Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105157 | medium | 4.3 | No | A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of... | 2026-10-06 |
| CVE-2026-105156 | low | 3.7 | No | A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the co... | 2026-10-06 |
| CVE-2026-105146 | medium | 4.7 | No | A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmi... | 2026-10-06 |
| CVE-2026-105144 | medium | 5.3 | No | A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/... | 2026-10-06 |
| CVE-2026-105141 | medium | 6.3 | No | A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_by_email of the file... | 2026-10-06 |
| CVE-2026-105137 | medium | 5.0 | No | A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Pr... | 2026-10-06 |
| CVE-2026-105099 | low | 3.5 | No | A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file... | 2026-10-06 |
| CVE-2026-105097 | medium | 4.3 | No | A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the... | 2026-10-06 |
| CVE-2026-105096 | medium | 6.3 | No | A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the componen... | 2026-10-06 |
| CVE-2026-104983 | medium | 6.3 | No | A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file shell/ev-window.c of... | 2026-10-06 |
| CVE-2026-92767 | medium | 6.4 | No | The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all ve... | 2026-10-06 |
| CVE-2026-92084 | critical | 9.1 | No | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in a... | 2026-10-06 |
| CVE-2026-97660 | high | 7.2 | No | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipar... | 2026-10-06 |
| CVE-2026-97343 | medium | 4.3 | No | The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Improper Authenticati... | 2026-10-06 |
| CVE-2026-96267 | high | 7.5 | No | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all... | 2026-10-06 |
| CVE-2026-94505 | high | 8.1 | No | The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all version... | 2026-10-06 |
| CVE-2026-93896 | medium | 6.1 | No | The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.1. T... | 2026-10-06 |
| CVE-2026-93889 | high | 7.2 | No | The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Me... | 2026-10-06 |
| CVE-2026-92974 | medium | 6.1 | No | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'thu... | 2026-10-06 |
| CVE-2026-87115 | critical | 9.1 | No | The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path va... | 2026-10-06 |