CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 02:47 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90872 New | WS WS_FTP Server Progress Software | 6.6 | Oct 29 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server |
| CVE-2026-90871 New | WS WS_FTP Server Progress Software | 5.3 | Oct 29 | Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server |
| CVE-2026-90870 New | WS WS_FTP Server Progress Software | 5.3 | Oct 29 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server |
| CVE-2026-90862 New | WS WS_FTP Server Progress Software | 4.3 | Oct 29 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server |
| CVE-2026-90861 New | WS WS_FTP Server Progress Software | 6.6 | Oct 29 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server |
| CVE-2026-84296 New | WS WS_FTP Server Progress Software | 6.8 | Oct 29 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server |
| CVE-2026-115795 New | PN P-Net RT-Labs | 5.3 | Oct 29 | Out-of-bounds read of DCP block header in DCP Set and Identify request parsing |
| CVE-2026-118084 New | HB Hotel Booking nicdark | 6.5 | Oct 29 | WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-54865 New | PC Podamibe Custom User Gravatar Podamibe Nepal | 6.5 | Oct 29 | WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42690 New | LE LearnPress ThimPress | 5.4 | Oct 29 | WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability |
| CVE-2026-66912 New | ZC Zimbra Collaboration Synacor | 5.3 | Oct 29 | Stored Cross-Site Scripting in Zimbra |
| CVE-2026-66911 New | ZC Zimbra Collaboration Synacor | 5.3 | Oct 29 | Stored Cross-Site Scripting in Zimbra |
| CVE-2026-88078 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-85330 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge for Android Security Feature Bypass Vulnerability |
| CVE-2026-88090 New | ME Microsoft Edge (Chromium-based) Microsoft | 5.4 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-20942 New | ME Microsoft Edge (Chromium-based) Microsoft | 4.3 | Oct 29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-18894 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-77817 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-77819 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-90991 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-102590 New | LO Langflow OSS IBM | 5.0 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104308 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104309 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104310 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104314 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104315 New | LO Langflow OSS IBM | 4.3 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104316 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-113576 New | AD Adobe Digital Editions Adobe | 6.3 | Oct 29 | Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-104331 New | LO Langflow OSS IBM | 5.4 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110190 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110192 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110200 New | LO Langflow OSS IBM | 6.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-106036 New | SZ Szafir Krajowa Izba Rozliczeniowa | 6.9 | Oct 29 | Improper certificate validation in Szafir |
| CVE-2026-42694 New | KI Kirki Themeum | 4.3 | Oct 29 | WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability |
| CVE-2026-48200 New | DL Document Library Lite Barn2 Plugins | 5.3 | Oct 29 | WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-116848 New | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH Innovations | 6.5 | Oct 29 | WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-109891 New | HA Happy Addons for Elementor weDevs | 6.4 | Oct 29 | WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability |
| CVE-2026-25448 New | WE WP ERP weDevs | 4.3 | Oct 29 | WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability |
| CVE-2026-42691 New | EV EventPrime EventPrime | 5.4 | Oct 29 | WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability |
| CVE-2026-54852 New | PR Page Restriction WordPress (WP) miniOrange | 5.3 | Oct 29 | WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability |
| CVE-2026-97073 New | MY myCred myCred | 5.3 | Oct 29 | WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability |
| CVE-2026-118097 New | FH Flash & HTML5 Video bPlugins | 6.5 | Oct 29 | WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27062 New | WP WPFunnels WPFunnels Team | 4.3 | Oct 29 | WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-54853 New | PB Profile Builder Cozmoslabs | 5.3 | Oct 29 | WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability |
| CVE-2026-114706 New | ST Strong Testimonials WP Chill | 6.5 | Oct 29 | WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27063 New | KF Kit (formerly ConvertKit) Kit | 5.3 | Oct 29 | WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability |
| CVE-2026-115601 New | CP Custom Price for WooCommerce WP Desk | 5.3 | Oct 29 | WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerability |
| CVE-2026-115605 New | SU SureDash Brainstorm Force | 4.3 | Oct 29 | WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability |
| CVE-2026-118095 New | ML Media LIbrary Assistant David Lingren | 6.5 | Oct 29 | WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54871 New | SE ShopBuilder – Elementor WooCommerce Builder Addons Mamunur Rashid | 5.3 | Oct 29 | WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability |