| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-93463 | baserCMS脚本验证绕过导致跨站脚本漏洞 | baserCMS User Community | baserCMS | Medium | 5.1 | 2026-09-30 07:33:54 | Deep Dive |
| CVE-2026-92870 | Pgpool-II栈溢出致未认证进程终止漏洞 | Pgpool Global Development Group | Pgpool-II | High | 8.7 | 2026-09-30 07:21:24 | Deep Dive |
| CVE-2026-92869 | Pgpool-II越界写漏洞致进程异常终止 | Pgpool Global Development Group | Pgpool-II | High | 7.1 | 2026-09-30 07:21:10 | Deep Dive |
| CVE-2026-92868 | Pgpool-II证书验证不当致认证绕过漏洞 | Pgpool Global Development Group | Pgpool-II | Medium | 6.9 | 2026-09-30 07:20:48 | Deep Dive |
| CVE-2026-92867 | Pgpool-II越界写漏洞致代码执行 | Pgpool Global Development Group | Pgpool-II | High | 8.7 | 2026-09-30 07:20:28 | Deep Dive |
| CVE-2026-97150 | baserCMS5 BcAddonMigrator任意文件读取删除漏洞 | baserCMS Users Community | BcAddonMigrator | High | 8.6 | 2026-09-30 07:12:23 | Deep Dive |
| CVE-2026-97196 | WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability | Liquid Web / StellarWP | GiveWP | Critical | 9.1 | 2026-09-30 06:55:07 | Deep Dive |
| CVE-2026-89294 | Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter | croixhaug | Simply Schedule Appointments | High | 7.5 | 2026-09-30 06:40:23 | Deep Dive |
| CVE-2026-94274 | YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API | Unknown | YayReviews | - | - | 2026-09-30 06:00:26 | Deep Dive |
| CVE-2026-94297 | Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation | Unknown | Media Library Organizer | - | - | 2026-09-30 06:00:26 | Deep Dive |
| CVE-2026-96886 | Course Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export | Unknown | Course Booking System | - | - | 2026-09-30 06:00:26 | Deep Dive |
| CVE-2026-97316 | Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass | Unknown | Broken Link Notifier | - | - | 2026-09-30 06:00:26 | Deep Dive |
| CVE-2026-92424 | Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue | Unknown | Content Egg | - | - | 2026-09-30 06:00:25 | Deep Dive |
| CVE-2026-92994 | Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API | Unknown | Verge3D Publishing and E-Commerce | - | - | 2026-09-30 06:00:25 | Deep Dive |
| CVE-2026-93580 | InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook | Unknown | InPost PL | - | - | 2026-09-30 06:00:25 | Deep Dive |
| CVE-2026-91832 | WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF | Unknown | WP Mobile Menu | - | - | 2026-09-30 06:00:25 | Deep Dive |
| CVE-2026-91051 | EWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta | Unknown | EWWW Image Optimizer | - | - | 2026-09-30 06:00:25 | Deep Dive |
| CVE-2026-91072 | EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler | Unknown | EWWW Image Optimizer | - | - | 2026-09-30 06:00:25 | Deep Dive |
| CVE-2026-90953 | Image Optimizer by Elementor < 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure via Discarded REST Permission Callbacks | Unknown | Image Optimizer | - | - | 2026-09-30 06:00:24 | Deep Dive |
| CVE-2026-89190 | Robin Image Optimizer < 2.0.8 - Subscriber+ Plugin Settings Disclosure via fy_ajax | Unknown | Robin Image Optimizer | - | - | 2026-09-30 06:00:23 | Deep Dive |