🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-120531 HIGH The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data[ip]’ ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-99283 UNKNOWN In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Commit ... | UNKNOWN | ????? | ????? | NVD | 6 days ago |
| CVE-2026-99284 UNKNOWN In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: propagate shared-frag marker in skb_zerocopy()
skb_zerocopy() moves... | UNKNOWN | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124060 CRITICAL A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cg... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124059 CRITICAL A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the f... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124258 MEDIUM Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123472 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box – WordPress Custom... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123461 MEDIUM Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120836 MEDIUM Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Acces... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119522 MEDIUM Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124058 CRITICAL A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Execut... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124057 CRITICAL A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. ... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123992 MEDIUM A flaw has been found in DataEase up to 2.10.27. Affected by this issue is the function StaticResourceServer.validateSvgContent of the file core/core-... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123991 MEDIUM A vulnerability was detected in DataEase up to 2.10.27. Affected by this vulnerability is the function WhitelistUtils.endsWithAny of the file Whitelis... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123990 MEDIUM A security vulnerability has been detected in DataEase up to 2.10.27/3.1.0. Affected is the function ExtWhere2Str.extWhere2sqlOjb of the file engine/t... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123989 MEDIUM A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Bui... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124318 HIGH Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and ModuleSetting.loads that allows staff use... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124317 MEDIUM libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-r... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124316 MEDIUM Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted erpnext.buying.utils.get_link... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124315 HIGH Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted get_bom_items and get_bom_dif... | HIGH | ????? | ????? | NVD | 6 days ago |