The archive.

ChetanXpro1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-110644 · ChetanXpro nodejs-whisper

nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType

kky-ykk1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-110643 · kky-ykk transcribe2texts

transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath

mborne1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-110639 · mborne @mborne/extract

@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir

zepspaiva1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-110638 · zepspaiva doc-recog

doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path

danday741 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-110634 · danday74 git-diff

git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings

EPSS 2%CVSS 9.8

scionoftech1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-110635 · scionoftech webp-converter

webp-converter before 3.0.0 OS Command Injection via File Names and Options

shahkashani1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-110649 · shahkashani stills

Stills before 25.24.2 OS Command Injection via Media File Names

TR7 Cyber Defense Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-16740 · TR7 Cyber Defense Inc. TR7 ASP

Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASP

EPSS 2%CVSS 9.8

CVE-2026-16741 · TR7 Cyber Defense Inc. TR7 ASP

OS Command in TR7 Cyber Defense's TR7 ASP

EPSS 2%CVSS 9.8

beganovich1 vulnerability on this pageMax CVSS 9.2Priority 44KEV 0

CVE-2026-110646 · beganovich snappdf

Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()

EPSS 2%CVSS 9.2

Adobe4 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2026-106624 · Adobe ColdFusion 2025

ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)

EPSS 1%CVSS 10.0

CVE-2026-106622 · Adobe ColdFusion 2025

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

EPSS 0.8%CVSS 10.0

CVE-2026-106621 · Adobe ColdFusion 2025

ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)

EPSS 0.9%CVSS 9.1

CVE-2026-106619 · Adobe ColdFusion 2025

ColdFusion | Improper Input Validation (CWE-20)

EPSS 0.6%CVSS 9.0

Samsung Open Source1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-110392 · Samsung Open Source QA-Board

Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning

EPSS 1%CVSS 9.8

snazzyplugins1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-110002 · snazzyplugins Snazzy Social Media Feed

Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter

EPSS 0.9%CVSS 9.8

streetforce11 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-104800 · streetforce1 AGE-GATE

AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php

EPSS 1%CVSS 9.8

Channel Software1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-108065 · Channel Software WebAlliance eCommerce

Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce

EPSS 0.9%CVSS 9.8

ntbyk1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-87855 · ntbyk JTL-Connector for WooCommerce

JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method

EPSS 0.8%CVSS 9.8

printcart1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-93388 · printcart Printcart Store – Web to Print Product Designer for WooCommerce

Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url

EPSS 0.9%CVSS 9.8

wpazleen1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-104748 · wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications

SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register

EPSS 0.8%CVSS 9.8

Gravitee1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2020-37281 · Gravitee Gravitee API Management

Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

EPSS 0.9%CVSS 9.2

Google8 vulnerabilities on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-110152 · Google Chrome

Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary…

EPSS 0.5%CVSS 9.6

CVE-2026-110136 · Google Chrome

Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via…

CVE-2026-110149 · Google Chrome

Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox…

CVE-2026-110161 · Google Chrome

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox…

CVE-2026-110165 · Google Chrome

Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary c…

CVE-2026-110142 · Google Chrome

Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sand…

EPSS 0.3%CVSS 9.6

CVE-2026-110159 · Google Chrome

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the…

EPSS 0.2%CVSS 9.6

CVE-2026-110144 · Google Chrome

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arb…

EPSS 0.2%CVSS 9.6

JTL SW GmbH1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-89310 · JTL SW GmbH JTL-WMS

SQL Command Injection Vulnerability in JTL-WMS

EPSS 0.5%CVSS 9.9

Unknown1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-107594 · Unknown File Upload to Order

File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion

EPSS 0.5%CVSS 10.0

itthinx1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-108291 · itthinx Affiliates

WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

Tyche Softwares2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-97657 · Tyche Softwares Abandoned Cart Pro for WooCommerce

Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter

CVE-2026-97668 · Tyche Softwares Abandoned Cart Pro for WooCommerce

Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value

holithemes1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-92097 · holithemes Click to Chat – HoliThemes

Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder

EPSS 0.5%CVSS 9.1

M A Vinoth Kumar1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-107424 · M A Vinoth Kumar Frontend Dashboard

WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability