Total
414808 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-93771 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. | |||||
| CVE-2026-93770 | 2026-09-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions. | |||||
| CVE-2026-93651 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions. | |||||
| CVE-2026-93624 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. | |||||
| CVE-2026-93621 | 2026-09-30 | N/A | 8.2 HIGH | ||
| Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. | |||||
| CVE-2026-93514 | 2026-09-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. | |||||
| CVE-2026-93512 | 2026-09-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. | |||||
| CVE-2026-81867 | 2026-09-30 | N/A | N/A | ||
| A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially crafted script bypassing param guards. This vulnerability was patched on 28 June 2026, and no customer action is needed. | |||||
| CVE-2026-7172 | 2026-09-30 | N/A | N/A | ||
| Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=com_virtuemart&page=admin.user_list'. Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent. | |||||
| CVE-2026-7171 | 2026-09-30 | N/A | N/A | ||
| Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.user_add&user_id=45&option=com_virtuemart'. Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent. | |||||
| CVE-2026-7170 | 2026-09-30 | N/A | N/A | ||
| Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7170: parameter 'vendor_store_name' in the endpoint '/administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID]'. Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent. | |||||
| CVE-2026-6223 | 2026-09-30 | N/A | 9.4 CRITICAL | ||
| Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 before 2.3. | |||||
| CVE-2026-62085 | 2026-09-30 | N/A | 7.6 HIGH | ||
| Administrator SQL Injection in WP Activity Log <= 5.6.6 versions. | |||||
| CVE-2026-62083 | 2026-09-30 | N/A | 5.4 MEDIUM | ||
| Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. | |||||
| CVE-2026-62081 | 2026-09-30 | N/A | 5.4 MEDIUM | ||
| Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions. | |||||
| CVE-2026-62080 | 2026-09-30 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions. | |||||
| CVE-2026-62079 | 2026-09-30 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions. | |||||
| CVE-2026-62078 | 2026-09-30 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. | |||||
| CVE-2026-27371 | 2026-09-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. | |||||
| CVE-2026-27085 | 2026-09-30 | N/A | 2.7 LOW | ||
| Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. | |||||