By publication date

Exploited and new serious CVEs: October 2026

8,744 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 5 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2026-103627No exploit	Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTMLgoogle · chrome · CWE-200 Pre-auth Info leak	Medium6.5	—	0.2%	Oct 2, 2026
38Monitor	CVE-2026-103628No exploit	Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-787 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 2, 2026
38Monitor	CVE-2026-103630No exploit	Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 2, 2026
35Monitor	CVE-2026-103631No exploit	Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox viagoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.4%	Oct 2, 2026
36Monitor	CVE-2026-103648Proof of concept	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloaderdemsking · image-downloader · CWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Oct 2, 2026
30Monitor	CVE-2026-104845No exploit	Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserializationlxsmnsyc · seroval · CWE-770 Pre-auth Deserialization Denial of service	High7.5	—	0.4%	Oct 2, 2026
39Monitor	CVE-2026-104846No exploit	Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)lxsmnsyc · seroval · CWE-843 Pre-auth Deserialization	Critical9.8	—	0.3%	Oct 2, 2026
34Monitor	CVE-2026-104847No exploit	ProseMirror: XSS vulnerability in prosemirror-view's paste handlingprosemirror · prosemirror-view · CWE-79 Pre-auth XSS	High8.5	—	0.3%	Oct 2, 2026
28Monitor	CVE-2026-104908No exploit	MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flaggingmisp · misp · CWE-285 Broken access control (IDOR)	High7.1	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-104912No exploit	MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Datamisp · misp · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Oct 2, 2026
39Monitor	CVE-2026-51898No exploit	sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.CWE-94 pre-auth RCE	Critical9.8	—	0.3%	Oct 2, 2026
32Monitor	CVE-2026-51901No exploit	SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control.CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Oct 2, 2026
39Monitor	CVE-2026-51904No exploit	SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller.CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Oct 2, 2026
36Monitor	CVE-2026-51906No exploit	In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write CWE-22 Pre-auth Path traversal	Critical9.1	—	0.4%	Oct 2, 2026
32Monitor	CVE-2026-51907No exploit	In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write imaCWE-22 Path traversal	High8.1	—	0.3%	Oct 2, 2026
39Monitor	CVE-2026-51911No exploit	vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py).CWE-94 pre-auth RCE	Critical9.8	—	1.1%	Oct 2, 2026
35Monitor	CVE-2026-51914No exploit	TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller.CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 2, 2026
39Monitor	CVE-2026-51915No exploit	TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller.CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.3%	Oct 2, 2026
30Monitor	CVE-2026-51916No exploit	TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowCWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 2, 2026
29Monitor	CVE-2026-51917No exploit	FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code.CWE-94 pre-auth RCE	High7.3	—	0.2%	Oct 2, 2026
39Monitor	CVE-2026-51918No exploit	FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().CWE-94 pre-auth RCE	Critical9.8	—	0.4%	Oct 2, 2026
39Monitor	CVE-2026-51922No exploit	agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py).CWE-94 pre-auth RCE	Critical9.8	—	1.1%	Oct 2, 2026
30Monitor	CVE-2026-67989No exploit	crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition CWE-1333 Pre-auth Denial of service	High7.5	—	0.3%	Oct 2, 2026
33Monitor	CVE-2026-94483No exploit	Next.js: Server-Side Request Forgery in Image Optimizationvercel · next.js · CWE-918 Pre-auth SSRF	High8.3	—	0.3%	Oct 2, 2026
25Monitor	CVE-2026-94484No exploit	Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of servicevercel · next.js · CWE-524 Pre-auth	Medium6.3	—	0.2%	Oct 2, 2026
25Monitor	CVE-2026-94543No exploit	Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsvercel · next.js · CWE-524 Pre-auth	Medium6.3	—	0.5%	Oct 2, 2026
28Monitor	CVE-2026-96613No exploit	Missing Authorization in Meari IoT Cloud Platform OpenAPI Servicemeari · iot cloud platform openapi service · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Oct 2, 2026
38Monitor	CVE-2026-104848No exploit	Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Executiontinylibs · tinypool · CWE-1321 pre-auth RCE Prototype pollution	Critical9.5	—	0.4%	Oct 2, 2026
38Monitor	CVE-2026-104849Proof of concept	Tinypool: Prototype Pollution Gadget to RCE in run() optionstinylibs · tinypool · CWE-94 pre-auth RCE Prototype pollution	Critical9.5	—	0.4%	Oct 2, 2026
35Monitor	CVE-2026-104851No exploit	fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Executionfsspec · filesystem_spec · CWE-94 pre-auth RCE SSTI	High8.8	—	0.4%	Oct 2, 2026
34Monitor	CVE-2026-104854No exploit	Nx daemon and plugin worker sockets are accessible to other local usersnrwl · nx · CWE-269 Local privilege escalation	High8.5	—	0.1%	Oct 2, 2026
28Monitor	CVE-2026-102626No exploit	LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attributelimesurvey · limesurvey · CWE-79 XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-102795No exploit	Apache Traffic Server: SNI to Host header matching policy is not properly enforcedapache software foundation · apache traffic server · CWE-284 Pre-auth Broken access control (IDOR)	High7.0	—	0.2%	Oct 2, 2026
29Monitor	CVE-2026-104859No exploit	Nx: OS command injection in the @nx/docker release pipelinenrwl · nx · CWE-78 RCE Local privilege escalation Command injection	High7.3	—	0.1%	Oct 2, 2026
30Monitor	CVE-2026-104861No exploit	probe-image-size: Quadratic-time Denial of Service in the SVG Parsernodeca · probe-image-size · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 2, 2026
35Monitor	CVE-2026-59265Proof of concept	Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeoverapache software foundation · apache openoffice · CWE-426 Pre-auth	High8.8	—	0.5%	Oct 2, 2026
34Monitor	CVE-2014-125130No exploit	CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.phpdamjan · codeart google mp3 audio player · CWE-22 Pre-auth Auth bypass Path traversal	High8.7	—	0.5%	Oct 2, 2026
34Monitor	CVE-2020-37278No exploit	Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFileweaver · e-bridge · CWE-918 Pre-auth SSRF	High8.7	—	0.3%	Oct 2, 2026
37Monitor	CVE-2023-54405No exploit	H3C CVM Unauthenticated File Upload via fileUpload/upload Tokenh3c · cvm · CWE-434 pre-auth RCE Path traversal File upload	Critical9.3	—	0.5%	Oct 2, 2026
41Plan	CVE-2026-103956Proof of concept	Missing authentication for critical function in Loom for AWSaws · loom · CWE-306 Pre-auth Auth bypass	Critical10.0	—	2.4%	Oct 2, 2026
32Monitor	CVE-2026-103957No exploit	Server-side request forgery in the OAuth2 discovery handling in Loom for AWSaws · loom · CWE-201 SSRF	High8.2	—	0.4%	Oct 2, 2026
33Monitor	CVE-2026-103958No exploit	Server-side request forgery in the tool server and remote agent connection handling in Loom for AWSaws · loom · CWE-918 SSRF	High8.3	—	0.3%	Oct 2, 2026
36Monitor	CVE-2026-96940Proof of concept	Microsoft Exchange Server Elevation of Privilege Vulnerabilitymicrosoft · exchange server · CWE-1390 Auth bypass	High8.8	—	2.7%	Oct 2, 2026
37Monitor	CVE-2026-104019No exploit	OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studioaws · sagemaker-distribution · CWE-78 RCE Command injection	Critical9.3	—	1.4%	Oct 2, 2026
30Monitor	CVE-2026-104873No exploit	LangGraph SDK custom auth silently ignores actions= on resource decoratorslangchain-ai · langgraph · CWE-863 Broken access control (IDOR)	High7.6	—	0.2%	Oct 2, 2026
32Monitor	CVE-2026-104988No exploit	Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subjectred hat · red hat certificate system 10 · CWE-290 Auth bypass	High8.1	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-104991Proof of concept	Phproject < 1.8.7 Missing Authorization via Issues REST APIalanaktion · phproject · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Oct 2, 2026
35Monitor	CVE-2026-39718No exploit	WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti · wallstreet · CWE-352 Pre-auth CSRF	High8.8	—	0.1%	Oct 2, 2026
34Monitor	CVE-2026-82039No exploit	UTMStack < 11.2.16 SQL Injection via searchGroupsByFilterutmstack · utmstack · CWE-89 RCE SQL injection	High8.7	—	0.3%	Oct 2, 2026
21Monitor	CVE-2026-82040No exploit	UTMStack < 11.2.16 SSRF via IdentityProviderServiceutmstack · utmstack · CWE-918 SSRF	Medium5.3	—	0.1%	Oct 2, 2026
37Monitor	CVE-2026-75937No exploit	OS Command Injection in Digi Accelerated Linux (DAL OS)digi international · ix family · CWE-78 pre-auth RCE Command injection	Critical9.4	—	0.5%	Oct 2, 2026
26Monitor	CVE-2026-82041No exploit	UTMStack < 11.2.16 Missing Authorization via Command WebSocketutmstack · utmstack · CWE-862 RCE Broken access control (IDOR)	Medium6.5	—	0.4%	Oct 2, 2026
37Monitor	CVE-2026-82042No exploit	UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilterutmstack · utmstack · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.5%	Oct 2, 2026
28Monitor	CVE-2026-82045No exploit	UTMStack < 11.2.16 JPQL Injection via searchPropertyValuesutmstack · utmstack · CWE-89 SQL injection	High7.1	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-94591No exploit	Armatura LLC Armatura One Use of Hard-coded Cryptographic Keyarmatura llc · armatura one · CWE-321 Hard-coded credentials	High8.6	—	0.0%	Oct 2, 2026
34Monitor	CVE-2026-94592No exploit	Armatura LLC Armatura One Use of Hard-coded Credentialsarmatura llc · armatura one · CWE-798 Hard-coded credentials	High8.6	—	0.1%	Oct 2, 2026
34Monitor	CVE-2026-94593No exploit	Armatura LLC Armatura One Insertion of Sensitive Information into Log Filearmatura llc · armatura one · CWE-532 Info leak	High8.5	—	0.1%	Oct 2, 2026
37Monitor	CVE-2026-95102No exploit	Monta monta.app Missing Authentication for Critical Functionmonta · monta.app · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 2, 2026
34Monitor	CVE-2026-97363No exploit	Monta monta.app Improper Restriction of Excessive Authentication Attemptsmonta · monta.app · CWE-307 Pre-auth	High8.7	—	0.3%	Oct 2, 2026
30Monitor	GHSA-cjcg-cxmh-9wcrNo exploit	Praxis affected by HTTP/2 BombCWE-409 Pre-auth Denial of service	High7.5	—	—	Oct 2, 2026
28Monitor	CVE-2026-105050No exploit	PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation peazip · peazip · CWE-180 RCE Command injection	High7.1	—	0.5%	Oct 2, 2026
37Monitor	CVE-2026-84411Proof of concept	MikroTik RouterOS Integer Underflowmikrotik · routeros · CWE-191 pre-auth RCE Memory safety	Critical9.3	—	0.8%	Oct 2, 2026
34Monitor	CVE-2026-104433No exploit	Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readStringkvcache-ai · mooncake · CWE-125 Pre-auth Memory safety	High8.7	—	0.4%	Oct 3, 2026
32Monitor	CVE-2026-104476No exploit	Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archivebackdrop · backdrop · CWE-200 Pre-auth Info leak	High8.2	—	0.2%	Oct 3, 2026
28Monitor	CVE-2026-104478No exploit	Formwork before 2.3.13 Path Traversal via BackupController Download and Deletegetformwork · formwork · CWE-22 Path traversal	High7.1	—	0.3%	Oct 3, 2026
27Monitor	CVE-2026-105030Proof of concept	Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard APIrajnandan1 · kener · CWE-200 Pre-auth Info leak	Medium6.9	—	0.3%	Oct 3, 2026
37Monitor	CVE-2026-105080Proof of concept	In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calic4illin · convertx · CWE-829	Critical9.4	—	0.4%	Oct 3, 2026
30Monitor	CVE-2026-93428No exploit	Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypassultimatemember · ultimate member – user profile, registration, login, member directory, content restriction & membership plugin · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Oct 3, 2026
28Monitor	CVE-2026-96270No exploit	Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameterultimatemember · ultimate member – user profile, registration, login, member directory, content restriction & membership plugin · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
35Monitor	CVE-2026-92536No exploit	Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Informaproperfraction · paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress · CWE-94 RCE	High8.8	—	0.6%	Oct 3, 2026
28Monitor	CVE-2026-92977No exploit	Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Commentdevowl · real cookie banner: gdpr & eprivacy cookie consent · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
35Monitor	CVE-2026-97644No exploit	Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Partrainingbusinesspros · groundhogg — crm, newsletters, and marketing automation · CWE-269	High8.8	—	0.4%	Oct 3, 2026
30Monitor	CVE-2026-101159No exploit	WP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submissionunknown · wp ultimate review · CWE-79 Pre-auth XSS	High7.5	—	0.2%	Oct 3, 2026
30Monitor	CVE-2026-101160Proof of concept	WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Ratingunknown · wp ultimate review · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 3, 2026
30Monitor	CVE-2026-101161Proof of concept	WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcodeunknown · wp ultimate review · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 3, 2026
25Monitor	CVE-2026-101162Proof of concept	WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settingsunknown · wp ultimate review · CWE-79 XSS	Medium6.4	—	0.2%	Oct 3, 2026
32Monitor	CVE-2026-101923No exploit	Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parametervillatheme · photo reviews for woocommerce · CWE-862 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Oct 3, 2026
28Monitor	CVE-2026-101928No exploit	Magic Tooltips For Contact Form 7 <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting via 'esc_html' Filter Override via Comment Authormagicplugins · magic tooltips for contact form 7 · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 3, 2026
30Monitor	CVE-2026-103514No exploit	WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replayunknown · wp 2fa · CWE-287 Auth bypass	High7.5	—	0.3%	Oct 3, 2026
30Monitor	CVE-2026-103913No exploit	GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listingpaoltaia · geodirectory – wp business directory plugin and classified listings directory · CWE-89 Pre-auth SQL injection	High7.5	—	0.3%	Oct 3, 2026
28Monitor	CVE-2026-87091No exploit	Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parametersuscnanbu · welcart e-commerce · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 3, 2026
35Monitor	CVE-2026-88783No exploit	Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Contentunknown · kubio ai page builder · CWE-79 Pre-auth XSS	High8.8	—	0.2%	Oct 3, 2026
34Monitor	CVE-2026-89236No exploit	SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parametersunknown · saveto wishlist lite · CWE-89 Pre-auth SQL injection	High8.6	—	0.2%	Oct 3, 2026
32Monitor	CVE-2026-91078No exploit	TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PINunknown · tillkit · CWE-287 Pre-auth Auth bypass	High8.2	—	0.1%	Oct 3, 2026
28Monitor	CVE-2026-93430No exploit	GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAXgdragon · gd rating system · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
28Monitor	CVE-2026-96564No exploit	SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Namerainbowgeek · seopress – ai seo plugin & on-site seo · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
28Monitor	CVE-2026-96575No exploit	Transliterator <= 2.5.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable {rstr_keep} Placeholderivijanstefan · transliterator – multilingual and multi-script text conversion · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
28Monitor	CVE-2026-96650No exploit	Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Fieldwpchill · strong testimonials · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
30Monitor	CVE-2026-97337No exploit	Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation wpinsider-1 · simple membership · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 3, 2026
28Monitor	CVE-2026-97341No exploit	Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Headerwp-buy · visitor traffic real time statistics · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
35Monitor	CVE-2026-18443No exploit	Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameterstoreapps · smart manager – woocommerce bulk edit: products, orders, users & more (spreadsheet) · CWE-89 SQL injection	High8.8	—	0.3%	Oct 3, 2026
30Monitor	CVE-2026-75028No exploit	WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Settingarraytics · wpcafe – restaurant menu, online food ordering & table booking system · CWE-98 RCE	High7.5	—	0.6%	Oct 3, 2026
36Monitor	CVE-2026-87115No exploit	VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parametere4jvikwp · vikappointments services booking calendar · CWE-22 pre-auth RCE Path traversal	Critical9.1	—	0.8%	Oct 3, 2026
28Monitor	CVE-2026-93889No exploit	Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Messagewardee · mail logging & catcher · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 3, 2026
32Monitor	CVE-2026-94505No exploit	Nelio Content <= 4.5.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion via 'id' Parameternelio · nelio content – editorial calendar & social media auto-posting · CWE-862 Broken access control (IDOR)	High8.1	—	0.2%	Oct 3, 2026
30Monitor	CVE-2026-96267No exploit	WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameterosamaesh · wp visitor statistics (real time traffic) · CWE-89 Pre-auth SQL injection	High7.5	—	0.3%	Oct 3, 2026
28Monitor	CVE-2026-97660No exploit	WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Namewpclever · wpc product options for woocommerce · CWE-79 Pre-auth Auth bypass XSS	High7.2	—	0.2%	Oct 3, 2026
36Monitor	CVE-2026-92084Proof of concept	Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Outputbeaverbuilder · beaver builder page builder – drag and drop website builder · CWE-94 pre-auth RCE	Critical9.1	—	0.8%	Oct 3, 2026
32Monitor	CVE-2026-71883No exploit	Native AES packet cipher returns the raw AES key on an aliaslegion of the bouncy castle inc. · bc-lts-java · CWE-200 Pre-auth Info leak	High8.2	—	0.2%	Oct 3, 2026
36Monitor	CVE-2026-71885No exploit	MLS X.509 credential not bound to the LeafNode signature keylegion of the bouncy castle inc. · bc-java · CWE-287 Pre-auth Auth bypass	Critical9.2	—	0.1%	Oct 3, 2026

CVE-2026-103627
26Monitor
Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Info leak
google · chromeOct 2, 2026
CVE-2026-103628
38Monitor
Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 2, 2026
CVE-2026-103630
38Monitor
Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 2, 2026
CVE-2026-103631
35Monitor
Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 2, 2026
CVE-2026-103648
36Monitor
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
demsking · image-downloaderOct 2, 2026
CVE-2026-104845
30Monitor
Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
lxsmnsyc · serovalOct 2, 2026
CVE-2026-104846
39Monitor
Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
lxsmnsyc · serovalOct 2, 2026
CVE-2026-104847
34Monitor
ProseMirror: XSS vulnerability in prosemirror-view's paste handling
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- XSS
prosemirror · prosemirror-viewOct 2, 2026
CVE-2026-104908
28Monitor
MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
misp · mispOct 2, 2026
CVE-2026-104912
28Monitor
MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
misp · mispOct 2, 2026
CVE-2026-51898
39Monitor
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Oct 2, 2026
CVE-2026-51901
32Monitor
SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control.
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
Oct 2, 2026
CVE-2026-51904
39Monitor
SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Oct 2, 2026
CVE-2026-51906
36Monitor
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 2, 2026
CVE-2026-51907
32Monitor
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write ima
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
Oct 2, 2026
CVE-2026-51911
39Monitor
vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py).
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
Oct 2, 2026
CVE-2026-51914
35Monitor
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller.
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
Oct 2, 2026
CVE-2026-51915
39Monitor
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Oct 2, 2026
CVE-2026-51916
30Monitor
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/know
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Oct 2, 2026
CVE-2026-51917
29Monitor
FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code.
HighCVSS 7.3No exploitEPSS 0%
- pre-auth RCE
Oct 2, 2026
CVE-2026-51918
39Monitor
FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Oct 2, 2026
CVE-2026-51922
39Monitor
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py).
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
Oct 2, 2026
CVE-2026-67989
30Monitor
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Oct 2, 2026
CVE-2026-94483
33Monitor
Next.js: Server-Side Request Forgery in Image Optimization
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- SSRF
vercel · next.jsOct 2, 2026
CVE-2026-94484
25Monitor
Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
vercel · next.jsOct 2, 2026
CVE-2026-94543
25Monitor
Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
vercel · next.jsOct 2, 2026
CVE-2026-96613
28Monitor
Missing Authorization in Meari IoT Cloud Platform OpenAPI Service
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
meari · iot cloud platform openapi serviceOct 2, 2026
CVE-2026-104848
38Monitor
Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
CriticalCVSS 9.5No exploitEPSS 0%
- pre-auth RCE
- Prototype pollution
tinylibs · tinypoolOct 2, 2026
CVE-2026-104849
38Monitor
Tinypool: Prototype Pollution Gadget to RCE in run() options
CriticalCVSS 9.5Proof of conceptEPSS 0%
- pre-auth RCE
- Prototype pollution
tinylibs · tinypoolOct 2, 2026
CVE-2026-104851
35Monitor
fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- SSTI
fsspec · filesystem_specOct 2, 2026
CVE-2026-104854
34Monitor
Nx daemon and plugin worker sockets are accessible to other local users
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
nrwl · nxOct 2, 2026
CVE-2026-102626
28Monitor
LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute
HighCVSS 7.2No exploitEPSS 0%
- XSS
limesurvey · limesurveyOct 2, 2026
CVE-2026-102795
28Monitor
Apache Traffic Server: SNI to Host header matching policy is not properly enforced
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache traffic serverOct 2, 2026
CVE-2026-104859
29Monitor
Nx: OS command injection in the @nx/docker release pipeline
HighCVSS 7.3No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
nrwl · nxOct 2, 2026
CVE-2026-104861
30Monitor
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
nodeca · probe-image-sizeOct 2, 2026
CVE-2026-59265
35Monitor
Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover
HighCVSS 8.8Proof of conceptEPSS 0%
- Pre-auth
apache software foundation · apache openofficeOct 2, 2026
CVE-2014-125130
34Monitor
CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Path traversal
damjan · codeart google mp3 audio playerOct 2, 2026
CVE-2020-37278
34Monitor
Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
weaver · e-bridgeOct 2, 2026
CVE-2023-54405
37Monitor
H3C CVM Unauthenticated File Upload via fileUpload/upload Token
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Path traversal
- File upload
h3c · cvmOct 2, 2026
CVE-2026-103956
41Plan
Missing authentication for critical function in Loom for AWS
CriticalCVSS 10.0Proof of conceptEPSS 2%
- Pre-auth
- Auth bypass
aws · loomOct 2, 2026
CVE-2026-103957
32Monitor
Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
HighCVSS 8.2No exploitEPSS 0%
- SSRF
aws · loomOct 2, 2026
CVE-2026-103958
33Monitor
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS
HighCVSS 8.3No exploitEPSS 0%
- SSRF
aws · loomOct 2, 2026
CVE-2026-96940
36Monitor
Microsoft Exchange Server Elevation of Privilege Vulnerability
HighCVSS 8.8Proof of conceptEPSS 2%
- Auth bypass
microsoft · exchange serverOct 2, 2026
CVE-2026-104019
37Monitor
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
CriticalCVSS 9.3No exploitEPSS 1%
- RCE
- Command injection
aws · sagemaker-distributionOct 2, 2026
CVE-2026-104873
30Monitor
LangGraph SDK custom auth silently ignores actions= on resource decorators
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
langchain-ai · langgraphOct 2, 2026
CVE-2026-104988
32Monitor
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
red hat · red hat certificate system 10Oct 2, 2026
CVE-2026-104991
28Monitor
Phproject < 1.8.7 Missing Authorization via Issues REST API
HighCVSS 7.1Proof of conceptEPSS 0%
- Broken access control (IDOR)
alanaktion · phprojectOct 2, 2026
CVE-2026-39718
35Monitor
WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
webriti · wallstreetOct 2, 2026
CVE-2026-82039
34Monitor
UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SQL injection
utmstack · utmstackOct 2, 2026
CVE-2026-82040
21Monitor
UTMStack < 11.2.16 SSRF via IdentityProviderService
MediumCVSS 5.3No exploitEPSS 0%
- SSRF
utmstack · utmstackOct 2, 2026
CVE-2026-75937
37Monitor
OS Command Injection in Digi Accelerated Linux (DAL OS)
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
- Command injection
digi international · ix familyOct 2, 2026
CVE-2026-82041
26Monitor
UTMStack < 11.2.16 Missing Authorization via Command WebSocket
MediumCVSS 6.5No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
utmstack · utmstackOct 2, 2026
CVE-2026-82042
37Monitor
UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
utmstack · utmstackOct 2, 2026
CVE-2026-82045
28Monitor
UTMStack < 11.2.16 JPQL Injection via searchPropertyValues
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
utmstack · utmstackOct 2, 2026
CVE-2026-94591
34Monitor
Armatura LLC Armatura One Use of Hard-coded Cryptographic Key
HighCVSS 8.6No exploitEPSS 0%
- Hard-coded credentials
armatura llc · armatura oneOct 2, 2026
CVE-2026-94592
34Monitor
Armatura LLC Armatura One Use of Hard-coded Credentials
HighCVSS 8.6No exploitEPSS 0%
- Hard-coded credentials
armatura llc · armatura oneOct 2, 2026
CVE-2026-94593
34Monitor
Armatura LLC Armatura One Insertion of Sensitive Information into Log File
HighCVSS 8.5No exploitEPSS 0%
- Info leak
armatura llc · armatura oneOct 2, 2026
CVE-2026-95102
37Monitor
Monta monta.app Missing Authentication for Critical Function
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
monta · monta.appOct 2, 2026
CVE-2026-97363
34Monitor
Monta monta.app Improper Restriction of Excessive Authentication Attempts
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
monta · monta.appOct 2, 2026
GHSA-cjcg-cxmh-9wcr
30Monitor
Praxis affected by HTTP/2 Bomb
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
Oct 2, 2026
CVE-2026-105050
28Monitor
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Command injection
peazip · peazipOct 2, 2026
CVE-2026-84411
37Monitor
MikroTik RouterOS Integer Underflow
CriticalCVSS 9.3Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
mikrotik · routerosOct 2, 2026
CVE-2026-104433
34Monitor
Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
kvcache-ai · mooncakeOct 3, 2026
CVE-2026-104476
32Monitor
Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Info leak
backdrop · backdropOct 3, 2026
CVE-2026-104478
28Monitor
Formwork before 2.3.13 Path Traversal via BackupController Download and Delete
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
getformwork · formworkOct 3, 2026
CVE-2026-105030
27Monitor
Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Info leak
rajnandan1 · kenerOct 3, 2026
CVE-2026-105080
37Monitor
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Cali
CriticalCVSS 9.4Proof of conceptEPSS 0%
c4illin · convertxOct 3, 2026
CVE-2026-93428
30Monitor
Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypass
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ultimatemember · ultimate member – user profile, registration, login, member directory, content restriction & membership pluginOct 3, 2026
CVE-2026-96270
28Monitor
Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
ultimatemember · ultimate member – user profile, registration, login, member directory, content restriction & membership pluginOct 3, 2026
CVE-2026-92536
35Monitor
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Informa
HighCVSS 8.8No exploitEPSS 0%
- RCE
properfraction · paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepressOct 3, 2026
CVE-2026-92977
28Monitor
Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
devowl · real cookie banner: gdpr & eprivacy cookie consentOct 3, 2026
CVE-2026-97644
35Monitor
Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Par
HighCVSS 8.8No exploitEPSS 0%
trainingbusinesspros · groundhogg — crm, newsletters, and marketing automationOct 3, 2026
CVE-2026-101159
30Monitor
WP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submission
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- XSS
unknown · wp ultimate reviewOct 3, 2026
CVE-2026-101160
30Monitor
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
unknown · wp ultimate reviewOct 3, 2026
CVE-2026-101161
30Monitor
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
unknown · wp ultimate reviewOct 3, 2026
CVE-2026-101162
25Monitor
WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings
MediumCVSS 6.4Proof of conceptEPSS 0%
- XSS
unknown · wp ultimate reviewOct 3, 2026
CVE-2026-101923
32Monitor
Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
villatheme · photo reviews for woocommerceOct 3, 2026
CVE-2026-101928
28Monitor
Magic Tooltips For Contact Form 7 <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting via 'esc_html' Filter Override via Comment Author
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
magicplugins · magic tooltips for contact form 7Oct 3, 2026
CVE-2026-103514
30Monitor
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
HighCVSS 7.5No exploitEPSS 0%
- Auth bypass
unknown · wp 2faOct 3, 2026
CVE-2026-103913
30Monitor
GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
paoltaia · geodirectory – wp business directory plugin and classified listings directoryOct 3, 2026
CVE-2026-87091
28Monitor
Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
uscnanbu · welcart e-commerceOct 3, 2026
CVE-2026-88783
35Monitor
Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · kubio ai page builderOct 3, 2026
CVE-2026-89236
34Monitor
SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · saveto wishlist liteOct 3, 2026
CVE-2026-91078
32Monitor
TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · tillkitOct 3, 2026
CVE-2026-93430
28Monitor
GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
gdragon · gd rating systemOct 3, 2026
CVE-2026-96564
28Monitor
SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Name
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
rainbowgeek · seopress – ai seo plugin & on-site seoOct 3, 2026
CVE-2026-96575
28Monitor
Transliterator <= 2.5.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable {rstr_keep} Placeholder
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
ivijanstefan · transliterator – multilingual and multi-script text conversionOct 3, 2026
CVE-2026-96650
28Monitor
Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wpchill · strong testimonialsOct 3, 2026
CVE-2026-97337
30Monitor
Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpinsider-1 · simple membershipOct 3, 2026
CVE-2026-97341
28Monitor
Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wp-buy · visitor traffic real time statisticsOct 3, 2026
CVE-2026-18443
35Monitor
Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation via 'access_privileges' Parameter
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
storeapps · smart manager – woocommerce bulk edit: products, orders, users & more (spreadsheet)Oct 3, 2026
CVE-2026-75028
30Monitor
WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting
HighCVSS 7.5No exploitEPSS 0%
- RCE
arraytics · wpcafe – restaurant menu, online food ordering & table booking systemOct 3, 2026
CVE-2026-87115
36Monitor
VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- Path traversal
e4jvikwp · vikappointments services booking calendarOct 3, 2026
CVE-2026-93889
28Monitor
Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wardee · mail logging & catcherOct 3, 2026
CVE-2026-94505
32Monitor
Nelio Content <= 4.5.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion via 'id' Parameter
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
nelio · nelio content – editorial calendar & social media auto-postingOct 3, 2026
CVE-2026-96267
30Monitor
WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
osamaesh · wp visitor statistics (real time traffic)Oct 3, 2026
CVE-2026-97660
28Monitor
WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- XSS
wpclever · wpc product options for woocommerceOct 3, 2026
CVE-2026-92084
36Monitor
Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output
CriticalCVSS 9.1Proof of conceptEPSS 0%
- pre-auth RCE
beaverbuilder · beaver builder page builder – drag and drop website builderOct 3, 2026
CVE-2026-71883
32Monitor
Native AES packet cipher returns the raw AES key on an alias
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Info leak
legion of the bouncy castle inc. · bc-lts-javaOct 3, 2026
CVE-2026-71885
36Monitor
MLS X.509 credential not bound to the LeafNode signature key
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
legion of the bouncy castle inc. · bc-javaOct 3, 2026