Critical vulnerability archive — page 231

SmarterTools1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-23760 · SmarterTools SmarterMail

SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

KEV · due 16 Feb ransomware use EPSS 96%public exploit SSVC act CVSS 9.8

Sangfor2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-1324 · Sangfor Operation and Maintenance Management System

Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection

EPSS 7%public exploit CVSS 9.8

CVE-2026-1325 · Sangfor Operation and Maintenance Security Management System

Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery

EPSS 0.6%public exploit CVSS 9.8

mitre3 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2025-69764 · mitre

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvi…

EPSS 1%public exploit CVSS 9.8

CVE-2025-69828 · mitre

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitr…

EPSS 0.6%public exploit CVSS 10.0

CVE-2025-56590 · mitre

An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10.

EPSS 0.5%public exploit CVSS 9.8

dataease1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-23958 · dataease dataease

DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover

EPSS 0.5%public exploit CVSS 9.8

zhblue1 vulnerability on this pageMax CVSS 9.0Priority 47KEV 0

CVE-2026-23873 · zhblue hustoj

HUSTOJ is Vulnerable to Stored CSV Injection (Formula Injection) in Contest Rank Export

EPSS 0.6%public exploit CVSS 9.0

docling-project1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-24009 · docling-project docling-core

Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage

EPSS 2%CVSS 9.8

choijun1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-0920 · choijun LA-Studio Element Kit for Elementor

LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter

EPSS 1%CVSS 9.8

dragonflyoss1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-24124 · dragonflyoss dragonfly

Dragonfly Manager Job API Allows Unauthenticated Access

EPSS 0.8%CVSS 9.8

Microsoft3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-24306 · Microsoft Azure Front Door

Azure Front Door Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-24307 · Microsoft Microsoft 365 Copilot

M365 Copilot Information Disclosure Vulnerability

EPSS 0.9%CVSS 9.3

CVE-2026-24305 · Microsoft Microsoft Entra

Azure Entra ID Elevation of Privilege Vulnerability

EPSS 0.5%CVSS 9.8

themeton1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-67617 · themeton Consult Aid

WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability

EPSS 0.8%CVSS 9.8

AMASTAR Technology1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-1331 · AMASTAR Technology MeetingHub

AMASTAR Technology｜MeetingHub - Arbitrary File Upload

EPSS 0.7%CVSS 9.8

appsmithorg1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-24042 · appsmithorg appsmith

Appsmith public apps can execute unpublished actions (viewMode confusion)

EPSS 0.6%CVSS 9.8

Farost1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-50002 · Farost Energia

WordPress Energia theme <= 1.1.2 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

garidium1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-68001 · garidium g-FFL Checkout

WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 10.0

OpenSolution1 vulnerability on this pageMax CVSS 9.4Priority 40KEV 0

CVE-2025-67684 · OpenSolution Quick.Cart

Remote Code Execution via Local File Inclusion in Quick.Cart

EPSS 0.8%CVSS 9.4

AmentoTech1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-69101 · AmentoTech Workreap Core

WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability

EPSS 0.6%CVSS 9.8

blazethemes4 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-62050 · blazethemes Blogmatic

WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

CVE-2025-62056 · blazethemes News Event

WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

CVE-2025-68909 · blazethemes Blogistic

WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

CVE-2025-68910 · blazethemes Blogzee

WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

charmbracelet1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-24058 · charmbracelet soft-serve

Soft Serve has Critical Authentication Bypass

EPSS 0.6%CVSS 9.8

InspiryThemes1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-67968 · InspiryThemes Real Homes CRM

WordPress Real Homes CRM plugin <= 1.0.0 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

zozothemes1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-68986 · zozothemes Miion

WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

EVMAPA2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-54816 · EVMAPA EVMAPA

EVMAPA Missing Authentication for Critical Function

EPSS 0.5%CVSS 9.8

CVE-2025-55705 · EVMAPA EVMAPA

EVMAPA Insufficient Session Expiration

EPSS 0.3%CVSS 9.8

gristlabs1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-24002 · gristlabs grist-core

pyodide sandbox option is insecure

EPSS 0.5%CVSS 9.6

LazyCoders LLC1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-68869 · LazyCoders LLC LazyTasks

WordPress LazyTasks plugin <= 1.2.37 - Privilege Escalation vulnerability

EPSS 0.5%CVSS 9.8

nerves-hub1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-64097 · nerves-hub nerves_hub_web

NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force

EPSS 0.5%CVSS 9.8

Nelio Software1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-67944 · Nelio Software Nelio AB Testing

WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability

EPSS 0.6%CVSS 9.1

ThemeREX1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-69079 · ThemeREX Sound | Musical Instruments Online Store

WordPress Sound | Musical Instruments Online Store theme <= 1.6.9 - Deserialization of untrusted data vulnerability

EPSS 0.5%CVSS 9.8

Altium1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-27378 · Altium AES

SQL Injection in AES Due to Inactive SQL Parsing Configuration

EPSS 0.4%CVSS 9.8

CleverReach®1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-68034 · CleverReach® CleverReach® WP

WordPress CleverReach® WP plugin <= 1.5.21 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

Dell1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-22278 · Dell PowerScale OneFS

Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability.

EPSS 0.4%CVSS 9.8

FmeAddons1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-69052 · FmeAddons Registration & Login with Mobile Phone Number for WooCommerce

WordPress Registration & Login with Mobile Phone Number for WooCommerce plugin <= 1.3.1 - Broken Access Control vulnerability

EPSS 0.4%CVSS 9.8

Hubitat1 vulnerability on this pageMax CVSS 9.4Priority 36KEV 0

CVE-2026-1201 · Hubitat Elevation C3

Authorization Bypass Through User-Controlled Key in Hubitat Elevation Hubs

EPSS 0.5%CVSS 9.4

kamleshyadav1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-49055 · kamleshyadav WP Lead Capturing Pages

WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

MailerLite1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-67945 · MailerLite MailerLite – WooCommerce integration

WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Gitea3 vulnerabilities on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-20750 · Gitea Gitea Open Source Git Server

Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)

EPSS 0.4%CVSS 9.1

CVE-2026-20897 · Gitea Gitea Open Source Git Server

Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)

EPSS 0.5%CVSS 9.1

CVE-2026-20912 · Gitea Gitea Open Source Git Server

Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure

EPSS 0.5%CVSS 9.1

StackWC1 vulnerability on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2025-68018 · StackWC Order Listener for WooCommerce

WordPress Order Listener for WooCommerce plugin <= 3.6.1 - Broken Access Control vulnerability

EPSS 0.4%CVSS 9.4

Xpro1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-69312 · Xpro Xpro Elementor Addons

WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.1

ichurakov1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-68857 · ichurakov Paid Downloads

WordPress Paid Downloads plugin <= 3.15 - SQL Injection vulnerability

EPSS 0.3%CVSS 9.3

Vollstart1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2025-68015 · Vollstart Event Tickets with Ticket Scanner

WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability

EPSS 0.4%CVSS 9.0

JuneAndGreen1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-23966 · JuneAndGreen sm-crypto

sm-crypto Affected by Private Key Recovery in SM2-PKE

EPSS 0.2%CVSS 9.1

The archive.