Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-114429 | medium | 6.8 | No | The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before storing it and outputti... | 2026-10-26 |
| CVE-2026-113674 | low | 3.7 | No | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowi... | 2026-10-26 |
| CVE-2026-113673 | high | 7.2 | No | The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP... | 2026-10-26 |
| CVE-2026-113493 | medium | 6.8 | No | The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before outputting them wi... | 2026-10-26 |
| CVE-2026-113492 | medium | 5.3 | No | The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its... | 2026-10-26 |
| CVE-2026-113491 | medium | 6.4 | No | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when savin... | 2026-10-26 |
| CVE-2026-113490 | medium | 5.3 | No | The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listing's map-popup through... | 2026-10-26 |
| CVE-2026-113489 | medium | 4.3 | No | The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing u... | 2026-10-26 |
| CVE-2026-112207 | high | 7.1 | No | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it cli... | 2026-10-26 |
| CVE-2026-110956 | critical | 9.8 | No | The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, tr... | 2026-10-26 |
| CVE-2026-107907 | medium | 6.5 | No | The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playl... | 2026-10-26 |
| CVE-2026-107887 | medium | 5.4 | No | The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and a... | 2026-10-26 |
| CVE-2026-105199 | medium | 6.8 | No | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX actions, and expo... | 2026-10-26 |
| CVE-2026-115586 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy a... | 2026-10-26 |
| CVE-2026-83925 | medium | 4.7 | No | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | 2026-10-26 |
| CVE-2026-83926 | medium | 4.4 | No | Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. | 2026-10-26 |
| CVE-2026-97295 | medium | 4.3 | No | Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request F... | 2026-10-26 |
| CVE-2026-115958 | medium | 5.3 | No | Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured... | 2026-10-26 |
| CVE-2026-115949 | medium | 6.5 | No | Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor... | 2026-10-26 |
| CVE-2026-115614 | medium | 5.3 | No | Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiti... | 2026-10-26 |