CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 19:51 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118076 New | FP Frisbii Pay Frisbii | 8.8 | Oct 29 | WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability |
| CVE-2026-118075 New | WM WP Media folders dbarrere | 8.8 | Oct 29 | WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability |
| CVE-2026-118074 New | FL Finale Lite Daman Jeet | 7.2 | Oct 29 | WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability |
| CVE-2026-118073 New | NK News Kit Elementor Addons blazethemes | 8.8 | Oct 29 | WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability |
| CVE-2026-116869 New | MC myPOS Checkout myPOS Payments | 7.2 | Oct 29 | WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerability |
| CVE-2026-116868 New | BX BuddyPress Xprofile Custom Field Types BuddyDev | 8.8 | Oct 29 | WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability |
| CVE-2026-116867 New | DQ Dynamic QR Code – generator sosidee | 8.8 | Oct 29 | WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability |
| CVE-2026-116866 New | EF Extra Fees Plugin for WooCommerce Dotstore | 8.8 | Oct 29 | WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability |
| CVE-2026-116865 New | ZI Zippy Gesundheit Bewegt GmbH | 7.2 | Oct 29 | WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability |
| CVE-2026-116864 New | WT WPCargo Track & Trace Arni Cinco | 7.2 | Oct 29 | WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability |
| CVE-2026-108494 New | CQ Chained Quiz Bob | 7.1 | Oct 29 | WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61996 New | MO MLS On The Fly favethemes | 8.5 | Oct 29 | WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability |
| CVE-2026-61995 New | YS YouTube Showcase emarket-design | 7.1 | Oct 29 | WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61993 New | BL Blockonomics blockonomics | 7.1 | Oct 29 | WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61989 New | EP Easy Property Listings Merv Barrett | 7.1 | Oct 29 | WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61988 New | AN Auction Nudge – Your eBay on Your Site morehawes | 7.1 | Oct 29 | WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54866 New | RP Razorpay Payment Button Elementor Plugin Razorpay | 7.1 | Oct 29 | WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54864 New | PV Post Video Players nicashmu | 7.1 | Oct 29 | WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42701 New | YA YayMail YayCommerce | 7.2 | Oct 29 | WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability |
| CVE-2026-42692 New | WC WP Crowdfunding Themeum | 7.1 | Oct 29 | WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27394 New | EV Eventer Jyothis Joy | 7.1 | Oct 29 | WordPress Eventer plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-118085 New | GW GlobalPayments WooCommerce Global Payments | 7.1 | Oct 29 | WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-88077 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-96196 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
| CVE-2026-96187 New | ME Microsoft Edge (Chromium-based) Microsoft | 7.4 | Oct 29 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2026-85899 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.1 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-114148 New | N1 .NET 10.0 installed on Linux Microsoft | 7.8 | Oct 29 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-96203 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-96192 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-103092 New | LO Langflow OSS IBM | 8.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-101288 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104317 New | LO Langflow OSS IBM | 8.1 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104324 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104328 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-107326 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110193 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110196 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110244 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110245 New | LO Langflow OSS IBM | 7.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-110309 New | LO Langflow OSS IBM | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-96199 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-96198 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-85897 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-85890 New | ME Microsoft Edge (Chromium-based) Microsoft | 8.8 | Oct 29 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-93570 New | SZ Szafir Krajowa Izba Rozliczeniowa | 8.2 | Oct 29 | XML External Entity injection in Szafir and Szafir Weryfikująca |
| CVE-2026-115713 New | EC Elastic Cloud Enterprise Elastic | 7.5 | Oct 29 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification |
| CVE-2026-115709 New | EC Elastic Cloud Enterprise Elastic | 8.2 | Oct 29 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss |
| CVE-2026-115708 New | EC Elastic Cloud Enterprise Elastic | 7.2 | Oct 29 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass |
| CVE-2026-39736 New | JE JetEngine Crocoblock | 8.5 | Oct 29 | WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability |
| CVE-2026-116399 New | IC InstaWP Connect InstaWP | 8.8 | Oct 29 | WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability |