cve.li

Recent

CVE-2026-61840CWE-918

Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services

Published 2026-10-30 by GitHub_M

CVE-2026-62056CWE-862

WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62023CWE-862

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62019CWE-862

WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-104674CWE-862

WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62047CWE-862

WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-39739CWE-79

WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-73322CWE-863

Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()

Published 2026-10-30 by apache

CVE-2026-52710CWE-80

WordPress GIFTiT &#8211; Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62057CWE-80

WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62121CWE-98

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-62122CWE-862

WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

Published 2026-10-30 by Patchstack

CVE-2026-119117CWE-532CWE-214

Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

Published 2026-10-30 by AMZN

CVE-2026-119777CWE-787

Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

Published 2026-10-30 by redhat

CVE-2026-119979CWE-22

LM Studio before 0.4.22+1 Path Traversal via Model Downloader

Published 2026-10-30 by VulnCheck

CVE-2026-119620CWE-434CWE-284

37954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted upload

Published 2026-10-30 by VulDB

CVE-2026-84243CWE-22

gettext: Directory traversal via the LANGUAGE environment variable

Published 2026-10-30 by glibc

CVE-2026-119086CWE-843CWE-121

Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

Published 2026-10-30 by AMZN

CVE-2026-118697CWE-295

Published 2026-10-30 by JetBrains

CVE-2026-118696CWE-299

Published 2026-10-30 by JetBrains

Load more ↓