| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-86778 | Username Enumeration in Maksisoft Technology's Maksisoft Gym | Maksisoft Technology, IT, and Software Industry and Trade Inc. | Maksisoft Gym | Medium | 5.3 | 2026-09-30 12:59:33 | Deep Dive |
| CVE-2026-103116 | OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection | OS4ED | openSIS-Classic | Medium | 6.3 | 2026-09-30 12:45:12 | Deep Dive |
| CVE-2026-102399 | WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability | supsystic | Photo Gallery by Supsystic | Medium | 5.4 | 2026-09-30 12:28:33 | Deep Dive |
| CVE-2026-102398 | WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability | supsystic | Popup by Supsystic | High | 7.1 | 2026-09-30 12:28:32 | Deep Dive |
| CVE-2026-102395 | WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability | supsystic | Easy Google Maps | High | 7.1 | 2026-09-30 12:28:31 | Deep Dive |
| CVE-2026-102396 | WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability | supsystic | Ultimate Maps by Supsystic | High | 7.1 | 2026-09-30 12:28:31 | Deep Dive |
| CVE-2026-102386 | WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability | Jacob N. Breetvelt | WP Photo Album Plus | Medium | 6.5 | 2026-09-30 12:28:30 | Deep Dive |
| CVE-2026-102385 | WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability | Kevin Stover | Ninja Forms | High | 7.1 | 2026-09-30 12:28:29 | Deep Dive |
| CVE-2026-102384 | WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability | Supreme Modules | Supreme Modules Lite | Medium | 5.9 | 2026-09-30 12:28:28 | Deep Dive |
| CVE-2026-100513 | WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability | Aman | CF7 Views – Complete Entry Management for Contact Form 7 | Medium | 6.5 | 2026-09-30 12:28:28 | Deep Dive |
| CVE-2026-100508 | WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability | WordPress.org | Two Factor | Medium | 5.3 | 2026-09-30 12:28:27 | Deep Dive |
| CVE-2026-100507 | WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability | If-So Dynamic Content | If-So Dynamic Content Personalization | High | 7.1 | 2026-09-30 12:28:26 | Deep Dive |
| CVE-2026-97302 | WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability | Themeisle | MPG | Medium | 5.3 | 2026-09-30 12:28:25 | Deep Dive |
| CVE-2026-97301 | WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability | Cool Plugins | Cool Formkit Lite | Medium | 6.5 | 2026-09-30 12:28:25 | Deep Dive |
| CVE-2026-97299 | WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability | KnitPay | Razorpay Payment Links for WooCommerce | Medium | 5.4 | 2026-09-30 12:28:24 | Deep Dive |
| CVE-2026-97298 | WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability | KingAddons | King Addons for Elementor | Medium | 6.5 | 2026-09-30 12:28:23 | Deep Dive |
| CVE-2026-97293 | WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability | David Lingren | Media LIbrary Assistant | High | 8.5 | 2026-09-30 12:28:22 | Deep Dive |
| CVE-2026-97292 | WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability | YITHEMES | YITH WooCommerce Tab Manager | Medium | 6.5 | 2026-09-30 12:28:22 | Deep Dive |
| CVE-2026-97289 | WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability | ExpressTech Systems | Quiz And Survey Master | High | 7.1 | 2026-09-30 12:28:21 | Deep Dive |
| CVE-2026-97288 | WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability | Jayson T Cote | OAuth Server | Medium | 6.5 | 2026-09-30 12:28:20 | Deep Dive |