by Kastro CVE-2026-48853 · elixir-grpc grpc
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,935 matching vulnerabilities · Page 155 of 779
elixir-grpc
Liquid Web / StellarWP
CVE-2026-49772 · Liquid Web / StellarWP The Events Calendar
WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability
Eyal Fitoussi
CVE-2026-52715 · Eyal Fitoussi GEO my WordPress
WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability
themetechmount
MantraBrain
Brainstorm Force
CVE-2026-49781 · Brainstorm Force OttoKit
WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability
CRM Perks
CVE-2026-49085 · CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability
CVE-2026-49104 · CRM Perks Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability
CVE-2026-49105 · CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability
CVE-2026-49106 · CRM Perks Integration for Contact Form 7 and Constant Contact
WordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability
CVE-2026-49109 · crm perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.3 - PHP Object Injection vulnerability
CVE-2026-49763 · CRM Perks Integration for Contact Form 7 HubSpot
WordPress Integration for Contact Form 7 HubSpot plugin <= 1.3.7 - PHP Object Injection vulnerability
CVE-2026-49765 · CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms
WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.8 - PHP Object Injection vulnerability
WP User Manager
CVE-2026-49766 · WP User Manager WP User Manager
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
PEVANS
Ahmad
Happyforms
i18next
CVE-2026-48713 · i18next i18next-fs-backend
i18next-fs-backend: Prototype pollution via crafted missing-key string
CVE-2026-48714 · i18next i18next-http-middleware
i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names
Metagauss
CVE-2026-49764 · Metagauss RegistrationMagic
WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability
Mozilla
CVE-2026-12295 · Mozilla Firefox
Sandbox escape in the DOM: Navigation component
CVE-2026-12296 · Mozilla Firefox
Sandbox escape in the Security: Process Sandboxing component
CVE-2026-12297 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the Networking component
CVE-2026-12294 · Mozilla Firefox
Sandbox escape in the DOM: Workers component
CVE-2026-12293 · Mozilla Firefox
Use-after-free in the Graphics: WebGPU component
CVE-2026-12315 · Mozilla Firefox
Mitigation bypass in the DOM: Security component
CVE-2026-12304 · Mozilla Firefox
Same-origin policy bypass in the Networking: Cookies component
Ninja Team
WP Travel Engine
CVE-2026-49770 · WP Travel Engine WP Travel Engine
WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability
Filipe Nasc
themagnifico52
CVE-2026-40750 · themagnifico52 Kids Online Store
WordPress Kids Online Store theme <= 0.8.9 - Arbitrary File Upload vulnerability
Tomdever
BIAFRA
CVE-2026-11832 · BIAFRA Dancer2::Plugin::Auth::OAuth
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce
Canon Inc.
CVE-2026-9258 · Canon Inc. EOS Network Setting Tool for Windows
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9260 · Canon Inc. EOS Network Setting Tool for Windows
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9259 · Canon Inc. EOS Network Setting Tool for Windows
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9261 · Canon Inc. EOS Network Setting Tool for Windows
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Dev4Press
CVE-2026-42639 · Dev4Press GD Rating System
WordPress GD Rating System plugin <= 3.6.2 - SQL Injection vulnerability
FunnelKit
CVE-2026-42381 · FunnelKit Funnel Builder by FunnelKit
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability
impleCode
CVE-2026-52693 · impleCode eCommerce Product Catalog
WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
JExtensions Store
CVE-2026-49776 · JExtensions Store GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites
WordPress GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin <= 2.32.6 - SQL Injection vulnerability
Passionate Programmer Peter
CVE-2026-42665 · Passionate Programmer Peter WP Data Access
WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability
Realtyna
CVE-2026-45439 · Realtyna Realtyna Organic IDX plugin
WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability
TIMLEGGE
tychesoftwares
CVE-2026-42386 · tychesoftwares Order Delivery Date for WooCommerce
WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability
Wasiliy Strecker
CVE-2026-40771 · Wasiliy Strecker Contest Gallery
WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability
yydevelopment
CVE-2026-49067 · yydevelopment Advanced 301 and 302 Redirect
WordPress Advanced 301 and 302 Redirect plugin <= 1.6.9 - SQL Injection vulnerability
RealMag777
CVE-2026-39574 · RealMag777 InPost Gallery