| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-100514 | WordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerability | Pete Nelson | REST API Log | High | 7.5 | 2026-10-01 14:34:05 | Deep Dive |
| CVE-2026-97297 | WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability | Apps Mav | Gratisfaction | High | 7.6 | 2026-10-01 14:34:04 | Deep Dive |
| CVE-2026-97284 | WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability | Icegram | Icegram | High | 8.8 | 2026-10-01 14:34:03 | Deep Dive |
| CVE-2026-97281 | WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability | weDevs | WP Project Manager | Medium | 6.3 | 2026-10-01 14:34:03 | Deep Dive |
| CVE-2026-97277 | WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability | Apps Mav | Social Boost | High | 7.6 | 2026-10-01 14:34:01 | Deep Dive |
| CVE-2026-97269 | WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability | WPFunnels | WPFunnels | Medium | 6.5 | 2026-10-01 14:34:00 | Deep Dive |
| CVE-2026-97273 | WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability | Premmerce | Premmerce Wishlist for WooCommerce | High | 7.1 | 2026-10-01 14:34:00 | Deep Dive |
| CVE-2026-97268 | WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability | Premmerce | Premmerce Wishlist for WooCommerce | High | 7.1 | 2026-10-01 14:33:59 | Deep Dive |
| CVE-2026-97260 | WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability | maxfoundry | MaxGalleria | High | 7.1 | 2026-10-01 14:33:58 | Deep Dive |
| CVE-2026-97258 | WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability | Aruba.it | Aruba Migration Tool | Medium | 6.5 | 2026-10-01 14:33:57 | Deep Dive |
| CVE-2026-95588 | WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability | AcyMailing Newsletter Team | AcyMailing SMTP Newsletter | High | 8.6 | 2026-10-01 14:33:56 | Deep Dive |
| CVE-2026-97251 | WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability | magepeopleteam | Bus Ticket Booking with Seat Reservation | Medium | 6.5 | 2026-10-01 14:33:56 | Deep Dive |
| CVE-2026-94390 | WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability | Dotstore | Hide Shipping Method For WooCommerce | High | 7.2 | 2026-10-01 14:33:55 | Deep Dive |
| CVE-2026-62073 | WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability | Themeisle | WP Full Stripe Free | High | 7.5 | 2026-10-01 14:33:54 | Deep Dive |
| CVE-2026-103752 | WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability | Paul Ryan | Authorizer | Critical | 9.8 | 2026-10-01 14:33:53 | Deep Dive |
| CVE-2026-62071 | WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability | nickboss | WordPress File Upload | Critical | 9.3 | 2026-10-01 14:33:53 | Deep Dive |
| CVE-2026-103687 | rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist | rhukster | dom-sanitizer | High | 7.3 | 2026-10-01 14:30:13 | Deep Dive |
| CVE-2024-58388 | Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html | Sharp Corporation | Multiple Multifunction Printers | High | 7.5 | 2026-10-01 14:24:21 | Deep Dive |
| CVE-2026-79900 | Heap overflow in KSL checksum initialization | Fortra | BoKS Manager boks-server | Medium | 6.5 | 2026-10-01 14:11:55 | Deep Dive |
| CVE-2026-79901 | Predictable Active Directory service-account passwords in BoKS Manager | Fortra | BoKS Manager boks-server | Critical | 9.9 | 2026-10-01 13:52:27 | Deep Dive |