Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104755 | medium | 4.8 | No | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,... | 2026-10-16 |
| CVE-2026-104730 | critical | 9.8 | No | The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection... | 2026-10-16 |
| CVE-2026-104932 | high | 8.0 | No | The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the rep... | 2026-10-16 |
| CVE-2026-104745 | high | 8.1 | No | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email`... | 2026-10-16 |
| CVE-2026-105065 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore xstore allows Reflec... | 2026-10-16 |
| CVE-2026-103696 | medium | 6.8 | No | The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unau... | 2026-10-16 |
| CVE-2026-104001 | medium | 5.4 | No | The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all v... | 2026-10-16 |
| CVE-2026-103999 | high | 7.2 | No | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to,... | 2026-10-16 |
| CVE-2026-103896 | high | 7.5 | No | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via... | 2026-10-16 |
| CVE-2026-103768 | critical | 9.8 | No | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, a... | 2026-10-16 |
| CVE-2026-103911 | medium | 6.5 | No | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execut... | 2026-10-16 |
| CVE-2026-103525 | high | 7.5 | No | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference... | 2026-10-16 |
| CVE-2026-103481 | medium | 6.1 | No | The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'permalink' parameter in all versions up t... | 2026-10-16 |
| CVE-2026-103518 | medium | 4.9 | No | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'pr... | 2026-10-16 |
| CVE-2026-102298 | not reported | — | No | In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can suppl... | 2026-10-16 |
| CVE-2026-102175 | critical | 9.8 | No | A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a... | 2026-10-16 |
| CVE-2026-102174 | high | 8.8 | No | A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an a... | 2026-10-16 |
| CVE-2026-102061 | high | 8.8 | No | A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adja... | 2026-10-16 |
| CVE-2026-102059 | high | 8.8 | No | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd)... | 2026-10-16 |
| CVE-2026-102055 | high | 8.8 | No | A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series... | 2026-10-16 |