Recent changes
Records added, updated or removed by each sync (kept for 90 days). RSS feed
| Synced (UTC) | Change | CVE | Severity | Summary |
|---|---|---|---|---|
| 2026-10-22 06:20 | new | CVE-2026-97328 | Unscored | WebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser |
| 2026-10-22 06:20 | new | CVE-2026-88849 | Unscored | MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment |
| 2026-10-22 06:20 | new | CVE-2026-78392 | Unscored | Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter |
| 2026-10-22 06:20 | new | CVE-2026-111972 | Unscored | Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR |
| 2026-10-22 06:20 | new | CVE-2026-111971 | Unscored | Photo Engine < 6.5.8 - Author+ Stored XSS via Collection Name |
| 2026-10-22 06:20 | new | CVE-2026-111958 | Unscored | Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token |
| 2026-10-22 06:20 | new | CVE-2026-110011 | Unscored | MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export |
| 2026-10-22 06:20 | new | CVE-2026-110010 | Unscored | MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameter |
| 2026-10-22 06:20 | new | CVE-2026-109987 | Unscored | PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie |
| 2026-10-22 06:20 | new | CVE-2026-109931 | Unscored | Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update |
| 2026-10-22 06:20 | new | CVE-2026-109927 | Unscored | CM HIPAA Forms < 3.3.2 - hipaa_forms+ Privilege Escalation via cm_hipaa_update_user_role |
| 2026-10-22 06:20 | new | CVE-2026-103234 | Unscored | WP Ultimate Review < 2.4.5 - Unauthenticated Arbitrary Shortcode Execution via Reviewer Email |
| 2026-10-22 06:20 | new | CVE-2026-100142 | Unscored | FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR |
| 2026-10-22 05:53 | new | CVE-2026-114570 | Medium 4.9 | WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit |