cve.li

Recent

CVE-2026-108175CWE-79

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-110381CWE-639

WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-103350CWE-1284

WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-110888CWE-862

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-110891CWE-862

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-110890CWE-79

WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-110367CWE-862

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-110371CWE-862

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Published 2026-10-15 by Patchstack

CVE-2026-111105CWE-197

Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

Published 2026-10-15 by zdi

CVE-2026-55414CWE-862CWE-918

NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)

Published 2026-10-15 by GitHub_M

Load more ↓