| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-94377 | Verified Reviews (Avis Vérifiés) <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting via 'moderation' Parameter (discussion.commentaire) | avisverifies | Verified Reviews (Avis Vérifiés) | High | 7.2 | 2026-10-14 03:40:02 | Deep Dive |
| CVE-2026-78193 | JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection | ntbyk | JTL-Connector for WooCommerce | High | 7.5 | 2026-10-14 03:40:02 | Deep Dive |
| CVE-2026-97020 | PO/MO Editor <= 1.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'podata' Parameter | dougwollison | PO/MO Editor | Medium | 6.4 | 2026-10-14 03:40:02 | Deep Dive |
| CVE-2026-16495 | Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute | wpdevart | Countdown Timer – Widget Countdown | Medium | 6.4 | 2026-10-14 03:40:01 | Deep Dive |
| CVE-2026-77114 | Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting | danrossiter | Document Gallery | High | 7.2 | 2026-10-14 03:40:01 | Deep Dive |
| CVE-2026-93885 | Cryptocurrency Donation Box <= 2.2.13 - Unauthenticated Stored Cross-Site Scripting via data_object Parameter | blackworks1 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | High | 7.2 | 2026-10-14 03:40:01 | Deep Dive |
| CVE-2026-95807 | FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute | foliovision | FV Player 8 | Medium | 6.4 | 2026-10-14 03:40:00 | Deep Dive |
| CVE-2026-100193 | Tutor LMS <= 4.1.0 - Reflected Cross-Site Scripting via 'tab' Parameter | themeum | Tutor LMS – eLearning and online course solution | Medium | 4.7 | 2026-10-14 03:40:00 | Deep Dive |
| CVE-2026-104800 | AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php | streetforce1 | AGE-GATE | Critical | 9.8 | 2026-10-14 03:40:00 | Deep Dive |
| CVE-2026-96661 | Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter | pasyuk | Gmedia Photo Gallery | High | 7.5 | 2026-10-14 03:39:59 | Deep Dive |
| CVE-2026-110445 | TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection | TEAMPLUS TECHNOLOGY | TeamPlus Messenger | High | 8.8 | 2026-10-14 02:57:49 | Deep Dive |
| CVE-2026-110444 | TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection | TEAMPLUS TECHNOLOGY | TeamPlus Messenger | High | 8.8 | 2026-10-14 02:56:55 | Deep Dive |
| CVE-2026-14765 | Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL | Epic Games | Unreal Engine | High | 7.7 | 2026-10-14 02:31:09 | Deep Dive |
| CVE-2026-110447 | Collabora Online <26.4.303 OS命令注入漏洞 | Collabora | Collabora Online - Built-in CODE Server | Critical | 9.2 | 2026-10-14 02:27:42 | Deep Dive |
| CVE-2026-103422 | AnyComment <= 0.3.6 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter | ateshabaev | AnyComment | High | 7.2 | 2026-10-14 02:27:39 | Deep Dive |
| CVE-2026-97657 | Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter | Tyche Softwares | Abandoned Cart Pro for WooCommerce | Critical | 9.8 | 2026-10-14 02:27:39 | Deep Dive |
| CVE-2026-102251 | Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter | Tyche Softwares | Abandoned Cart Pro for WooCommerce | High | 7.5 | 2026-10-14 02:27:38 | Deep Dive |
| CVE-2026-97668 | Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value | Tyche Softwares | Abandoned Cart Pro for WooCommerce | Critical | 9.8 | 2026-10-14 02:27:38 | Deep Dive |
| CVE-2026-110002 | Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter | snazzyplugins | Snazzy Social Media Feed | Critical | 9.8 | 2026-10-14 02:27:37 | Deep Dive |
| CVE-2026-82715 | Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server | Hitachi | Hitachi Disk Array Driver for AIX | High | 7.9 | 2026-10-14 01:46:59 | Deep Dive |