Search
105 CVEs · published 2026-10-17 to 2026-10-17
CVEs (105)
Showing 1–25 of 105
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97314 | MEDIUM | Patched | 6.5 | 2026-10-17 | The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthentica… |
| CVE-2026-96660 | HIGH | 7.2 | 2026-10-17 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPres… | |
| CVE-2026-92978 | MEDIUM | 4.3 | 2026-10-17 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPres… | |
| CVE-2026-92798 | HIGH | 8.1 | 2026-10-17 | The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due to insufficient i… | |
| CVE-2026-92715 | MEDIUM | Patched | 4.3 | 2026-10-17 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via … |
| CVE-2026-92433 | MEDIUM | Patched | 6.5 | 2026-10-17 | The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-li… |
| CVE-2026-92432 | MEDIUM | Patched | 4.3 | 2026-10-17 | The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitor… |
| CVE-2026-92431 | LOW | Patched | 3.7 | 2026-10-17 | The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of te… |
| CVE-2026-91074 | MEDIUM | 6.8 | 2026-10-17 | The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated use… | |
| CVE-2026-81344 | MEDIUM | 6.6 | 2026-10-17 | The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that … | |
| CVE-2026-81343 | MEDIUM | 5.3 | 2026-10-17 | The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted val… | |
| CVE-2026-111934 | MEDIUM | Patched | 3.7 | 2026-10-17 | Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of … |
| CVE-2026-111933 | MEDIUM | Patched | 3.7 | 2026-10-17 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitu… |
| CVE-2026-111932 | MEDIUM | Patched | 3.4 | 2026-10-17 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and Lo… |
| CVE-2026-111931 | MEDIUM | Patched | 4.3 | 2026-10-17 | Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Pat… |
| CVE-2026-111930 | MEDIUM | Patched | 4.3 | 2026-10-17 | Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint, which checks only workspace read access and then f… |
| CVE-2026-111929 | MEDIUM | Patched | 5.3 | 2026-10-17 | Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner dae… |
| CVE-2026-111928 | MEDIUM | Patched | 5.4 | 2026-10-17 | Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/policy.rego, which does not verify organization member… |
| CVE-2026-111927 | HIGH | Patched | 7.7 | 2026-10-17 | Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname who… |
| CVE-2026-111926 | MEDIUM | Patched | 3.3 | 2026-10-17 | Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including te… |
| CVE-2026-111924 | HIGH | Patched | 7.5 | 2026-10-17 | Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Att… |
| CVE-2026-111923 | HIGH | Patched | 7.5 | 2026-10-17 | Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. A… |
| CVE-2026-111922 | HIGH | Patched | 6.3 | 2026-10-17 | Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set… |
| CVE-2026-111921 | MEDIUM | Patched | 5.4 | 2026-10-17 | Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write permission to delete admin-tier link shares because the… |
| CVE-2026-111920 | MEDIUM | 4.3 | 2026-10-17 | Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which resolves a user's effective project permission as the m… |