Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80069 | medium | 4.3 | No | MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, includ... | 2026-10-29 |
| CVE-2026-80067 | medium | 5.4 | No | MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users... | 2026-10-29 |
| CVE-2026-84387 | high | 7.2 | No | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet Fort... | 2026-10-29 |
| CVE-2026-59837 | medium | 6.6 | No | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, For... | 2026-10-29 |
| CVE-2026-39814 | medium | 6.7 | No | Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6... | 2026-10-29 |
| CVE-2026-54871 | medium | 5.3 | No | Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Exploiting Incor... | 2026-10-29 |
| CVE-2026-52708 | medium | 4.3 | No | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Secu... | 2026-10-29 |
| CVE-2026-48884 | medium | 5.3 | No | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Secu... | 2026-10-29 |
| CVE-2026-48202 | medium | 5.3 | No | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-builder allows Code I... | 2026-10-29 |
| CVE-2026-119145 | critical | 9.9 | No | Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validat... | 2026-10-29 |
| CVE-2026-25450 | medium | 5.3 | No | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Contro... | 2026-10-29 |
| CVE-2026-39782 | medium | 5.3 | No | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Leve... | 2026-10-29 |
| CVE-2026-39736 | high | 8.5 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows... | 2026-10-29 |
| CVE-2026-25467 | medium | 5.3 | No | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registration user-registratio... | 2026-10-29 |
| CVE-2026-118762 | critical | 9.3 | No | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_... | 2026-10-29 |
| CVE-2026-119141 | medium | 5.3 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious Wasm modules to pani... | 2026-10-29 |
| CVE-2026-119137 | medium | 5.3 | No | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that allows guests to crash the host through... | 2026-10-29 |
| CVE-2026-118095 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant... | 2026-10-29 |
| CVE-2026-118088 | medium | 5.3 | No | Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security L... | 2026-10-29 |
| CVE-2026-116856 | medium | 5.3 | No | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measuremen... | 2026-10-29 |