Total
419444 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-94174 | 2026-09-23 | N/A | 7.6 HIGH | ||
| Administrator SQL Injection in Email Log <= 2.63 versions. | |||||
| CVE-2026-94391 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions. | |||||
| CVE-2026-94176 | 2026-09-23 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. | |||||
| CVE-2026-94124 | 2026-09-23 | N/A | 8.5 HIGH | ||
| Contributor SQL Injection in WP EasyCart <= 5.9.4 versions. | |||||
| CVE-2026-95525 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions. | |||||
| CVE-2026-95529 | 2026-09-23 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions. | |||||
| CVE-2026-95593 | 2026-09-23 | N/A | 7.6 HIGH | ||
| Editor SQL Injection in Ultimeter <= 3.0.8 versions. | |||||
| CVE-2026-94680 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions. | |||||
| CVE-2026-95604 | 2026-09-23 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. | |||||
| CVE-2026-93618 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1. | |||||
| CVE-2026-94679 | 2026-09-23 | N/A | 5.4 MEDIUM | ||
| Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions. | |||||
| CVE-2026-93527 | 2026-09-23 | N/A | 8.5 HIGH | ||
| Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions. | |||||
| CVE-2026-93773 | 2026-09-23 | N/A | 8.5 HIGH | ||
| Contributor SQL Injection in Mollie Forms <= 2.11.0 versions. | |||||
| CVE-2026-95514 | 2026-09-23 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions. | |||||
| CVE-2026-94079 | 2026-09-23 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions. | |||||
| CVE-2026-95590 | 2026-09-23 | N/A | 7.1 HIGH | ||
| Subscriber SQL Injection in Tainacan <= 1.2.0 versions. | |||||
| CVE-2026-94461 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions. | |||||
| CVE-2026-96548 | 2026-09-23 | 5.1 MEDIUM | 5.6 MEDIUM | ||
| A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssm_pro/src/main/resources/jdbc.properties. This manipulation causes hard-coded credentials. It is possible to initiate the attack remotely. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet. | |||||
| CVE-2026-95527 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions. | |||||
| CVE-2026-95602 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Request A Quote: from n/a before 4.46.1. | |||||