CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 11:17 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115964 New | MO Motors StylemixThemes | 9.3 | Oct 29 | WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability |
| CVE-2026-114358 New | RX Radius Xenia M2M Platform Radius Synergies | 9.3 | Oct 29 | SQL Injection Vulnerability in Radius Xenia M2M Platform |
| CVE-2026-109516 New | BF Bot for Telegram on WooCommerce guruteam | 9.8 | Oct 29 | Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token |
| CVE-2026-42922 New | FR Frangoteam frangoteam | 9.8 | Oct 29 | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809) |
| CVE-2026-66088 New | OP openEQUELLA Apereo Foundation | 9.4 | Oct 29 | Unrestricted Command Execution via system.execute |
Showing 5
