- [CVE-2026-16002](https://cve.now/CVE-2026-16002.md): Out-of-bounds Read in MZ Automation lib60870 (CVSS 8.2, MZ Automation lib60870)
- [CVE-2026-50032](https://cve.now/CVE-2026-50032.md): NULL Pointer Dereference in MZ Automation libIEC61850 (CVSS 7.5, MZ Automation libIEC61850)
- [CVE-2026-50103](https://cve.now/CVE-2026-50103.md): Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850 (CVSS 6.5, MZ Automation libIEC61850)
- [CVE-2026-49035](https://cve.now/CVE-2026-49035.md): Stack-based Buffer Overflow in MZ Automation libIEC61850 (CVSS 8.1, MZ Automation libIEC61850)
- [CVE-2026-15981](https://cve.now/CVE-2026-15981.md): SAML Single Sign On \<= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter (CVSS 9.8, cyberlord92 SAML Single Sign On – SSO Login)
- [CVE-2026-50039](https://cve.now/CVE-2026-50039.md): Stack-based Buffer Overflow in MZ Automation libIEC61850 (CVSS 7.5, MZ Automation libIEC61850)
- [CVE-2026-34496](https://cve.now/CVE-2026-34496.md): victor Web - Priviledge Escalation (CVSS 7.1, Johnson Controls victor Web)
- [CVE-2026-47724](https://cve.now/CVE-2026-47724.md): nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation (CVSS 9.9, juev nebula-mesh · github.com/juev/nebula-mesh)
- [CVE-2026-21653](https://cve.now/CVE-2026-21653.md): CCure and Victor Application Server - Server Side Request Forgery (CVSS 7.2, Johnson Controls CCure 9000 and victor application server)
- [CVE-2026-47723](https://cve.now/CVE-2026-47723.md): nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.) (CVSS 7.1, juev nebula-mesh · github.com/juev/nebula-mesh)
- [CVE-2026-21655](https://cve.now/CVE-2026-21655.md): C-CURE 9000 and Victor application server - Deserialization of Untrusted Data (CVSS 8.7, Johnson Control victor · Johnson Controls CCure +1)
- [CVE-2026-16796](https://cve.now/CVE-2026-16796.md): Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install\_packages() (CVSS 7.3, AWS bedrock-agentcore · bedrock-agentcore)
- [CVE-2026-15968](https://cve.now/CVE-2026-15968.md): Stored XSS vulnerability in MOVEit Transfer (CVSS 7.1, Progress MOVEit Transfer)
- [CVE-2026-15967](https://cve.now/CVE-2026-15967.md): MOVEit Transfer refresh-token processing does not enforce updated account restrictions (CVSS 7.5, Progress MOVEit Transfer)
- [CVE-2026-15966](https://cve.now/CVE-2026-15966.md): Improper CORS handling in MOVEit Transfer (CVSS 7.5, Progress MOVEit Transfer)
- [CVE-2026-15630](https://cve.now/CVE-2026-15630.md): CVE-2026-15630 (CVSS 9.9, Casdoor)
- [CVE-2026-10697](https://cve.now/CVE-2026-10697.md): MFA Bypass in MOVEit Transfer (CVSS 7.5, Progress MOVEit Transfer)
- [CVE-2026-15212](https://cve.now/CVE-2026-15212.md): WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) \<= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update (CVSS 8.8, WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION)
- [CVE-2026-47722](https://cve.now/CVE-2026-47722.md): nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml (CVSS 8.7, juev nebula-mesh · github.com/juev/nebula-mesh)
- [CVE-2026-60122](https://cve.now/CVE-2026-60122.md): gpsd gpsprof Code Injection via SKY.satellites used Field (CVSS 8.5, gpsd)
- [CVE-2026-48012](https://cve.now/CVE-2026-48012.md): Shopware SSO referer trust leading to an arbitrary redirect target (CVSS 4.3, shopware · shopware/core +1)
- [CVE-2026-48013](https://cve.now/CVE-2026-48013.md): Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation (CVSS 4.1, shopware · shopware/core +1)
- [CVE-2026-47669](https://cve.now/CVE-2026-47669.md): DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE (CVSS 9.3, dbgate)
- [CVE-2026-47670](https://cve.now/CVE-2026-47670.md): DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection (CVSS 9.4, dbgate · dbgate-api)
- [CVE-2026-12353](https://cve.now/CVE-2026-12353.md): Rhcs: memory leak during https connection leads to denial of service (CVSS 5.3, Red Hat Certificate System · Red Hat Enterprise Linux)
- [CVE-2026-25800](https://cve.now/CVE-2026-25800.md): quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly (CVSS 7.5, quinn-rs quinn · quinn-proto)
- [CVE-2026-65706](https://cve.now/CVE-2026-65706.md): FFmpeg 3.0 - 8.1.2 vf\_swaprect Out-of-Bounds Write via NV12 Frame Processing (CVSS 8.5, FFmpeg)
- [CVE-2026-65705](https://cve.now/CVE-2026-65705.md): FFmpeg 3.4 - 8.1.2 vf\_floodfill Out-of-Bounds Write via filter\_frame() (CVSS 7.3, FFmpeg)
- [CVE-2026-65704](https://cve.now/CVE-2026-65704.md): FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder (CVSS 7.3, FFmpeg)
- [CVE-2026-65703](https://cve.now/CVE-2026-65703.md): FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder (CVSS 8.5, FFmpeg)
- [CVE-2026-64785](https://cve.now/CVE-2026-64785.md): SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 bac (CVSS 5.3, Apple swift-nio-http2)
- [CVE-2026-63359](https://cve.now/CVE-2026-63359.md): Appriss Insights VINE SQLI (CVSS 9.3, Appriss Insights Victim Information Notification Exchange)
- [CVE-2026-15687](https://cve.now/CVE-2026-15687.md): Path traversal via non-tar copyDirectoryFromPod (CVSS 2.7, kubernetes-client/java)
- [CVE-2026-16756](https://cve.now/CVE-2026-16756.md): Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service (CVSS 7.5, aws-smithy-http-server)
- [CVE-2026-65010](https://cve.now/CVE-2026-65010.md): Datasets Symlink-following Arbitrary File Write via Extractor.extract() (CVSS 4.4, huggingface datasets)
- [CVE-2026-63765](https://cve.now/CVE-2026-63765.md): Chatwoot \< 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation (CVSS 8.8, chatwoot)
- [CVE-2026-65920](https://cve.now/CVE-2026-65920.md): Diffusers Path Traversal via weight\_map Arbitrary File Read (CVSS 5.3, huggingface diffusers)
- [CVE-2026-65919](https://cve.now/CVE-2026-65919.md): Meshery \< 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload (CVSS 8.7, meshery)
- [CVE-2026-65918](https://cve.now/CVE-2026-65918.md): PyTorch torchvision GIF Decoder Out-of-bounds Heap Read (CVSS 7.1, pytorch vision)
- [CVE-2026-47668](https://cve.now/CVE-2026-47668.md): DbGate: Unauthenticated Remote Code Execution via JSON Script Runner (CVSS 10.0, dbgate · dbgate-serve)
- [CVE-2026-44210](https://cve.now/CVE-2026-44210.md): Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations (CVSS 5.8, kata-containers · github.com/kata-containers/kata-containers)
- [CVE-2026-47769](https://cve.now/CVE-2026-47769.md): APIFold Vulnerable to Unauthenticated Webhook Event Injection (CVSS 5.3, Work90210 APIFold)
- [CVE-2026-6516](https://cve.now/CVE-2026-6516.md): Remote Code Execution (CVSS 10.0, Zohocorp ManageEngine ADAudit Plus)
- [CVE-2026-47743](https://cve.now/CVE-2026-47743.md): Shopper: Multiple data integrity and disclosure issues in admin Livewire components (CVSS 8.7, shopperlabs shopper · shopper/framework)
- [CVE-2026-65702](https://cve.now/CVE-2026-65702.md): Vanna 2.0.2 Path Traversal via FileSystemConversationStore (CVSS 8.8, vanna-ai vanna)
- [CVE-2026-47755](https://cve.now/CVE-2026-47755.md): ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal (CVSS 6.5, itflow-org itflow)
- [CVE-2026-65701](https://cve.now/CVE-2026-65701.md): SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route (CVSS 9.3, svc-develop-team so-vits-svc)
- [CVE-2026-65700](https://cve.now/CVE-2026-65700.md): h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API (CVSS 9.3, h2oai h2ogpt)
- [CVE-2026-65762](https://cve.now/CVE-2026-65762.md): Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 (CVSS 5.1, phoca.cz Phoca Guestbook extension for Joomla)
- [CVE-2026-65699](https://cve.now/CVE-2026-65699.md): AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation (CVSS 2.3, reworkd AgentGPT)
- [CVE-2026-47752](https://cve.now/CVE-2026-47752.md): Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution (CVSS 9.9, Quenary tugtainer)
- [CVE-2026-65763](https://cve.now/CVE-2026-65763.md): Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 (CVSS 5.1, phoca.cz Phoca Maps extension for Joomla)
- [CVE-2026-65759](https://cve.now/CVE-2026-65759.md): Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 (CVSS 8.7, joomshaper.com Easy Store extension for Joomla)
- [CVE-2026-16768](https://cve.now/CVE-2026-16768.md): Gdk-pixbuf: out-of-bounds read in ico parser (CVSS 5.3, GNOME gdk-pixbuf · Red Hat Enterprise Linux)
- [CVE-2026-65761](https://cve.now/CVE-2026-65761.md): Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 (CVSS 9.3, joomshaper.com Easy Store extension for Joomla)
- [CVE-2026-65760](https://cve.now/CVE-2026-65760.md): Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 (CVSS 9.2, joomshaper.com Easy Store extension for Joomla)
- [CVE-2026-65698](https://cve.now/CVE-2026-65698.md): Void 1.3.4 Path Traversal via AI Agent File-Reading Tools (CVSS 6.0, voideditor void)
- [CVE-2026-65697](https://cve.now/CVE-2026-65697.md): Fathom Lite 1.3.1 Stored XSS via /collect Endpoint (CVSS 5.1, usefathom fathom)
- [CVE-2026-44909](https://cve.now/CVE-2026-44909.md): Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. (CVSS 7.5, Facebook proxygen)
- [CVE-2026-65696](https://cve.now/CVE-2026-65696.md): Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API (CVSS 5.3, sct overseerr)
- [CVE-2026-65695](https://cve.now/CVE-2026-65695.md): Office-Word-MCP-Server 1.1.11 Path Traversal via document tools (CVSS 7.6, GongRzhe Office-Word-MCP-Server)
- [CVE-2026-65917](https://cve.now/CVE-2026-65917.md): CyberPanel IncBackups IDOR via Sequential Backup ID (CVSS 8.7, usmannasir cyberpanel)
- [CVE-2026-65916](https://cve.now/CVE-2026-65916.md): CyberPanel Missing Authorization in cancelBackupCreation Handler (CVSS 7.2, usmannasir cyberpanel)
- [CVE-2026-15611](https://cve.now/CVE-2026-15611.md): Unverified email-based SSO account linking (CVSS 9.1, Logto)
- [CVE-2026-15612](https://cve.now/CVE-2026-15612.md): LOIDC nonce validation bypass (CVSS 9.1, Logto)
- [CVE-2026-15614](https://cve.now/CVE-2026-15614.md): IdP-initiated SAML sessions not reliably invalidated (replay) (CVSS 7.5, Logto)
- [CVE-2026-15615](https://cve.now/CVE-2026-15615.md): SAML \<Conditions\> element not validated (CVSS 7.5, Logto)
- [CVE-2026-15616](https://cve.now/CVE-2026-15616.md): Local MFA not enforced during SSO sign-in (CVSS 9.1, Logto)
- [CVE-2026-15617](https://cve.now/CVE-2026-15617.md): Principal/domain lookup without case normalization (CVSS 9.1, Logto)
- [CVE-2026-16584](https://cve.now/CVE-2026-16584.md): AWS API MCP Server Security Policy Bypass via Startup Failure (CVSS 7.0, aws-api-mcp-server · awslabs-aws-api-mcp-server)
- [CVE-2026-48539](https://cve.now/CVE-2026-48539.md): GFI Archiver \< 15.14 Stored XSS via MailInsights.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48538](https://cve.now/CVE-2026-48538.md): GFI Archiver \< 15.13 Stored XSS via ImportSettingsWizard.ashx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48537](https://cve.now/CVE-2026-48537.md): GFI Archiver \< 15.13 Stored XSS via FileArchiveAssistantWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48536](https://cve.now/CVE-2026-48536.md): GFI Archiver \< 15.13 Stored XSS via GeneralSettingsWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48535](https://cve.now/CVE-2026-48535.md): GFI Archiver \< 15.13 Stored XSS via CallHomeSettingsWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48534](https://cve.now/CVE-2026-48534.md): GFI Archiver \< 15.13 Stored XSS via ImapServerWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48532](https://cve.now/CVE-2026-48532.md): GFI Archiver \< 15.13 Stored XSS via FAARetentionPolicyWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48531](https://cve.now/CVE-2026-48531.md): GFI Archiver \< 15.13 Stored XSS via RetentionPolicyWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-48530](https://cve.now/CVE-2026-48530.md): GFI Archiver \< 15.14 Stored XSS via CategorizationPolicyWizard.aspx (CVSS 5.1, GFI Software GFI Archiver)
- [CVE-2026-11804](https://cve.now/CVE-2026-11804.md): Program Module Vulnerability (CVSS 5.2, Tridium Niagara Framework · Tridium Niagara Enterprise Secu…)
- [CVE-2026-43823](https://cve.now/CVE-2026-43823.md): When initializing an RSA public key from DER or PEM bytes throws an error, the EVP\_PKEY\* is double-freed: first in the catch block, then in (CVSS 7.5, Apple swift-crypto)
- [CVE-2026-43820](https://cve.now/CVE-2026-43820.md): NIOSSLCertificate.\_subjectAlternativeNames provides access to the raw bytes for a cert's SANs. (CVSS 7.7, Apple swift-nio-ssl)
- [CVE-2026-8287](https://cve.now/CVE-2026-8287.md): Unrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software (CVSS 4.3, BizimHesap Information Systems Industry and Trade Online Pr…)
- [CVE-2026-16735](https://cve.now/CVE-2026-16735.md): release-it conventional-changelog Changelog File index.js writeChangelog os command injection (CVSS 4.8, release-it conventional-changelog)
- [CVE-2026-65690](https://cve.now/CVE-2026-65690.md): Bold Reports Standalone Report Designer \< 14.1.12 Path Traversal RCE via File Upload (CVSS 8.7, Bold Reports (By SyncFusion) Standalone Report Designer)
- [CVE-2026-16733](https://cve.now/CVE-2026-16733.md): bahmutov find-cypress-specs Branch index.js shell.exec os command injection (CVSS 4.8, bahmutov find-cypress-specs)
- [CVE-2026-65689](https://cve.now/CVE-2026-65689.md): Bold Reports Standalone Report Designer \< 14.1.12 Arbitrary File Read via Database Download (CVSS 9.3, Bold Reports (By SyncFusion) Standalone Report Designer)
- [CVE-2026-65688](https://cve.now/CVE-2026-65688.md): Bold Reports Standalone Report Designer \< 14.1.12 Arbitrary File Read via Font Processing (CVSS 9.3, Bold Reports (By SyncFusion) Standalone Report Designer)
- [CVE-2026-65687](https://cve.now/CVE-2026-65687.md): Bold Reports Standalone Report Designer \< 14.1.12 Arbitrary File Read via SVG Processing (CVSS 9.3, Bold Reports (By SyncFusion) Standalone Report Designer)
- [CVE-2026-65914](https://cve.now/CVE-2026-65914.md): DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization (CVSS 5.3, cure53 DOMPurify · dompurify)
- [CVE-2026-65913](https://cve.now/CVE-2026-65913.md): DOMPurify before 3.3.2 Prototype Pollution via USE\_PROFILES (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-65912](https://cve.now/CVE-2026-65912.md): DOMPurify before 3.3.2 URI Validation Bypass via ADD\_ATTR (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-65911](https://cve.now/CVE-2026-65911.md): DOMPurify before 3.4.0 XSS via ADD\_ATTR/ADD\_TAGS State Leakage (CVSS 5.1, cure53 DOMPurify)
- [CVE-2026-65904](https://cve.now/CVE-2026-65904.md): DOMPurify through 3.3.3 Cross-Site Scripting via IN\_PLACE mode (CVSS 2.3, cure53 DOMPurify)
- [CVE-2026-65903](https://cve.now/CVE-2026-65903.md): DOMPurify before 3.4.0 ADD\_TAGS Function Bypasses FORBID\_TAGS (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-65902](https://cve.now/CVE-2026-65902.md): DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags (CVSS 5.3, cure53 DOMPurify · dompurify)
- [CVE-2026-65901](https://cve.now/CVE-2026-65901.md): DOMPurify 3.4.6 Cross-Site Scripting via IN\_PLACE nodeName (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-65900](https://cve.now/CVE-2026-65900.md): DOMPurify before 3.4.8 Template Expression Injection via RETURN\_DOM (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-65899](https://cve.now/CVE-2026-65899.md): DOMPurify before 3.4.9 Trusted Types Policy State Contamination (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-65898](https://cve.now/CVE-2026-65898.md): DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-14257](https://cve.now/CVE-2026-14257.md): brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash (CVSS 7.5, juliangruber brace-expansion · brace-expansion)
- [CVE-2026-15037](https://cve.now/CVE-2026-15037.md): XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization (CVSS 2.9, Qt)
- [CVE-2026-65907](https://cve.now/CVE-2026-65907.md): In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible (CVSS 9.1, JetBrains TeamCity)
- [CVE-2026-65908](https://cve.now/CVE-2026-65908.md): In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open (CVSS 8.6, JetBrains PyCharm)
- [CVE-2026-65906](https://cve.now/CVE-2026-65906.md): In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible (CVSS 8.8, JetBrains TeamCity)
- [CVE-2026-65475](https://cve.now/CVE-2026-65475.md): WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Modula Image Gallery)
- [CVE-2026-61945](https://cve.now/CVE-2026-61945.md): WordPress WooCommerce Product Stock Alert plugin \<= 3.0.6 - Sensitive Data Exposure vulnerability (CVSS 6.5, MultiVendorX WooCommerce Product Stock Alert)
- [CVE-2026-57626](https://cve.now/CVE-2026-57626.md): WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, MailPoet)
- [CVE-2026-65897](https://cve.now/CVE-2026-65897.md): Grav API Plugin 1.0.9 Privilege Escalation via Invitations groups (CVSS 8.7, getgrav grav)
- [CVE-2026-65896](https://cve.now/CVE-2026-65896.md): Grav API Plugin before 1.0.10 Path Traversal via move (CVSS 7.1, getgrav grav)
- [CVE-2026-65895](https://cve.now/CVE-2026-65895.md): Grav API Plugin before 1.0.10 Broken Access Control (CVSS 8.2, getgrav grav)
- [CVE-2026-65608](https://cve.now/CVE-2026-65608.md): Grav before 2.0.9 Remote Code Execution via FlexDirectory (CVSS 8.7, getgrav grav · getgrav/grav)
- [CVE-2026-65607](https://cve.now/CVE-2026-65607.md): SiYuan before v3.7.2 Path Traversal via /export/temp/ (CVSS 7.1, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-65606](https://cve.now/CVE-2026-65606.md): SiYuan before v3.7.2 Cross-Site Scripting to RCE (CVSS 9.4, siyuan-note siyuan)
- [CVE-2026-65605](https://cve.now/CVE-2026-65605.md): SiYuan before v3.7.2 Stored XSS to RCE via Attribute View (CVSS 9.4, siyuan-note siyuan)
- [CVE-2026-64815](https://cve.now/CVE-2026-64815.md): In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files (CVSS 8.1, JetBrains IntelliJ IDEA)
- [CVE-2026-64814](https://cve.now/CVE-2026-64814.md): In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session (CVSS 8.6, JetBrains IntelliJ IDEA)
- [CVE-2026-64813](https://cve.now/CVE-2026-64813.md): In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session (CVSS 10.0, JetBrains IntelliJ IDEA)
- [CVE-2026-64812](https://cve.now/CVE-2026-64812.md): In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session (CVSS 10.0, JetBrains IntelliJ IDEA)
- [CVE-2026-64811](https://cve.now/CVE-2026-64811.md): In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container confi (CVSS 7.8, JetBrains IntelliJ IDEA)
- [CVE-2026-64810](https://cve.now/CVE-2026-64810.md): In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking (CVSS 4.3, JetBrains IntelliJ IDEA)
- [CVE-2026-64809](https://cve.now/CVE-2026-64809.md): In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter (CVSS 8.4, JetBrains PhpStorm)
- [CVE-2026-64808](https://cve.now/CVE-2026-64808.md): In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling (CVSS 8.4, JetBrains PhpStorm)
- [CVE-2026-64807](https://cve.now/CVE-2026-64807.md): In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration (CVSS 7.8, JetBrains WebStorm)
- [CVE-2026-64806](https://cve.now/CVE-2026-64806.md): In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpret (CVSS 8.4, JetBrains WebStorm)
- [CVE-2026-64805](https://cve.now/CVE-2026-64805.md): In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager to (CVSS 8.4, JetBrains WebStorm)
- [CVE-2026-64804](https://cve.now/CVE-2026-64804.md): In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling (CVSS 8.4, JetBrains WebStorm)
- [CVE-2026-64803](https://cve.now/CVE-2026-64803.md): In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK (CVSS 7.8, JetBrains GoLand)
- [CVE-2026-64802](https://cve.now/CVE-2026-64802.md): In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration (CVSS 7.8, JetBrains GoLand)
- [CVE-2026-64800](https://cve.now/CVE-2026-64800.md): In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default (CVSS 3.5, JetBrains GoLand)
- [CVE-2026-65550](https://cve.now/CVE-2026-65550.md): WordPress Tabs plugin \<= 2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, wpshopmart Tabs)
- [CVE-2026-65540](https://cve.now/CVE-2026-65540.md): WordPress Popup for CF7 with Sweet Alert plugin \<= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, Metin Saraç Popup for CF7 with Sweet Alert)
- [CVE-2026-65539](https://cve.now/CVE-2026-65539.md): WordPress Kwayy HTML Sitemap plugin \<= 4.0 - CSRF to Stored XSS vulnerability (CVSS 7.1, Bimal Rekhadiya Kwayy HTML Sitemap)
- [CVE-2026-65538](https://cve.now/CVE-2026-65538.md): WordPress Machete plugin \<= 5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Nilo Velez Machete)
- [CVE-2026-65537](https://cve.now/CVE-2026-65537.md): WordPress Cyr to Lat reloaded – transliteration of links and file names plugin \<= 1.3.3 - Broken Access Control vulnerability (CVSS 4.3, Themeisle Cyr to Lat reloaded – transliteration of links an…)
- [CVE-2026-65536](https://cve.now/CVE-2026-65536.md): WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin \<= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5, Mahdi Yousefi افزونه حمل و نقل ووکامرس)
- [CVE-2026-65535](https://cve.now/CVE-2026-65535.md): WordPress TinyMCE Templates plugin \<= 4.8.1 - Sensitive Data Exposure vulnerability (CVSS 4.3, Takayuki Miyauchi TinyMCE Templates)
- [CVE-2026-65534](https://cve.now/CVE-2026-65534.md): WordPress Custom links in Elementor Image Carousel plugin \<= 1.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Charlie Etienne Custom links in Elementor Image Carousel)
- [CVE-2026-65533](https://cve.now/CVE-2026-65533.md): WordPress Smart SEO Tool plugin \<= 4.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, wbolt.com Smart SEO Tool)
- [CVE-2026-65532](https://cve.now/CVE-2026-65532.md): WordPress Persian Woocommerce SMS plugin \<= 7.2.2 - SQL Injection vulnerability (CVSS 7.6, PersianScript Persian Woocommerce SMS)
- [CVE-2026-65531](https://cve.now/CVE-2026-65531.md): WordPress Qubely plugin \<= 1.8.14 - Broken Access Control vulnerability (CVSS 4.8, Themeum Qubely)
- [CVE-2026-65530](https://cve.now/CVE-2026-65530.md): WordPress TemplateSpare plugin \<= 4.2.2 - Broken Access Control vulnerability (CVSS 4.3, TemplateSpare)
- [CVE-2026-65529](https://cve.now/CVE-2026-65529.md): WordPress Graphina plugin \<= 3.1.12 - Broken Access Control vulnerability (CVSS 5.3, Iqonic Designs Graphina – Charts and Graphs For Elementor)
- [CVE-2026-65528](https://cve.now/CVE-2026-65528.md): WordPress BSK PDF Manager plugin \<= 3.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bannersky BSK PDF Manager)
- [CVE-2026-65527](https://cve.now/CVE-2026-65527.md): WordPress LIQUID SPEECH BALLOON plugin \<= 1.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, lqd LIQUID SPEECH BALLOON)
- [CVE-2026-65526](https://cve.now/CVE-2026-65526.md): WordPress Visualizer plugin \<= 4.0.1 - SQL Injection vulnerability (CVSS 8.5, Themeisle Visualizer)
- [CVE-2026-65525](https://cve.now/CVE-2026-65525.md): WordPress Civi Framework plugin \<= 2.2.0 - Broken Access Control vulnerability (CVSS 5.3, uxper Civi Framework)
- [CVE-2026-65524](https://cve.now/CVE-2026-65524.md): WordPress Avada Custom Branding plugin \<= 1.2 - Broken Access Control vulnerability (CVSS 4.3, ThemeFusion Avada Custom Branding)
- [CVE-2026-65522](https://cve.now/CVE-2026-65522.md): WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme \<= 7.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, pixelacehq Manual - Documentation, Knowledge Base & Educati…)
- [CVE-2026-65521](https://cve.now/CVE-2026-65521.md): WordPress WP Social Ninja plugin \<= 4.3.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Mahmudul Hasan Arif WP Social Ninja)
- [CVE-2026-65519](https://cve.now/CVE-2026-65519.md): WordPress Photo Gallery plugin \<= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, gt3themes Photo Gallery)
- [CVE-2026-65518](https://cve.now/CVE-2026-65518.md): WordPress Accept Donations with PayPal & Stripe plugin \<= 1.5.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Scott Paterson Accept Donations with PayPal & Stripe)
- [CVE-2026-65516](https://cve.now/CVE-2026-65516.md): WordPress PeproDev Ultimate Invoice plugin \<= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Pepro Dev. Group PeproDev Ultimate Invoice)
- [CVE-2026-65514](https://cve.now/CVE-2026-65514.md): WordPress Appointment Hour Booking plugin \<= 1.5.86 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, codepeople Appointment Hour Booking)
- [CVE-2026-65512](https://cve.now/CVE-2026-65512.md): WordPress WP Activity Log and WP Activity Log Premium plugins \<= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Melapress WP Activity Log)
- [CVE-2026-65511](https://cve.now/CVE-2026-65511.md): WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme \<= 7.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, pixelacehq Manual - Documentation, Knowledge Base & Educati…)
- [CVE-2026-65510](https://cve.now/CVE-2026-65510.md): WordPress PeproDev Ultimate Invoice plugin \<= 2.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Pepro Dev. Group PeproDev Ultimate Invoice)
- [CVE-2026-65506](https://cve.now/CVE-2026-65506.md): WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin \<= 5.12 - Broken Access Control vulnerability (CVSS 5.3, MP3 Audio Player for Music, Radio & Podcast by Sonaar)
- [CVE-2026-65505](https://cve.now/CVE-2026-65505.md): WordPress Ultimate Store Kit Elementor Addons plugin \<= 3.0.5 - Sensitive Data Exposure vulnerability (CVSS 5.3, bdthemes Ultimate Store Kit Elementor Addons)
- [CVE-2026-65503](https://cve.now/CVE-2026-65503.md): WordPress Ultimate Store Kit Elementor Addons plugin \<= 3.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bdthemes Ultimate Store Kit Elementor Addons)
- [CVE-2026-65501](https://cve.now/CVE-2026-65501.md): WordPress Shiptastic for WooCommerce plugin \<= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, vendidero Shiptastic for WooCommerce)
- [CVE-2026-65500](https://cve.now/CVE-2026-65500.md): WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme \<= 7.5.4 - Broken Access Control vulnerability (CVSS 7.5, pixelacehq Manual - Documentation, Knowledge Base & Educati…)
- [CVE-2026-65499](https://cve.now/CVE-2026-65499.md): WordPress PeproDev Ultimate Invoice plugin \<= 2.2.6 - Broken Access Control vulnerability (CVSS 6.5, Pepro Dev. Group PeproDev Ultimate Invoice)
- [CVE-2026-65498](https://cve.now/CVE-2026-65498.md): WordPress Complianz plugin \<= 7.5.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Complianz)
- [CVE-2026-65497](https://cve.now/CVE-2026-65497.md): WordPress Complianz plugin \<= 7.5.0 - PHP Object Injection vulnerability (CVSS 7.2, Complianz)
- [CVE-2026-65496](https://cve.now/CVE-2026-65496.md): WordPress Complianz plugin \<= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4, Complianz)
- [CVE-2026-65495](https://cve.now/CVE-2026-65495.md): WordPress Dokan Pro plugin \<= 5.0.3 - Broken Access Control vulnerability (CVSS 7.5, Dokan Multivendor Plugin Dokan Pro)
- [CVE-2026-65494](https://cve.now/CVE-2026-65494.md): WordPress Dokan Pro plugin \<= 5.0.2 - SQL Injection vulnerability (CVSS 7.1, Dokan Pro)
- [CVE-2026-65493](https://cve.now/CVE-2026-65493.md): WordPress Dokan Pro plugin \<= 5.0.2 - PHP Object Injection vulnerability (CVSS 7.5, Dokan Pro)
- [CVE-2026-65492](https://cve.now/CVE-2026-65492.md): WordPress Dokan Pro plugin \< 5.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, weDevs Dokan Pro)
- [CVE-2026-65491](https://cve.now/CVE-2026-65491.md): WordPress Query Wrangler plugin \<= 1.5.57 - Broken Access Control vulnerability (CVSS 4.3, Jonathan Daggerhart Query Wrangler)
- [CVE-2026-65490](https://cve.now/CVE-2026-65490.md): WordPress Create by Mediavine plugin \<= 2.6.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, John-Michael L'Allier Create)
- [CVE-2026-65489](https://cve.now/CVE-2026-65489.md): WordPress LA-Studio Element Kit for Elementor plugin \<= 1.6.2 - Broken Access Control vulnerability (CVSS 5.3, LA-Studio Element Kit for Elementor)
- [CVE-2026-65488](https://cve.now/CVE-2026-65488.md): WordPress LA-Studio Element Kit for Elementor plugin \<= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability (CVSS 7.1, LA-Studio Element Kit for Elementor)
- [CVE-2026-65487](https://cve.now/CVE-2026-65487.md): WordPress Photography theme \<= 7.7.6 - Broken Access Control vulnerability (CVSS 5.3, ThemeGoods Photography)
- [CVE-2026-65486](https://cve.now/CVE-2026-65486.md): WordPress Event post plugin \<= 6.0.1 - Broken Access Control vulnerability (CVSS 5.3, Bastien Ho Event post)
- [CVE-2026-65485](https://cve.now/CVE-2026-65485.md): WordPress Content Control plugin \<= 2.6.5 - Broken Access Control vulnerability (CVSS 5.3, Daniel Iser Content Control)
- [CVE-2026-65484](https://cve.now/CVE-2026-65484.md): WordPress Style Kits plugin \<= 2.6.5 - Broken Access Control vulnerability (CVSS 6.3, AnalogWP Style Kits)
- [CVE-2026-65483](https://cve.now/CVE-2026-65483.md): WordPress HashThemes Demo Importer plugin \<= 1.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, HashThemes Demo Importer)
- [CVE-2026-65482](https://cve.now/CVE-2026-65482.md): WordPress LA-Studio Element Kit for Elementor plugin \<= 1.6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, LA-Studio Element Kit for Elementor)
- [CVE-2026-65481](https://cve.now/CVE-2026-65481.md): WordPress Vino theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 7.5, Elated-Themes Vino)
- [CVE-2026-65480](https://cve.now/CVE-2026-65480.md): WordPress TheGem theme \< 5.12.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CodexThemes TheGem)
- [CVE-2026-65479](https://cve.now/CVE-2026-65479.md): WordPress Reviewer plugin \<= 3.14.2 - Broken Access Control vulnerability (CVSS 5.4, MVP Themes Reviewer)
- [CVE-2026-65478](https://cve.now/CVE-2026-65478.md): WordPress ListingPro plugin \<= 2.9.10 - Broken Access Control vulnerability (CVSS 5.4, CridioStudio ListingPro)
- [CVE-2026-65477](https://cve.now/CVE-2026-65477.md): WordPress Tonda Core plugin \<= 2.1.2 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Tonda Core)
- [CVE-2026-65476](https://cve.now/CVE-2026-65476.md): WordPress Civi theme \<= 2.2.4 - Broken Access Control vulnerability (CVSS 5.3, uxper Civi)
- [CVE-2026-65474](https://cve.now/CVE-2026-65474.md): WordPress Ninja Tables plugin \<= 5.2.10 - Sensitive Data Exposure vulnerability (CVSS 5.3, WPManageNinja Ninja Tables)
- [CVE-2026-65473](https://cve.now/CVE-2026-65473.md): WordPress Virtue/Ascend/Pinnacle Toolkit plugin \<= 4.9.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Nexcess Virtue/Ascend/Pinnacle Toolkit)
- [CVE-2026-65472](https://cve.now/CVE-2026-65472.md): WordPress Kit (formerly ConvertKit) plugin \<= 3.3.5 - Broken Access Control vulnerability (CVSS 5.3, Kit)
- [CVE-2026-65471](https://cve.now/CVE-2026-65471.md): WordPress Avada Core plugin \<= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 9.6, Avada Studio Avada Core)
- [CVE-2026-65470](https://cve.now/CVE-2026-65470.md): WordPress Fluent Support plugin \<= 2.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPManageNinja Fluent Support)
- [CVE-2026-65469](https://cve.now/CVE-2026-65469.md): WordPress AWP Classifieds plugin \<= 4.4.7 - Broken Access Control vulnerability (CVSS 5.3, Strategy11 Team AWP Classifieds)
- [CVE-2026-65468](https://cve.now/CVE-2026-65468.md): WordPress JetBooking plugin \<= 4.1.2 - Broken Access Control vulnerability (CVSS 5.3, Crocoblock. Jetimpex JetBooking)
- [CVE-2026-65467](https://cve.now/CVE-2026-65467.md): WordPress JetEngine plugin \<= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, Crocoblock. Jetimpex JetEngine)
- [CVE-2026-65466](https://cve.now/CVE-2026-65466.md): WordPress JetBooking plugin \<= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, Crocoblock. Jetimpex JetBooking)
- [CVE-2026-65465](https://cve.now/CVE-2026-65465.md): WordPress JetElements For Elementor plugin \<= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock. Jetimpex JetElements For Elementor)
- [CVE-2026-65464](https://cve.now/CVE-2026-65464.md): WordPress GiveWP plugin \<= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Nexcess GiveWP)
- [CVE-2026-65463](https://cve.now/CVE-2026-65463.md): WordPress Masteriyo - LMS plugin \<= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, Masteriyo - LMS)
- [CVE-2026-65462](https://cve.now/CVE-2026-65462.md): WordPress Uncanny Automator plugin \<= 7.3.2 - SQL Injection vulnerability (CVSS 7.6, Uncanny Owl Uncanny Automator)
- [CVE-2026-65461](https://cve.now/CVE-2026-65461.md): WordPress Really Simple CSV Importer plugin \<= 1.3 - Arbitrary File Upload vulnerability (CVSS 9.1, Webの相談所 Really Simple CSV Importer)
- [CVE-2026-65460](https://cve.now/CVE-2026-65460.md): WordPress Zarinpal Gateway plugin \<= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Zarinpal Gateway)
- [CVE-2026-65458](https://cve.now/CVE-2026-65458.md): WordPress Polylang and Polylang Pro plugins \<= 3.8.5 - Sensitive Data Exposure vulnerability (CVSS 4.3, Chouby Polylang)
- [CVE-2026-65457](https://cve.now/CVE-2026-65457.md): WordPress ЮKassa для WooCommerce plugin \<= 2.16.1 - Broken Access Control vulnerability (CVSS 4.3, yoomoney ЮKassa для WooCommerce)
- [CVE-2026-65456](https://cve.now/CVE-2026-65456.md): WordPress Product Slider for WooCommerce plugin \<= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, PickPlugins Product Slider for WooCommerce)
- [CVE-2026-65455](https://cve.now/CVE-2026-65455.md): WordPress MapSVG plugin \<= 8.14.0 - Arbitrary File Upload vulnerability (CVSS 9.1, MapSVG)
- [CVE-2026-65454](https://cve.now/CVE-2026-65454.md): WordPress Quiz And Survey Master plugin \<= 11.2.0 - SQL Injection vulnerability (CVSS 8.5, ExpressTech Systems Quiz And Survey Master)
- [CVE-2026-65453](https://cve.now/CVE-2026-65453.md): WordPress Ebook Store plugin \<= 6.19 - Broken Access Control vulnerability (CVSS 5.3, motov.net Ebook Store)
- [CVE-2026-65452](https://cve.now/CVE-2026-65452.md): WordPress Ebook Store plugin \<= 6.19 - Broken Access Control vulnerability (CVSS 5.3, motov.net Ebook Store)
- [CVE-2026-65451](https://cve.now/CVE-2026-65451.md): WordPress MapSVG plugin \<= 8.14.0 - SQL Injection vulnerability (CVSS 8.5, RomanCode MapSVG)
- [CVE-2026-65450](https://cve.now/CVE-2026-65450.md): WordPress MapSVG plugin \<= 8.14.0 - SQL Injection vulnerability (CVSS 8.5, RomanCode MapSVG)
- [CVE-2026-65449](https://cve.now/CVE-2026-65449.md): WordPress MapSVG plugin \<= 8.14.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, RomanCode MapSVG)
- [CVE-2026-61981](https://cve.now/CVE-2026-61981.md): WordPress Simple Link Directory Pro plugin \<= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, QuantumCloud Simple Link Directory Pro)
- [CVE-2026-61973](https://cve.now/CVE-2026-61973.md): WordPress ShopLentor Pro plugin \<= 2.8.5 - Broken Access Control vulnerability (CVSS 4.3, WooLentor ShopLentor Pro)
- [CVE-2026-61972](https://cve.now/CVE-2026-61972.md): WordPress ShopLentor Pro plugin \<= 2.8.5 - Broken Access Control vulnerability (CVSS 5.3, WooLentor ShopLentor Pro)
- [CVE-2026-61954](https://cve.now/CVE-2026-61954.md): WordPress PayU India plugin \<= 3.8.9 - Broken Access Control vulnerability (CVSS 7.5, PayU India)
- [CVE-2026-61951](https://cve.now/CVE-2026-61951.md): WordPress TrueBooker plugin \<= 1.2.3 - Privilege Escalation vulnerability (CVSS 9.8, themetechmount TrueBooker)
- [CVE-2026-61950](https://cve.now/CVE-2026-61950.md): WordPress TrueBooker plugin \<= 1.2.3 - SQL Injection vulnerability (CVSS 9.3, themetechmount TrueBooker)
- [CVE-2026-61949](https://cve.now/CVE-2026-61949.md): WordPress Bookly plugin \<= 27.7 - SQL Injection vulnerability (CVSS 9.3, Bookly)
- [CVE-2026-61948](https://cve.now/CVE-2026-61948.md): WordPress WPDM – Premium Packages plugin \<= 6.2.0 - SQL Injection vulnerability (CVSS 9.3, Shahjada WPDM – Premium Packages)
- [CVE-2026-61947](https://cve.now/CVE-2026-61947.md): WordPress Form Vibes – Database Manager for Forms plugin \<= 1.5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPVibes Form Vibes – Database Manager for Forms)
- [CVE-2026-61946](https://cve.now/CVE-2026-61946.md): WordPress Easy Appointments plugin \<= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Easy Appointments)
- [CVE-2026-61944](https://cve.now/CVE-2026-61944.md): WordPress Bookly plugin \<= 27.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bookly)
- [CVE-2026-61943](https://cve.now/CVE-2026-61943.md): WordPress WPDM – Premium Packages plugin \<= 6.2.0 - Broken Access Control vulnerability (CVSS 7.5, Shahjada WPDM – Premium Packages)
- [CVE-2026-59555](https://cve.now/CVE-2026-59555.md): WordPress Participants Database plugin \<= 2.7.8.3 - Arbitrary File Deletion vulnerability (CVSS 10.0, Roland Barker Participants Database)
- [CVE-2026-59554](https://cve.now/CVE-2026-59554.md): WordPress Ziina plugin \<= 1.2.21 - Broken Authentication vulnerability (CVSS 7.5, Ziina)
- [CVE-2026-59547](https://cve.now/CVE-2026-59547.md): WordPress Payment Gateway for PayPal on WooCommerce plugin \<= 9.1.4 - Broken Access Control vulnerability (CVSS 7.5, Easy Payment Payment Gateway for PayPal on WooCommerce)
- [CVE-2026-59545](https://cve.now/CVE-2026-59545.md): WordPress miniOrange Discord Integration plugin \<= 2.2.4 - Broken Authentication vulnerability (CVSS 8.1, miniOrange Discord Integration)
- [CVE-2026-59544](https://cve.now/CVE-2026-59544.md): WordPress Thrive Quiz Builder plugin \<= 10.9.3.0 - PHP Object Injection vulnerability (CVSS 9.8, Thrive Themes Coupon Thrive Quiz Builder)
- [CVE-2026-59543](https://cve.now/CVE-2026-59543.md): WordPress Advanced Views plugin \<= 3.8.11 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, WPLake Advanced Views)
- [CVE-2026-59542](https://cve.now/CVE-2026-59542.md): WordPress Kali Forms plugin \<= 2.4.18 - Arbitrary File Deletion vulnerability (CVSS 7.7, WP Chill Kali Forms)
- [CVE-2026-59541](https://cve.now/CVE-2026-59541.md): WordPress WP BASE Booking plugin \<= 6.3.1 - Privilege Escalation vulnerability (CVSS 8.8, Hakan Ozevin WP BASE Booking)
- [CVE-2026-59540](https://cve.now/CVE-2026-59540.md): WordPress SMS Alert Order Notifications plugin \<= 3.9.6 - Privilege Escalation vulnerability (CVSS 9.8, Cozy Vision Technologies Pvt. SMS Alert Order Notifications)
- [CVE-2026-59526](https://cve.now/CVE-2026-59526.md): WordPress MapSVG plugin \<= 8.14.0 - SQL Injection vulnerability (CVSS 9.3, RomanCode MapSVG)
- [CVE-2026-59525](https://cve.now/CVE-2026-59525.md): WordPress Participants Database plugin \<= 2.7.8.3 - SQL Injection vulnerability (CVSS 9.3, Roland Barker Participants Database)
- [CVE-2026-59524](https://cve.now/CVE-2026-59524.md): WordPress Easy Digital Downloads plugin \<= 3.6.7 - Broken Authentication vulnerability (CVSS 6.5, Sandhills Development Easy Digital Downloads)
- [CVE-2026-59522](https://cve.now/CVE-2026-59522.md): WordPress WP ERP plugin \<= 1.17.5 - Broken Access Control vulnerability (CVSS 6.5, weDevs WP ERP)
- [CVE-2026-59517](https://cve.now/CVE-2026-59517.md): WordPress Easy Form Builder plugin \<= 4.0.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, hassantafreshi Easy Form Builder)
- [CVE-2026-59514](https://cve.now/CVE-2026-59514.md): WordPress Buddyboss Platform plugin \<= 3.0.5 - SQL Injection vulnerability (CVSS 9.3, MightyNetworks vs BuddyBoss Buddyboss Platform)
- [CVE-2026-59513](https://cve.now/CVE-2026-59513.md): WordPress Masteriyo - LMS plugin \<= 2.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Masteriyo - LMS)
- [CVE-2026-59512](https://cve.now/CVE-2026-59512.md): WordPress Product Enquiry for WooCommerce plugin \<= 2.2.34.43 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PI Web Solution Product Enquiry for WooCommerce)
- [CVE-2026-57809](https://cve.now/CVE-2026-57809.md): WordPress AffiliateWP plugin \<= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, AffiliateWP)
- [CVE-2026-57808](https://cve.now/CVE-2026-57808.md): WordPress WP EasyPay plugin \<= 4.5.0 - Arbitrary Content Deletion vulnerability (CVSS 6.5, Saad Iqbal WP EasyPay)
- [CVE-2026-57785](https://cve.now/CVE-2026-57785.md): WordPress ApusListing theme \<= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, ApusTheme ApusListing)
- [CVE-2026-57784](https://cve.now/CVE-2026-57784.md): WordPress Ninja Forms File Uploads Extension plugin \<= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 9.6, Ninja Forms File Uploads Extension)
- [CVE-2026-57769](https://cve.now/CVE-2026-57769.md): WordPress Grand Photography theme \<= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Grand Photography)
- [CVE-2026-57767](https://cve.now/CVE-2026-57767.md): WordPress WP Google Maps Pro plugin \<= 10.1.02 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CodeCabin.io WP Google Maps Pro)
- [CVE-2026-57735](https://cve.now/CVE-2026-57735.md): WordPress Breakdance plugin \<= 2.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Soflyy Breakdance)
- [CVE-2026-57717](https://cve.now/CVE-2026-57717.md): WordPress Knit Pay plugin \<= 9.6.0.0 - Broken Access Control vulnerability (CVSS 6.5, knitpay Knit Pay)
- [CVE-2026-57716](https://cve.now/CVE-2026-57716.md): WordPress Broadcast Live Video plugin \<= 7.2.4 - Arbitrary File Deletion vulnerability (CVSS 5.3, videowhisper Broadcast Live Video)
- [CVE-2026-57704](https://cve.now/CVE-2026-57704.md): WordPress Smart Manager plugin \<= 8.90.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, StoreApps Smart Manager)
- [CVE-2026-57703](https://cve.now/CVE-2026-57703.md): WordPress Sunshine Photo Cart plugin \<= 3.6.10.1 - Broken Access Control vulnerability (CVSS 6.3, sunshinephotocart Sunshine Photo Cart)
- [CVE-2026-57701](https://cve.now/CVE-2026-57701.md): WordPress Real Estate Manager Pro plugin \<= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WebCodingPlace Real Estate Manager Pro)
- [CVE-2026-57699](https://cve.now/CVE-2026-57699.md): WordPress Slider Pro plugin \<= 4.8.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bqworks Slider Pro)
- [CVE-2026-57696](https://cve.now/CVE-2026-57696.md): WordPress Picture Gallery plugin \<= 1.6.5 - Arbitrary File Deletion vulnerability (CVSS 7.1, videowhisper Picture Gallery)
- [CVE-2026-57428](https://cve.now/CVE-2026-57428.md): WordPress Sprout Clients plugin \<= 3.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, BoldGrid Sprout Clients)
- [CVE-2026-57427](https://cve.now/CVE-2026-57427.md): WordPress Download Monitor - WPForms Lock plugin \<= 1.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Download Monitor - WPForms Lock)
- [CVE-2026-57425](https://cve.now/CVE-2026-57425.md): WordPress Autopay dla WooCommerce plugin \<= 2.2.27 - Broken Access Control vulnerability (CVSS 6.5, wpdesk Autopay dla WooCommerce)
- [CVE-2026-57397](https://cve.now/CVE-2026-57397.md): WordPress Coaching theme \<= 3.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThimPress. Coaching)
- [CVE-2026-57384](https://cve.now/CVE-2026-57384.md): WordPress WishList Member X plugin \<= 3.32.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Membership Software WishList Member X)
- [CVE-2026-57374](https://cve.now/CVE-2026-57374.md): WordPress Funnel Kit Funnel Builder PRO plugin \<= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Wisetr Funnel Kit Funnel Builder PRO)
- [CVE-2026-57373](https://cve.now/CVE-2026-57373.md): WordPress Funnel Kit Funnel Builder PRO plugin \<= 3.15.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Wisetr Funnel Kit Funnel Builder PRO)
- [CVE-2026-57370](https://cve.now/CVE-2026-57370.md): WordPress Visitor Traffic Real Time Statistics Pro plugin \<= 11.9.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CODEPRESS IT Solutions Visitor Traffic Real Time Statistics…)
- [CVE-2026-57367](https://cve.now/CVE-2026-57367.md): WordPress WP Booking System plugin \< 5.12.8.1 - Broken Access Control vulnerability (CVSS 7.1, WP Booking System . WP Booking System)
- [CVE-2026-27423](https://cve.now/CVE-2026-27423.md): WordPress Participants Database plugin \<= 2.7.8.4 - Broken Access Control vulnerability (CVSS 4.3, Roland Barker Participants Database)
- [CVE-2026-27422](https://cve.now/CVE-2026-27422.md): WordPress YT Player plugin \<= 2.1.2 - Broken Access Control vulnerability (CVSS 5.3, bPlugins YT Player)
- [CVE-2026-27418](https://cve.now/CVE-2026-27418.md): WordPress WP Fast Total Search plugin \<= 1.81.282 - Broken Access Control vulnerability (CVSS 5.3, Epsiloncool WP Fast Total Search)
- [CVE-2026-27403](https://cve.now/CVE-2026-27403.md): WordPress Hubbub Lite plugin \<= 1.36.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, NerdPress Hubbub Lite)
- [CVE-2026-27399](https://cve.now/CVE-2026-27399.md): WordPress MarketKing plugin \<= 2.1.40 - Broken Access Control vulnerability (CVSS 5.3, WebWizards MarketKing)
- [CVE-2026-27392](https://cve.now/CVE-2026-27392.md): WordPress uListing plugin \<= 2.2.0 - Broken Access Control vulnerability (CVSS 4.3, Stylemix uListing)
- [CVE-2026-27391](https://cve.now/CVE-2026-27391.md): WordPress uListing plugin \<= 2.2.0 - Broken Access Control vulnerability (CVSS 5.4, Stylemix uListing)
- [CVE-2026-27377](https://cve.now/CVE-2026-27377.md): WordPress QuickCal - Appointment Booking Calendar for WordPress plugin \<= 1.0.16 - Broken Access Control vulnerability (CVSS 6.7, axiomthemes QuickCal - Appointment Booking Calendar for Wor…)
- [CVE-2026-27372](https://cve.now/CVE-2026-27372.md): WordPress PeproDev Ultimate Invoice plugin \<= 2.2.6 - Sensitive Data Exposure vulnerability (CVSS 6.5, Pepro Dev. Group PeproDev Ultimate Invoice)
- [CVE-2026-27355](https://cve.now/CVE-2026-27355.md): WordPress Ditty plugin \<= 3.1.66 - Broken Access Control vulnerability (CVSS 5.3, metaphorcreations Ditty)
- [CVE-2026-27064](https://cve.now/CVE-2026-27064.md): WordPress Mailster plugin \<= 4.1.17 - Arbitrary File Upload vulnerability (CVSS 9.1, EverPress Mailster)
- [CVE-2026-25466](https://cve.now/CVE-2026-25466.md): WordPress WP Go Maps plugin \<= 10.1.04 - Broken Access Control vulnerability (CVSS 5.3, WPGMaps WP Go Maps)
- [CVE-2026-25427](https://cve.now/CVE-2026-25427.md): WordPress eRoom plugin \<= 1.7.1 - Broken Access Control vulnerability (CVSS 5.4, DigitalME eRoom)
- [CVE-2026-25424](https://cve.now/CVE-2026-25424.md): WordPress Mediavine Control Panel plugin \<= 2.10.10 - Broken Access Control vulnerability (CVSS 4.3, Mediavine Control Panel)
- [CVE-2026-25405](https://cve.now/CVE-2026-25405.md): WordPress eRoom plugin \<= 1.7.1 - SQL Injection vulnerability (CVSS 8.5, DigitalME eRoom)
- [CVE-2026-24639](https://cve.now/CVE-2026-24639.md): WordPress Photo Block plugin \<= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4, Ronald Huereca Photo Block)
- [CVE-2026-24628](https://cve.now/CVE-2026-24628.md): WordPress Photo Gallery by Supsystic plugin \<= 1.16.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Photo Gallery by Supsystic)
- [CVE-2026-24552](https://cve.now/CVE-2026-24552.md): WordPress Create by Mediavine plugin \<= 2.5.3 - SQL Injection vulnerability (CVSS 8.5, John-Michael L'Allier Create)
- [CVE-2026-24537](https://cve.now/CVE-2026-24537.md): WordPress WP Accessibility Helper (WAH) plugin \<= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Alex Volkov WP Accessibility Helper)
- [CVE-2025-68081](https://cve.now/CVE-2025-68081.md): WordPress WP-Polls plugin \<= 2.77.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Lester Chan WP-Polls)
- [CVE-2026-64611](https://cve.now/CVE-2026-64611.md): Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel() (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2026-16745](https://cve.now/CVE-2026-16745.md): Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation (CVSS 8.8, Red Hat OpenShift AI)
- [CVE-2026-15015](https://cve.now/CVE-2026-15015.md): MountDev AI MCP Connector for WordPress \<= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint (CVSS 9.8, cascadiawebservices MountDev AI MCP Connector for WordPress)
- [CVE-2026-15394](https://cve.now/CVE-2026-15394.md): Header Footer Script Adder \<= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm\_code' Snippet Meta (CVSS 6.4, mahethekiller Header Footer Script Adder)
- [CVE-2026-15448](https://cve.now/CVE-2026-15448.md): Tickera \<= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc\_order\_status\_filter' Parameter (CVSS 6.5, Tickera – Sell Tickets & Manage Events)
- [CVE-2026-13119](https://cve.now/CVE-2026-13119.md): Registrations for the Events Calendar \<= 3.2 - Authenticated (Contributor+) SQL Injection via 'standard' Parameter (CVSS 6.5, roundupwp Registrations for the Events Calendar – Event Reg…)
- [CVE-2026-15786](https://cve.now/CVE-2026-15786.md): WP Encryption \<= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter (CVSS 4.4, gowebsmarty WP Encryption – Lifetime Free SSL Cert & HTTPS,…)
- [CVE-2026-13009](https://cve.now/CVE-2026-13009.md): AI Copilot \<= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order\[0\]\[dir\]' Parameter (CVSS 6.5, wupsales AI Copilot – Content Generator)
- [CVE-2026-15017](https://cve.now/CVE-2026-15017.md): MDJM Event Management \<= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change\_role' Handlers (CVSS 8.8, MDJM Event Management)
- [CVE-2026-15348](https://cve.now/CVE-2026-15348.md): Premium Packages \<= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter (CVSS 6.3, codename065 Premium Packages – Sell Digital Products Secure…)
- [CVE-2026-65758](https://cve.now/CVE-2026-65758.md): Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 (CVSS 8.2, tassos.gr Convert Forms extension for Joomla)
- [CVE-2026-65713](https://cve.now/CVE-2026-65713.md): Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension (CVSS 6.5, regularlabs.com Modals Pro extension for Joomla)
- [CVE-2026-64873](https://cve.now/CVE-2026-64873.md): Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension (CVSS 9.8, regularlabs.com Cache Cleaner Pro extension for Joomla)
- [CVE-2026-64871](https://cve.now/CVE-2026-64871.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension (CVSS 5.4, regularlabs.com Cache Cleaner extension for Joomla)
- [CVE-2026-65757](https://cve.now/CVE-2026-65757.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension (CVSS 8.1, regularlabs.com Modules Anywhere extension for Joomla)
- [CVE-2026-65755](https://cve.now/CVE-2026-65755.md): Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension (CVSS 7.5, regularlabs.com Articles Anywhere extension for Joomla · re…)
- [CVE-2026-65754](https://cve.now/CVE-2026-65754.md): Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension (CVSS 7.5, regularlabs.com ReReplacer PRo extension for Joomla)
- [CVE-2026-64875](https://cve.now/CVE-2026-64875.md): Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension (CVSS 6.5, regularlabs.com GeoIP extension for Joomla)
- [CVE-2026-64876](https://cve.now/CVE-2026-64876.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension (CVSS 8.8, regularlabs.com GeoIP extension for Joomla)
- [CVE-2026-64872](https://cve.now/CVE-2026-64872.md): Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension (CVSS 6.5, regularlabs.com Cache Cleaner Pro extension for Joomla)
- [CVE-2026-65712](https://cve.now/CVE-2026-65712.md): Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension (CVSS 6.2, regularlabs.com CDN for Joomla Pro extension for Joomla)
- [CVE-2026-65756](https://cve.now/CVE-2026-65756.md): Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension (CVSS 6.1, regularlabs.com Keyboard Shortcuts extension for Joomla)
- [CVE-2026-64874](https://cve.now/CVE-2026-64874.md): Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension (CVSS 9.8, regularlabs.com Cache Cleaner Pro extension for Joomla)
- [CVE-2026-64799](https://cve.now/CVE-2026-64799.md): Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions (CVSS 7.5, regularlabs.com Articles Anywhere Pro extension for Joomla…)
- [CVE-2026-65430](https://cve.now/CVE-2026-65430.md): Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension (CVSS 7.5, regularlabs.com GeoIP extension for Joomla)
- [CVE-2026-65431](https://cve.now/CVE-2026-65431.md): Joomla Extension - regularlabs.com - Zipslip in GeoIP extension (CVSS 9.8, regularlabs.com GeoIP extension for Joomla)
- [CVE-2026-15011](https://cve.now/CVE-2026-15011.md): Customer Support Ticket System & Helpdesk \<= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter (CVSS 9.8, emarket-design Customer Support Ticket System & Helpdesk)
- [CVE-2026-14282](https://cve.now/CVE-2026-14282.md): GoDAM \<= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field (CVSS 9.8, rtcamp GoDAM – Organize WordPress Media Library & File Mana…)
- [CVE-2026-15794](https://cve.now/CVE-2026-15794.md): Grid/List View for WooCommerce \<= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute (CVSS 6.4, berocket Grid/List View for WooCommerce)
- [CVE-2026-14481](https://cve.now/CVE-2026-14481.md): Equalize Digital Accessibility Checker \<= 1.46.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' Parameter (CVSS 6.4, equalizedigital Equalize Digital Accessibility Checker – WC…)
- [CVE-2026-15906](https://cve.now/CVE-2026-15906.md): Premium Packages \<= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter (CVSS 6.5, codename065 Premium Packages – Sell Digital Products Secure…)
- [CVE-2026-15646](https://cve.now/CVE-2026-15646.md): Brands for WooCommerce \<= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4, berocket Brands for WooCommerce)
- [CVE-2026-15647](https://cve.now/CVE-2026-15647.md): Brands for WooCommerce \<= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br\_brand\_tooltip' Term Meta Field (CVSS 4.4, berocket Brands for WooCommerce)
- [CVE-2026-15761](https://cve.now/CVE-2026-15761.md): Tickera \<= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc\_event\_filter' Parameter (CVSS 6.5, Tickera – Sell Tickets & Manage Events)
- [CVE-2026-15827](https://cve.now/CVE-2026-15827.md): GutenKit \<= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints (CVSS 5.3, ataurr GutenKit – Page Builder Blocks, Patterns, and Templa…)
- [CVE-2026-15404](https://cve.now/CVE-2026-15404.md): Bulk Page Generator \<= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title (CVSS 6.4, niklaslindemann Bulk Page Generator – LPagery)
- [CVE-2026-16078](https://cve.now/CVE-2026-16078.md): WCPOS \<= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter (CVSS 6.5, kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce)
- [CVE-2026-16723](https://cve.now/CVE-2026-16723.md): Remote Code Execution in fastjson 1.2.68–1.2.83 (CVSS 9.0, Alibaba Fastjson · com.alibaba:fastjson)
- [CVE-2026-52688](https://cve.now/CVE-2026-52688.md): RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation (CVSS 7.5, PowerDNS Recursor)
- [CVE-2026-52686](https://cve.now/CVE-2026-52686.md): Wildcard CNAME proof validation bypass (CVSS 3.7, PowerDNS Recursor)
- [CVE-2024-58330](https://cve.now/CVE-2024-58330.md): A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytic (CVSS 7.5, Bosch Camera Firmware)
- [CVE-2024-58023](https://cve.now/CVE-2024-58023.md): Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information. (CVSS 8.4, Bosch Configuration Manager)
- [CVE-2026-52684](https://cve.now/CVE-2026-52684.md): Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack (CVSS 3.7, PowerDNS Recursor)
- [CVE-2026-16287](https://cve.now/CVE-2026-16287.md): Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update (CVSS 7.8, TUBITAK BILGEM Software Technologies Research Institute par…)
- [CVE-2026-9713](https://cve.now/CVE-2026-9713.md): Product Designer for WooCommerce WordPress | Lumise \<= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload (CVSS 7.5, King-Theme Product Designer for WooCommerce WordPress | Lum…)
- [CVE-2026-9635](https://cve.now/CVE-2026-9635.md): WP Shortcode by MyThemeShop \<= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute (CVSS 6.4, WP Shortcode by MyThemeShop)
- [CVE-2026-9729](https://cve.now/CVE-2026-9729.md): Web Push Notifications \<= 4.39.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'webpushr\_notification\_title' Post Meta Parameter (CVSS 6.4, Web Push Notifications – Webpushr)
- [CVE-2026-12421](https://cve.now/CVE-2026-12421.md): ARforms \<= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values (CVSS 7.2, ARforms)
- [CVE-2026-59678](https://cve.now/CVE-2026-59678.md): portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager (CVSS 7.1, Linux-Gaming PortProtonQt)
- [CVE-2026-59677](https://cve.now/CVE-2026-59677.md): Process Kill Attack Vector in killall() in seunshare (CVSS 6.8, SELinuxProject selinux)
- [CVE-2026-59676](https://cve.now/CVE-2026-59676.md): Local File Deletion Attack Vector in rm\_rf() in seunshare (CVSS 5.8, SELinuxProject selinux)
- [CVE-2026-9577](https://cve.now/CVE-2026-9577.md): Post Status Notifier Lite \< 1.13.0 - Reflected XSS via mod Parameter (CVSS 4.8, Post Status Notifier Lite)
- [CVE-2026-9066](https://cve.now/CVE-2026-9066.md): WP Compress \< 7.10.04 - Reflected XSS via test\_zone (CVSS 6.1, WP Compress)
- [CVE-2026-14291](https://cve.now/CVE-2026-14291.md): Security Ninja (Premium) \< 5.290 - Two-Factor Authentication Bypass via secnin\_skip\_2fa (CVSS 7.5, security-ninja-premium)
- [CVE-2026-12082](https://cve.now/CVE-2026-12082.md): Praison AI SEO \< 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure) (CVSS 7.5, Praison AI SEO)
- [CVE-2026-64600](https://cve.now/CVE-2026-64600.md): xfs: resample the data fork mapping after cycling ILOCK (CVSS 7.8, Linux)
- [CVE-2026-7232](https://cve.now/CVE-2026-7232.md): FormCraft \<= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters (CVSS 7.2, FormCraft)
- [CVE-2026-7534](https://cve.now/CVE-2026-7534.md): SUMO Reward Points for WooCommerce \<= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter (CVSS 7.2, FantasticPlugins SUMO Reward Points for WooCommerce)
- [CVE-2026-63226](https://cve.now/CVE-2026-63226.md): Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. (CVSS 5.8, Ricoh Company Ricoh printers and Multifunction Printers)
- [CVE-2026-6390](https://cve.now/CVE-2026-6390.md): Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. (CVSS 6.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-15074](https://cve.now/CVE-2026-15074.md): @fastify/static vulnerable to route guard bypass via path traversal (CVSS 7.5, @fastify/static)
- [CVE-2026-7120](https://cve.now/CVE-2026-7120.md): @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths (CVSS 5.3, @fastify/static)
- [CVE-2026-21723](https://cve.now/CVE-2026-21723.md): CVE-2026-21723 Record (CVSS 5.3, Grafana OSS)
- [CVE-2026-16653](https://cve.now/CVE-2026-16653.md): boazsegev facil.io Public Folder http.c http\_sendfile2 path traversal (CVSS 6.9, boazsegev facil.io)
- [CVE-2026-38764](https://cve.now/CVE-2026-38764.md): An issue in Unistal Systems Pvt. (CVSS 7.8)
- [CVE-2026-39155](https://cve.now/CVE-2026-39155.md): Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed inco (CVSS 6.5)
- [CVE-2026-52439](https://cve.now/CVE-2026-52439.md): An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection m (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.