cve.li

Recent

CVE-2026-96451CWE-639

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

Published 2026-10-03 by Patchstack

CVE-2026-103342CWE-79

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Published 2026-10-03 by Patchstack

CVE-2026-103065CWE-1284

WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability

Published 2026-10-03 by Patchstack

CVE-2026-105122CWE-918

OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri

Published 2026-10-03 by VulnCheck

CVE-2026-105121CWE-285

OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping

Published 2026-10-03 by VulnCheck

CVE-2026-105120CWE-200

OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint

Published 2026-10-03 by VulnCheck

CVE-2026-105119CWE-285

OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows

Published 2026-10-03 by VulnCheck

CVE-2026-105118CWE-347

OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

Published 2026-10-03 by VulnCheck

CVE-2026-105117CWE-20

OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions

Published 2026-10-03 by VulnCheck

CVE-2026-105116CWE-79

OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page

Published 2026-10-03 by VulnCheck

Load more ↓