By publication date

Exploited and new serious CVEs: October 2026

8,750 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 48 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-108429No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108430No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108431No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108432No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
31Monitor	CVE-2026-108433No exploit	Microsoft Office Word Security Feature Bypass Vulnerabilitymicrosoft · 365 apps · CWE-807	High7.8	—	0.4%	Oct 15, 2026
35Monitor	CVE-2026-108437No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108439No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108440No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108441No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108442No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108443No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-193 pre-auth RCE	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108444No exploit	Microsoft Office Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108445No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108446No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108447No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
30Monitor	CVE-2026-108448No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High7.5	—	0.4%	Oct 15, 2026
35Monitor	CVE-2026-108449No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108450No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108451No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 15, 2026
35Monitor	CVE-2026-108452No exploit	Microsoft Office SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-22 RCE Path traversal	High8.8	—	0.8%	Oct 15, 2026
30Monitor	CVE-2026-109468No exploit	ASP.NET Core Denial of Service Vulnerabilitymicrosoft · microsoft visual studio 2022 version 17.14 · CWE-770 Pre-auth Denial of service	High7.5	—	0.9%	Oct 15, 2026
58Plan	CVE-2026-111357Weaponized	Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege eivanti · connect secure · CWE-829 Local privilege escalation	High7.0	KEV	0.5%	Oct 15, 2026
35Monitor	CVE-2026-110913No exploit	Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-119 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 15, 2026
35Monitor	CVE-2026-110914No exploit	Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside google · chrome · CWE-119 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 15, 2026
35Monitor	CVE-2026-110915No exploit	Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandboxgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 15, 2026
38Monitor	CVE-2026-110916No exploit	Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary codegoogle · chrome · CWE-20 pre-auth RCE	Critical9.6	—	0.3%	Oct 15, 2026
35Monitor	CVE-2026-110919No exploit	Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 15, 2026
35Monitor	CVE-2026-110920No exploit	Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-119 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 15, 2026
35Monitor	CVE-2026-110921No exploit	Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 15, 2026
35Monitor	CVE-2026-110922Proof of concept	Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox vgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 15, 2026
34Monitor	CVE-2026-111277No exploit	NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/downloadnivocart · nivocart · CWE-862 Pre-auth Broken access control (IDOR)	High8.7	—	0.4%	Oct 15, 2026
34Monitor	CVE-2026-111279No exploit	Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBERdragonflydb · dragonfly · CWE-789 Pre-auth	High8.7	—	0.5%	Oct 15, 2026
33Monitor	CVE-2026-111280No exploit	snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadAreadavenardella · snap7 · CWE-787 Pre-auth Memory safety	High8.3	—	0.5%	Oct 15, 2026
37Monitor	CVE-2026-111281No exploit	Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentialsjooan · ja-a12 · CWE-798 pre-auth RCE Hard-coded credentials	Critical9.3	—	0.5%	Oct 15, 2026
35Monitor	CVE-2026-111282No exploit	iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransferdriftregion · iso14229 · CWE-190 Pre-auth Memory safety	High8.8	—	0.6%	Oct 15, 2026
38Monitor	CVE-2026-111283Proof of concept	BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configurationbmc helix · bmc helix network management · CWE-305 Pre-auth Auth bypass	Critical9.5	—	0.7%	Oct 15, 2026
36Monitor	CVE-2026-111312No exploit	OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Routeopenhealthforall · openhealth · CWE-306 Pre-auth Auth bypass	Critical9.2	—	0.5%	Oct 15, 2026
28Monitor	CVE-2026-111313No exploit	JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetchdakheera47 · jobops · CWE-918 SSRF	High7.1	—	0.3%	Oct 15, 2026
37Monitor	CVE-2026-111322No exploit	Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control APIcoleam00 · archon · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.8%	Oct 15, 2026
37Monitor	CVE-2026-111329No exploit	JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Consolejuggleim · juggleim · CWE-1392 Pre-auth Hard-coded credentials	Critical9.3	—	0.6%	Oct 15, 2026
32Monitor	CVE-2026-111330No exploit	JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1juggleim · juggleim · CWE-916 Pre-auth	High8.2	—	0.2%	Oct 15, 2026
32Monitor	CVE-2026-111347No exploit	go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwdopsre · go-ldap-admin · CWE-321 Pre-auth Hard-coded credentials	High8.2	—	0.4%	Oct 15, 2026
34Monitor	CVE-2026-111352No exploit	ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST APIthinkcmf · thinkcmf · CWE-863 Broken access control (IDOR)	High8.7	—	0.4%	Oct 15, 2026
36Monitor	CVE-2026-111356No exploit	MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Forcemagicblack · maccms · CWE-307 Pre-auth	Critical9.1	—	0.4%	Oct 15, 2026
28Monitor	CVE-2026-111359No exploit	CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGiftcrmeb · crmeb · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-111363No exploit	BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bboxdataelement · bisheng · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Oct 15, 2026
28Monitor	CVE-2026-111364No exploit	MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branchmindoc-org · mindoc · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-111365No exploit	cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpointscool-team-official · cool-admin-midway · CWE-639 Broken access control (IDOR)	High7.0	—	0.3%	Oct 15, 2026
34Monitor	CVE-2026-111366No exploit	cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpointscool-team-official · cool-admin-midway · CWE-639 Broken access control (IDOR)	High8.6	—	0.5%	Oct 15, 2026
28Monitor	CVE-2026-111369No exploit	ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routesclassroomio · classroomio · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	Oct 15, 2026
36Monitor	CVE-2026-94134Proof of concept	Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by defaultapache software foundation · apache airflow ssh provider · CWE-322 Pre-auth	Critical9.1	—	0.6%	Oct 15, 2026
34Monitor	CVE-2026-75941No exploit	A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allolenovo · legion zone application · CWE-502 RCE Deserialization	High8.6	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-84823No exploit	Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor rolered hat · red hat enterprise linux 8 · CWE-22 Path traversal	High7.1	—	0.4%	Oct 16, 2026
28Monitor	CVE-2026-89057No exploit	A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unalenovo · idea tab pro (tb373fu) · CWE-288 Auth bypass	High7.0	—	0.1%	Oct 16, 2026
28Monitor	CVE-2026-92629No exploit	A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, thlenovo · baiying pc client · CWE-862 RCE Local privilege escalation Broken access control (IDOR)	High7.0	—	0.1%	Oct 16, 2026
28Monitor	CVE-2026-105227No exploit	ISPSoft Out-of-Bounds Read Vulnerabilitydeltaww · ispsoft · CWE-125 Pre-auth Memory safety	High7.0	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-105228No exploit	ISPSoft Out-of-Bounds Read Vulnerabilitydeltaww · ispsoft · CWE-125 Pre-auth Memory safety	High7.0	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-109813No exploit	Shared Hard-coded Root CA Private Keymoxa · aig-302 series · CWE-321 Pre-auth Hard-coded credentials	High8.6	—	0.1%	Oct 16, 2026
28Monitor	CVE-2026-111377No exploit	FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassemblyfreerdp · freerdp · CWE-400 Denial of service	High7.1	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-111378No exploit	FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parserfreerdp · freerdp · CWE-400 Pre-auth Denial of service	High8.7	—	0.5%	Oct 16, 2026
28Monitor	CVE-2026-111379No exploit	FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3freerdp · freerdp · CWE-122 Memory safety	High7.0	—	0.1%	Oct 16, 2026
34Monitor	CVE-2026-111380No exploit	FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backendsfreerdp · freerdp · CWE-190 Pre-auth Memory safety	High8.7	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-111381No exploit	FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parserfreerdp · freerdp · CWE-122 Memory safety	High7.0	—	0.1%	Oct 16, 2026
34Monitor	CVE-2026-111382No exploit	FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combinefreerdp · freerdp · CWE-787 Pre-auth Memory safety	High8.7	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-111383No exploit	Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketnezhahq · nezha · CWE-770 Denial of service	High7.1	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-111384No exploit	Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketnezhahq · nezha · CWE-770 Denial of service	High7.1	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-111387No exploit	Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpointnezhahq · nezha · CWE-212	High7.1	—	0.2%	Oct 16, 2026
33Monitor	CVE-2026-111389Proof of concept	Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validationfrappe · hrms · CWE-89 SQL injection	High8.3	—	0.2%	Oct 16, 2026
32Monitor	CVE-2026-104745Proof of concept	Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameterwpcodefactory · customer email verification for woocommerce · CWE-269 Pre-auth	High8.1	—	0.6%	Oct 16, 2026
28Monitor	CVE-2026-107758No exploit	Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Commentsextendthemes · colibri page builder · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-109207No exploit	RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URLthemeisle · rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-109990No exploit	Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Contentgijo · flying scripts: delay javascript to improve site speed & performance · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 16, 2026
39Monitor	CVE-2026-111444Proof of concept	Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an applicationwheels · wheels · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.3%	Oct 16, 2026
32Monitor	CVE-2026-111445No exploit	Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=).wheels · wheels · CWE-669	High8.1	—	0.2%	Oct 16, 2026
34Monitor	CVE-2026-111446No exploit	Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it wheels · wheels · CWE-863 Pre-auth Broken access control (IDOR)	High8.6	—	0.2%	Oct 16, 2026
32Monitor	CVE-2026-111447No exploit	Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being savwheels · wheels · CWE-472	High8.1	—	0.2%	Oct 16, 2026
31Monitor	CVE-2026-111451No exploit	Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents.wheels · wheels cli · CWE-78 RCE XSS Command injection	High7.8	—	0.1%	Oct 16, 2026
32Monitor	CVE-2026-93953No exploit	Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalationsoftaculous · backuply – backup, restore, migrate and clone · CWE-89 SQL injection	High8.0	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-97339No exploit	Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filtercomplianz · complianz gdpr/ccpa cookie consent banner · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
30Monitor	CVE-2026-103525No exploit	FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_adwpmanageninja · fluentcart a new era of ecommerce – faster, lighter, and simpler · CWE-639 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 16, 2026
32Monitor	CVE-2026-103895No exploit	miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace Statecyberlord92 · miniorange otp login, verification and sms notifications · CWE-287 Pre-auth Auth bypass	High8.1	—	0.4%	Oct 16, 2026
39Monitor	CVE-2026-104798No exploit	My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attributejoedolson · my calendar – accessible event manager · CWE-269 pre-auth RCE	Critical9.8	—	0.4%	Oct 16, 2026
30Monitor	CVE-2026-107659No exploit	Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gwpchill · modula image gallery – photo grid & video gallery · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-107746No exploit	FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameterteamfunnelkit · funnelkit – funnel builder plugin for woocommerce checkout · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 16, 2026
39Monitor	CVE-2026-109219No exploit	Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameterkitae-park · mang board · CWE-434 pre-auth RCE File upload	Critical9.8	—	0.6%	Oct 16, 2026
32Monitor	CVE-2026-109221No exploit	Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mappingtrainingbusinesspros · groundhogg — crm, newsletters, and marketing automation · CWE-22 RCE Path traversal	High8.1	—	0.7%	Oct 16, 2026
30Monitor	CVE-2026-109400No exploit	InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_rolinstawp · instawp connect – 1-click wp staging & migration · CWE-269	High7.5	—	0.3%	Oct 16, 2026
39Monitor	CVE-2026-109515No exploit	MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameterproperfraction · mailoptin – popup, optin forms & email newsletters for mailchimp, hubspot, aweber etc. · CWE-269 Pre-auth	Critical9.8	—	0.4%	Oct 16, 2026
28Monitor	CVE-2026-109998No exploit	Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAXkitae-park · mang board · CWE-79 Pre-auth Auth bypass XSS	High7.2	—	0.2%	Oct 16, 2026
30Monitor	CVE-2026-110590No exploit	Klarna for WooCommerce <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpointklarnaplugin · klarna for woocommerce · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-111114No exploit	Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameterposimyththemes · nexter extension – security, performance, code snippets & site toolkit · CWE-269	High7.5	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-100186No exploit	User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Fieldcozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
39Monitor	CVE-2026-103768No exploit	ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachmentelextensions · elex wordpress helpdesk & customer ticketing system · CWE-434 pre-auth RCE File upload	Critical9.8	—	0.5%	Oct 16, 2026
30Monitor	CVE-2026-103896No exploit	10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path10web · 10web booster – website speed optimization, cache & page speed optimizer · CWE-22 Pre-auth Path traversal	High7.5	—	0.4%	Oct 16, 2026
28Monitor	CVE-2026-103999No exploit	Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via File Uploadthemefic · ultra addons for contact form 7 · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-104000No exploit	Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}croixhaug · simply schedule appointments · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
32Monitor	CVE-2026-104932No exploit	Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruptionjohnny5 · search regex · CWE-502 RCE Deserialization	High8.0	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-107764No exploit	SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sinkgpriday · siteorigin css · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-109232No exploit	Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAXwordpresschef · salon booking system – appointment booking for salons, barbershops & spas · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
32Monitor	CVE-2026-109447No exploit	User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor · CWE-269 Pre-auth	High8.1	—	0.3%	Oct 16, 2026

CVE-2026-108429
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108430
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108431
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108432
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108433
31Monitor
Microsoft Office Word Security Feature Bypass Vulnerability
HighCVSS 7.8No exploitEPSS 0%
microsoft · 365 appsOct 15, 2026
CVE-2026-108437
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108439
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108440
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108441
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108442
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108443
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · 365 appsOct 15, 2026
CVE-2026-108444
35Monitor
Microsoft Office Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108445
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108446
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108447
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108448
30Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108449
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108450
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108451
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 15, 2026
CVE-2026-108452
35Monitor
Microsoft Office SharePoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
microsoft · sharepoint serverOct 15, 2026
CVE-2026-109468
30Monitor
ASP.NET Core Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
microsoft · microsoft visual studio 2022 version 17.14Oct 15, 2026
CVE-2026-111357
58Plan
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege e
HighCVSS 7.0KEVWeaponizedEPSS 0%
- Local privilege escalation
ivanti · connect secureOct 15, 2026
CVE-2026-110913
35Monitor
Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-110914
35Monitor
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-110915
35Monitor
Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-110916
38Monitor
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 15, 2026
CVE-2026-110919
35Monitor
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-110920
35Monitor
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-110921
35Monitor
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-110922
35Monitor
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox v
HighCVSS 8.8Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 15, 2026
CVE-2026-111277
34Monitor
NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
nivocart · nivocartOct 15, 2026
CVE-2026-111279
34Monitor
Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
dragonflydb · dragonflyOct 15, 2026
CVE-2026-111280
33Monitor
snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
davenardella · snap7Oct 15, 2026
CVE-2026-111281
37Monitor
Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Hard-coded credentials
jooan · ja-a12Oct 15, 2026
CVE-2026-111282
35Monitor
iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
driftregion · iso14229Oct 15, 2026
CVE-2026-111283
38Monitor
BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration
CriticalCVSS 9.5Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
bmc helix · bmc helix network managementOct 15, 2026
CVE-2026-111312
36Monitor
OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
openhealthforall · openhealthOct 15, 2026
CVE-2026-111313
28Monitor
JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch
HighCVSS 7.1No exploitEPSS 0%
- SSRF
dakheera47 · jobopsOct 15, 2026
CVE-2026-111322
37Monitor
Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
coleam00 · archonOct 15, 2026
CVE-2026-111329
37Monitor
JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
juggleim · juggleimOct 15, 2026
CVE-2026-111330
32Monitor
JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
juggleim · juggleimOct 15, 2026
CVE-2026-111347
32Monitor
go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
opsre · go-ldap-adminOct 15, 2026
CVE-2026-111352
34Monitor
ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
thinkcmf · thinkcmfOct 15, 2026
CVE-2026-111356
36Monitor
MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
magicblack · maccmsOct 15, 2026
CVE-2026-111359
28Monitor
CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
crmeb · crmebOct 15, 2026
CVE-2026-111363
28Monitor
BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
dataelement · bishengOct 15, 2026
CVE-2026-111364
28Monitor
MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mindoc-org · mindocOct 15, 2026
CVE-2026-111365
28Monitor
cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
cool-team-official · cool-admin-midwayOct 15, 2026
CVE-2026-111366
34Monitor
cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
cool-team-official · cool-admin-midwayOct 15, 2026
CVE-2026-111369
28Monitor
ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
classroomio · classroomioOct 15, 2026
CVE-2026-94134
36Monitor
Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
apache software foundation · apache airflow ssh providerOct 15, 2026
CVE-2026-75941
34Monitor
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allo
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Deserialization
lenovo · legion zone applicationOct 16, 2026
CVE-2026-84823
28Monitor
Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
red hat · red hat enterprise linux 8Oct 16, 2026
CVE-2026-89057
28Monitor
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain una
HighCVSS 7.0No exploitEPSS 0%
- Auth bypass
lenovo · idea tab pro (tb373fu)Oct 16, 2026
CVE-2026-92629
28Monitor
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, th
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
- Broken access control (IDOR)
lenovo · baiying pc clientOct 16, 2026
CVE-2026-105227
28Monitor
ISPSoft Out-of-Bounds Read Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
deltaww · ispsoftOct 16, 2026
CVE-2026-105228
28Monitor
ISPSoft Out-of-Bounds Read Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
deltaww · ispsoftOct 16, 2026
CVE-2026-109813
34Monitor
Shared Hard-coded Root CA Private Key
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
moxa · aig-302 seriesOct 16, 2026
CVE-2026-111377
28Monitor
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
freerdp · freerdpOct 16, 2026
CVE-2026-111378
34Monitor
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
freerdp · freerdpOct 16, 2026
CVE-2026-111379
28Monitor
FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
HighCVSS 7.0No exploitEPSS 0%
- Memory safety
freerdp · freerdpOct 16, 2026
CVE-2026-111380
34Monitor
FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 16, 2026
CVE-2026-111381
28Monitor
FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
HighCVSS 7.0No exploitEPSS 0%
- Memory safety
freerdp · freerdpOct 16, 2026
CVE-2026-111382
34Monitor
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 16, 2026
CVE-2026-111383
28Monitor
Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
nezhahq · nezhaOct 16, 2026
CVE-2026-111384
28Monitor
Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
nezhahq · nezhaOct 16, 2026
CVE-2026-111387
28Monitor
Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint
HighCVSS 7.1No exploitEPSS 0%
nezhahq · nezhaOct 16, 2026
CVE-2026-111389
33Monitor
Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation
HighCVSS 8.3Proof of conceptEPSS 0%
- SQL injection
frappe · hrmsOct 16, 2026
CVE-2026-104745
32Monitor
Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter
HighCVSS 8.1Proof of conceptEPSS 0%
- Pre-auth
wpcodefactory · customer email verification for woocommerceOct 16, 2026
CVE-2026-107758
28Monitor
Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
extendthemes · colibri page builderOct 16, 2026
CVE-2026-109207
28Monitor
RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
themeisle · rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregatorOct 16, 2026
CVE-2026-109990
28Monitor
Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
gijo · flying scripts: delay javascript to improve site speed & performanceOct 16, 2026
CVE-2026-111444
39Monitor
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
wheels · wheelsOct 16, 2026
CVE-2026-111445
32Monitor
Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=).
HighCVSS 8.1No exploitEPSS 0%
wheels · wheelsOct 16, 2026
CVE-2026-111446
34Monitor
Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wheels · wheelsOct 16, 2026
CVE-2026-111447
32Monitor
Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being sav
HighCVSS 8.1No exploitEPSS 0%
wheels · wheelsOct 16, 2026
CVE-2026-111451
31Monitor
Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- XSS
- Command injection
wheels · wheels cliOct 16, 2026
CVE-2026-93953
32Monitor
Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation
HighCVSS 8.0No exploitEPSS 0%
- SQL injection
softaculous · backuply – backup, restore, migrate and cloneOct 16, 2026
CVE-2026-97339
28Monitor
Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
complianz · complianz gdpr/ccpa cookie consent bannerOct 16, 2026
CVE-2026-103525
30Monitor
FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_ad
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpmanageninja · fluentcart a new era of ecommerce – faster, lighter, and simplerOct 16, 2026
CVE-2026-103895
32Monitor
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
cyberlord92 · miniorange otp login, verification and sms notificationsOct 16, 2026
CVE-2026-104798
39Monitor
My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
joedolson · my calendar – accessible event managerOct 16, 2026
CVE-2026-107659
30Monitor
Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-g
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpchill · modula image gallery – photo grid & video galleryOct 16, 2026
CVE-2026-107746
30Monitor
FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
teamfunnelkit · funnelkit – funnel builder plugin for woocommerce checkoutOct 16, 2026
CVE-2026-109219
39Monitor
Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- File upload
kitae-park · mang boardOct 16, 2026
CVE-2026-109221
32Monitor
Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mapping
HighCVSS 8.1No exploitEPSS 0%
- RCE
- Path traversal
trainingbusinesspros · groundhogg — crm, newsletters, and marketing automationOct 16, 2026
CVE-2026-109400
30Monitor
InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_rol
HighCVSS 7.5No exploitEPSS 0%
instawp · instawp connect – 1-click wp staging & migrationOct 16, 2026
CVE-2026-109515
39Monitor
MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
properfraction · mailoptin – popup, optin forms & email newsletters for mailchimp, hubspot, aweber etc.Oct 16, 2026
CVE-2026-109998
28Monitor
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- XSS
kitae-park · mang boardOct 16, 2026
CVE-2026-110590
30Monitor
Klarna for WooCommerce <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpoint
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
klarnaplugin · klarna for woocommerceOct 16, 2026
CVE-2026-111114
30Monitor
Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter
HighCVSS 7.5No exploitEPSS 0%
posimyththemes · nexter extension – security, performance, code snippets & site toolkitOct 16, 2026
CVE-2026-100186
28Monitor
User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editorOct 16, 2026
CVE-2026-103768
39Monitor
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- File upload
elextensions · elex wordpress helpdesk & customer ticketing systemOct 16, 2026
CVE-2026-103896
30Monitor
10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
10web · 10web booster – website speed optimization, cache & page speed optimizerOct 16, 2026
CVE-2026-103999
28Monitor
Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via File Upload
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
themefic · ultra addons for contact form 7Oct 16, 2026
CVE-2026-104000
28Monitor
Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
croixhaug · simply schedule appointmentsOct 16, 2026
CVE-2026-104932
32Monitor
Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Deserialization
johnny5 · search regexOct 16, 2026
CVE-2026-107764
28Monitor
SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
gpriday · siteorigin cssOct 16, 2026
CVE-2026-109232
28Monitor
Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wordpresschef · salon booking system – appointment booking for salons, barbershops & spasOct 16, 2026
CVE-2026-109447
32Monitor
User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editorOct 16, 2026