🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-124330 LOW A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. This affects the function exist/save/read/remove of the file store/src/main/java/c... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124329 LOW A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the file common/src/main/java/... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124328 MEDIUM A vulnerability has been found in FlowCI flow-core-x up to 1.23.49. The affected element is the function ConditionManagerImpl.run of the file core/src... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124326 MEDIUM A flaw has been found in DataLinkDC Dinky up to 1.2.5. Impacted is the function file.getOriginalFilename of the file CatalogueController.java of the c... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-97195 LOW The Secure Custom Fields WordPress plugin before 6.9.8 does not sanitize a persisted field definition before emitting part of it as an HTML attribute ... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-97194 LOW The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and formats the values of its relation... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-97193 LOW The Secure Custom Fields WordPress plugin before 6.9.8 does not verify that a user is allowed to edit the target object before writing to it during bi... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-97192 LOW The Secure Custom Fields WordPress plugin before 6.9.8 does not re-apply its field-group location rules when persisting values submitted through the p... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-96963 LOW The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as ... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-96961 MEDIUM The Pie Register WordPress plugin through 3.8.4.15 does not perform any capability, nonce or authentication check on one of its request handlers, all... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-85344 MEDIUM The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-122085 MEDIUM The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer f... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-122062 MEDIUM The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form s... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-122060 MEDIUM The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the ... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-114432 CRITICAL The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in it... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-110963 CRITICAL The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly ... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-110132 MEDIUM The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, a... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-109925 HIGH The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthen... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-106015 HIGH The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, ... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-105970 MEDIUM The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer pay... | MEDIUM | ????? | ????? | NVD | 5 days ago |