| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-107422 | WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability | axew3.com | WP w3all phpBB | Medium | 6.5 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107425 | WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability | Magepeople inc. | Bus Ticket Booking with Seat Reservation | Medium | 6.5 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107421 | WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability | VideoWhisper.com | Broadcast Live Video | High | 7.3 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107424 | WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability | M A Vinoth Kumar | Frontend Dashboard | Critical | 9.8 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-105874 | WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability | Brainstorm Force | SureCart | High | 7.1 | 2026-10-14 12:08:27 | Deep Dive |
| CVE-2026-106599 | WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability | Brainstorm Force | SureCart | High | 8.8 | 2026-10-14 12:08:27 | Deep Dive |
| CVE-2026-107433 | WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability | miniOrange | WP OAuth Server | Medium | 6.5 | 2026-10-14 12:08:27 | Deep Dive |
| CVE-2026-97278 | WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability | WP SYNTEX | Polylang | High | 7.2 | 2026-10-14 12:08:27 | Deep Dive |
| CVE-2026-76655 | HPE NonStop SNMP Trap Multiplexer - Buffer Overflow vulnerability | Hewlett Packard Enterprise | HPE NonStop SNMP Trap Multiplexer | High | 7.5 | 2026-10-14 11:34:34 | Deep Dive |
| CVE-2026-73798 | HPE NonStop DNS 9.2.3 Non Secure Version | Hewlett Packard Enterprise | HPE NonStop DNS 9.2.3 Non Secure Version | High | 8.2 | 2026-10-14 11:27:00 | Deep Dive |
| CVE-2026-73797 | HPE NonStop TSQLFIL - Memory corruption vulnerability | Hewlett Packard Enterprise | HPE NonStop TSQLFIL | Medium | 5.3 | 2026-10-14 11:21:02 | Deep Dive |
| CVE-2026-85298 | Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation | Google Cloud | Application Integration | High | 7.3 | 2026-10-14 11:14:01 | Deep Dive |
| CVE-2026-73796 | HPE NonStop TSQLEXE - Memory Corruption vulnerability | Hewlett Packard Enterprise | HPE NonStop TSQLEXE | Medium | 4.4 | 2026-10-14 11:12:18 | Deep Dive |
| CVE-2026-108072 | Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation | TSplus | TSplus Remote Access | Medium | 5.4 | 2026-10-14 11:06:15 | Deep Dive |
| CVE-2026-108071 | Improper Multi-Factor Authentication Validation Allows Authentication Bypass | TSplus | TSplus Remote Access | High | 8.7 | 2026-10-14 11:02:58 | Deep Dive |
| CVE-2026-105067 | WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability | Webnus | Modern Events Calendar Lite | High | 8.5 | 2026-10-14 11:00:12 | Deep Dive |
| CVE-2026-103358 | WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability | VillaTheme | Email Template Customizer for WooCommerce | High | 7.5 | 2026-10-14 11:00:11 | Deep Dive |
| CVE-2026-107431 | WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability | Crocoblock | JetFormBuilder | High | 7.5 | 2026-10-14 11:00:11 | Deep Dive |
| CVE-2026-101341 | Stack overwrite from specially formatted TXT-DATA RDATA field | NLnet Labs | NSD | High | 8.7 | 2026-10-14 10:56:52 | Deep Dive |
| CVE-2026-101339 | Stack overwrite from a specially crafted and formatted HIP RR | NLnet Labs | NSD | High | 8.7 | 2026-10-14 10:56:38 | Deep Dive |