| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-15090 | Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter | jackdewey | Link Library | High | 7.5 | 2026-10-15 05:30:23 | Deep Dive |
| CVE-2026-15180 | Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages' | data443 | Tracking Code Manager | Medium | 6.1 | 2026-10-15 05:30:23 | Deep Dive |
| CVE-2026-88043 | Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter | kitae-park | Mang Board | High | 7.2 | 2026-10-15 05:30:23 | Deep Dive |
| CVE-2026-18548 | Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter | trainingbusinesspros | Groundhogg — CRM, Newsletters, and Marketing Automation | High | 7.2 | 2026-10-15 05:30:22 | Deep Dive |
| CVE-2026-18586 | Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email' | codename065 | Premium Packages – Sell Digital Products Securely | High | 7.2 | 2026-10-15 05:30:22 | Deep Dive |
| CVE-2026-18557 | Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter | 10web | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | Medium | 6.1 | 2026-10-15 05:30:22 | Deep Dive |
| CVE-2026-17031 | Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID | quadlayers | Checkout Field Manager (Checkout Manager) for WooCommerce | High | 8.1 | 2026-10-15 05:30:21 | Deep Dive |
| CVE-2026-17001 | Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields | carazo | Import and export users and customers | Medium | 6.4 | 2026-10-15 05:30:21 | Deep Dive |
| CVE-2026-86803 | Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template | oceanwp | Ocean Extra | Medium | 6.5 | 2026-10-15 05:30:21 | Deep Dive |
| CVE-2026-78001 | Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute | boldgrid | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | Medium | 6.4 | 2026-10-15 05:30:20 | Deep Dive |
| CVE-2026-110926 | Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels | Red Hat | Red Hat Hardened Images | Medium | 5.3 | 2026-10-15 05:25:08 | Deep Dive |
| CVE-2026-110925 | Openssh: openssh: '$' and '\' in a command-line username expand through %u | Red Hat | Red Hat Hardened Images | Medium | 5.4 | 2026-10-15 05:25:01 | Deep Dive |
| CVE-2026-110923 | Openssh: openssh: sftp can write outside the destination directory from a server-supplied path | Red Hat | Red Hat Hardened Images | Medium | 6.5 | 2026-10-15 05:25:00 | Deep Dive |
| CVE-2026-76667 | HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability | Hewlett Packard Enterprise | HPE NonStop EXPAND | Medium | 5.7 | 2026-10-15 04:55:27 | Deep Dive |
| CVE-2026-76666 | HPE NonStop EXPAND - Out-of-Bounds memory read | Hewlett Packard Enterprise | HPE NonStop EXPAND | Medium | 4.7 | 2026-10-15 04:51:13 | Deep Dive |
| CVE-2026-76665 | HPE NonStop EXPAND - Buffer Overflow vulnerability | Hewlett Packard Enterprise | HPE NonStop EXPAND | High | 7.1 | 2026-10-15 04:45:11 | Deep Dive |
| CVE-2026-14572 | Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Content | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | Medium | 6.4 | 2026-10-15 04:26:51 | Deep Dive |
| CVE-2026-108587 | 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter | 10web | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | Critical | 9.8 | 2026-10-15 04:26:51 | Deep Dive |
| CVE-2026-3712 | PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter | kiboit | PhastPress | High | 7.3 | 2026-10-15 04:26:50 | Deep Dive |
| CVE-2026-76664 | HPE NonStop EXPAND - Out-of-Bounds memory read/write | Hewlett Packard Enterprise | HPE NonStop EXPAND | Medium | 6.4 | 2026-10-15 04:01:14 | Deep Dive |