Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103964 | medium | 4.3 | No | The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via t... | 2026-10-13 |
| CVE-2026-103889 | critical | 9.8 | No | The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including... | 2026-10-13 |
| CVE-2026-103424 | medium | 5.4 | No | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comm... | 2026-10-13 |
| CVE-2026-102401 | medium | 6.4 | No | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all versions up to, and... | 2026-10-13 |
| CVE-2026-96743 | medium | 6.4 | No | The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versio... | 2026-10-13 |
| CVE-2026-107645 | critical | 9.1 | No | The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the... | 2026-10-13 |
| CVE-2026-104898 | medium | 6.8 | No | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all... | 2026-10-13 |
| CVE-2026-104797 | high | 8.1 | No | The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Passwo... | 2026-10-13 |
| CVE-2026-104732 | critical | 9.8 | No | The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulner... | 2026-10-13 |
| CVE-2026-103365 | medium | 5.3 | No | The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versio... | 2026-10-13 |
| CVE-2026-93883 | medium | 6.4 | No | The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all... | 2026-10-13 |
| CVE-2026-104915 | medium | 6.5 | No | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all ver... | 2026-10-13 |
| CVE-2026-104022 | medium | 5.4 | No | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all ver... | 2026-10-13 |
| CVE-2026-109404 | medium | 5.3 | No | A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the fil... | 2026-10-13 |
| CVE-2026-109189 | medium | 6.3 | No | A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.test... | 2026-10-13 |
| CVE-2026-109152 | medium | 5.4 | No | A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of th... | 2026-10-13 |
| CVE-2026-108574 | medium | 4.3 | No | A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm... | 2026-10-13 |
| CVE-2026-108570 | medium | 6.3 | No | A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furi... | 2026-10-13 |
| CVE-2026-108566 | low | 3.5 | No | A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/contro... | 2026-10-13 |
| CVE-2026-108541 | medium | 6.3 | No | A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstoref... | 2026-10-13 |