Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82193 | medium | 5.5 | No | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to bui... | 2026-09-08 |
| CVE-2026-82186 | medium | 4.1 | No | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allo... | 2026-09-08 |
| CVE-2026-81347 | medium | 5.9 | No | The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleti... | 2026-09-08 |
| CVE-2026-80438 | medium | 5.9 | No | The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress plu... | 2026-09-08 |
| CVE-2026-79632 | medium | 5.3 | No | The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and... | 2026-09-08 |
| CVE-2026-79631 | medium | 5.3 | No | The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public... | 2026-09-08 |
| CVE-2026-79630 | medium | 5.3 | No | The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bu... | 2026-09-08 |
| CVE-2026-74853 | medium | 6.8 | No | The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author... | 2026-09-08 |
| CVE-2026-19224 | high | 7.2 | No | The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an a... | 2026-09-08 |
| CVE-2026-17517 | medium | 5.3 | No | The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns,... | 2026-09-08 |
| CVE-2026-16281 | high | 7.1 | No | The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image... | 2026-09-08 |
| CVE-2026-18167 | not reported | — | No | A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attack... | 2026-09-08 |
| CVE-2026-76977 | medium | 4.3 | No | SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a... | 2026-09-08 |
| CVE-2026-76971 | medium | 6.5 | No | Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the ser... | 2026-09-08 |
| CVE-2026-76969 | critical | 9.4 | No | @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibilit... | 2026-09-08 |
| CVE-2026-76968 | medium | 6.5 | No | SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain... | 2026-09-08 |
| CVE-2026-76963 | medium | 4.3 | No | Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain una... | 2026-09-08 |
| CVE-2026-76962 | medium | 4.3 | No | SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker wit... | 2026-09-08 |
| CVE-2026-76960 | low | 3.5 | No | SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due... | 2026-09-08 |
| CVE-2026-76959 | medium | 4.6 | No | SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due... | 2026-09-08 |