| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-107508 | Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter | Unknown | Ultimate Multisite | - | - | 2026-10-14 06:00:12 | Deep Dive |
| CVE-2026-107320 | GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log Disclosure | Unknown | GamiPress | - | - | 2026-10-14 06:00:12 | Deep Dive |
| CVE-2026-106646 | Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX Handlers | Unknown | Classified Listing | - | - | 2026-10-14 06:00:11 | Deep Dive |
| CVE-2026-107158 | LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated FreightDesk Integration Option Update via REST Route | Unknown | LTL Freight Quotes | - | - | 2026-10-14 06:00:11 | Deep Dive |
| CVE-2026-107160 | LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error Message | Unknown | LTL Freight Quotes | - | - | 2026-10-14 06:00:11 | Deep Dive |
| CVE-2026-107178 | Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter | Unknown | Image Photo Gallery Final Tiles Grid | - | - | 2026-10-14 06:00:11 | Deep Dive |
| CVE-2026-107126 | WP Booking System < 2.1.0.1 - Unauthenticated Stored XSS via X-Forwarded-For Header | Unknown | WP Booking System | - | - | 2026-10-14 06:00:11 | Deep Dive |
| CVE-2026-107319 | GamiPress < 8.0.6 - Subscriber+ Activity Log Disclosure | Unknown | GamiPress | - | - | 2026-10-14 06:00:11 | Deep Dive |
| CVE-2026-105975 | CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference | Unknown | CamPay Shortcode Payment Gateway | - | - | 2026-10-14 06:00:10 | Deep Dive |
| CVE-2026-105969 | CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure | Unknown | CodeAtoZ B2B Suite for WooCommerce | - | - | 2026-10-14 06:00:10 | Deep Dive |
| CVE-2026-106469 | Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon | Unknown | Gutenverse Form | - | - | 2026-10-14 06:00:10 | Deep Dive |
| CVE-2026-106099 | WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export | Unknown | WP Data Access | - | - | 2026-10-14 06:00:10 | Deep Dive |
| CVE-2026-106166 | NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' Parameter | Unknown | NEX-Forms | - | - | 2026-10-14 06:00:10 | Deep Dive |
| CVE-2026-106098 | WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App Update | Unknown | WP Data Access | - | - | 2026-10-14 06:00:10 | Deep Dive |
| CVE-2026-103307 | Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook | Unknown | Walletdoc Payment Gateway for WooCommerce | - | - | 2026-10-14 06:00:09 | Deep Dive |
| CVE-2026-105261 | PublishPress Future 4.10.1 - 4.10.5 - Contributor+ Stored XSS via 'wrapper' and 'dateformat' Shortcode Attributes | Unknown | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | - | - | 2026-10-14 06:00:09 | Deep Dive |
| CVE-2026-104751 | Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion | Unknown | Rank Math SEO | - | - | 2026-10-14 06:00:09 | Deep Dive |
| CVE-2026-104644 | Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration Update | Unknown | Image Photo Gallery Final Tiles Grid | - | - | 2026-10-14 06:00:09 | Deep Dive |
| CVE-2026-94370 | Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs | qt | Qt_for_MCUs | Medium | 6.5 | 2026-10-14 05:43:28 | Deep Dive |
| CVE-2026-110459 | CVE-2026-110459 | Ubiquiti Inc | UniFi Protect AI Key | High | 8.6 | 2026-10-14 05:19:10 | Deep Dive |