CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 03:11 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116391 New | GL GS Logo Slider GS Plugins | 8.8 | Oct 28 | WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability |
| CVE-2026-116392 New | AC Accordion PickPlugins | 7.2 | Oct 28 | WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability |
| CVE-2026-116393 New | OE Optima Express iHomefinder, Inc. | 7.5 | Oct 28 | WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability |
| CVE-2026-111850 New | BU BuddyPress BuddyPress | 8.5 | Oct 28 | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability |
| CVE-2026-115612 New | SL SliceWP iova.mihai | 7.1 | Oct 28 | WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115591 New | CF Contact Form by Supsystic Supsystic | 7.5 | Oct 28 | WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability |
| CVE-2026-115593 New | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 28 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115596 New | EP eCommerce Product Catalog impleCode | 7.1 | Oct 28 | WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115606 New | DT DXP ToolKit Crowd Favorite | 7.1 | Oct 28 | WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115609 New | GE GetPaid Stiofan | 7.1 | Oct 28 | WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-118037 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing |
| CVE-2026-118036 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering |
| CVE-2026-118035 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing |
| CVE-2026-118040 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing |
| CVE-2026-118039 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing |
| CVE-2026-118038 New | TD Telerik Document Processing Libraries Progress Software | 7.1 | Oct 28 | Path Traversal in Telerik Document Processing Libraries AI Agent Tools |
| CVE-2026-67073 New | BA BigFix AEX HCL Software | 8.6 | Oct 28 | HCL BigFix AEX is affected by multiple security vulnerabilities. |
| CVE-2026-102790 New | IE iCagenda extension for Joomla icagenda.com | 8.6 | Oct 28 | Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 |
| CVE-2026-118485 New | AX Axel Axel Download Accelerator | 8.1 | Oct 28 | Axel Download Accelerator Path Traversal via URL Filename Decoding |
| CVE-2026-6064 New | AA Avast Antivirus Gen Digital | 7.3 | Oct 28 | Norton, Avast, and AVG local privilege escalation via link following in Data Shredder |
| CVE-2026-110541 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-110540 New | PD PowerProtect Data Domain Management Center Dell | 7.1 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-103779 New | PD PowerProtect Data Domain Dell | 8.3 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-112198 New | ND NoviGest Desktop App Tactis | 8.3 | Oct 28 | Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App |
| CVE-2026-87102 New | AC Acronis Cyber Protect 17 Acronis | 7.4 | Oct 28 | Sensitive information disclosure and manipulation due to improper token validation |
| CVE-2025-30414 New | AC Acronis Cyber Protect 17 Acronis | 7.1 | Oct 28 | Local privilege escalation due to improper authentication |
| CVE-2026-87103 New | AC Acronis Cyber Protect 17 Acronis | 7.4 | Oct 28 | Sensitive information disclosure and manipulation due to improper token validation |
| CVE-2026-86377 New | PD PowerProtect Data Domain Dell | 7.6 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86378 New | PD PowerProtect Data Domain Dell | 8.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86379 New | PD PowerProtect Data Domain Management Center Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-86380 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86385 New | PD PowerProtect Data Domain Dell | 8.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability |
| CVE-2026-86389 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86393 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86394 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86395 New | PD PowerProtect Data Domain Virtual Edition Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0… |
| CVE-2026-86396 New | PD PowerProtect Data Domain Dell | 8.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86398 New | PD PowerProtect Data Domain Dell | 8.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-86399 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-92797 New | ME Memberpress MemberPress | 8.8 | Oct 28 | Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter |
| CVE-2026-63286 New | AC AXIS Camera Station 5 Axis Communications AB | 7.1 | Oct 28 | Database backups are vulnerable to offline attacks |
| CVE-2026-111111 New | PS Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons bdthemes | 7.2 | Oct 28 | Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape |
| CVE-2026-109384 New | TI The Innovative Form Builder – IvyForms melograno | 8.8 | Oct 28 | The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload |
| CVE-2026-111120 New | VC VikRentCar Car Rental Management System e4jvikwp | 8.8 | Oct 28 | VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task |
| CVE-2026-110662 New | MA MxChat – AI Chatbot & Content Generation for WordPress mxchat | 7.2 | Oct 28 | MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating |
| CVE-2026-109381 New | EB Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar magepeopleteam | 7.2 | Oct 28 | Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter |
| CVE-2026-111577 New | GO GoSMTP | 7.2 | Oct 28 | GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings |
| CVE-2026-111021 New | اپ افزونه پیامک ووکامرس | Persian WooCommerce SMS | 7.1 | Oct 28 | Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter |
| CVE-2026-105972 New | MC Menu Cart for WooCommerce | 7.5 | Oct 28 | WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute |
| CVE-2026-15323 New | PD Product Designer for WooCommerce WordPress | Lumise King-Theme | 7.5 | Oct 28 | Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload |