cve.li

Recent

CVE-2026-61840CWE-918

Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services

Published 2026-10-30 by GitHub_M

CVE-2026-62056CWE-862

WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62023CWE-862

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62019CWE-862

WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-104674CWE-862

WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62047CWE-862

WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-39739CWE-79

WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-73322CWE-863

Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()

Published 2026-10-30 by apache

CVE-2026-52710CWE-80

WordPress GIFTiT &#8211; Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62057CWE-80

WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability

Published 2026-10-30 by Patchstack

Load more ↓