| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-73793 | HPE NonStop Middleware - Secret key handling vulnerability | Hewlett Packard Enterprise | HPE NonStop Middleware | High | 7.9 | 2026-10-14 09:38:04 | Deep Dive |
| CVE-2026-73792 | HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability | Hewlett Packard Enterprise | HPE NonStop Java JToolkit | Low | 3.8 | 2026-10-14 09:21:57 | Deep Dive |
| CVE-2026-73791 | HPE NonStop Hpjmeter - Buffer overflow vulnerability | Hewlett Packard Enterprise | HPE NonStop Hpjmeter | Low | 2.0 | 2026-10-14 09:06:32 | Deep Dive |
| CVE-2026-73790 | HPE NonStop iTP WebServer - Memory corruption vulnerability | Hewlett Packard Enterprise | HPE NonStop iTP WebServer | High | 8.2 | 2026-10-14 08:43:12 | Deep Dive |
| CVE-2026-14851 | Unauthorised disclosure of information on Copart’s online billing service | Copart | Copart’s online billing service | Critical | 9.2 | 2026-10-14 08:23:27 | Deep Dive |
| CVE-2026-103671 | EC-CUBE 4 AmazonPay插件外部控制Web参数漏洞 | EC-CUBE CO.,LTD. | AmazonPay V2 Plugin (4.0/4.1 series) | Medium | 5.3 | 2026-10-14 08:12:14 | Deep Dive |
| CVE-2026-107428 | WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerability | VideoWhisper.com | Paid Videochat Turnkey Site | High | 7.1 | 2026-10-14 08:00:25 | Deep Dive |
| CVE-2026-92392 | HTTP/2 upload Use-After-Free | curl | curl | - | - | 2026-10-14 07:46:15 | Deep Dive |
| CVE-2026-107757 | Gallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Author Display Name + Comment HTML Comment Body | tigroumeow | Gallery Custom Links | Medium | 4.9 | 2026-10-14 07:43:37 | Deep Dive |
| CVE-2026-104764 | Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter | wpazleen | Post Export Import with Media | High | 7.2 | 2026-10-14 07:43:36 | Deep Dive |
| CVE-2026-104909 | Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter | kitae-park | Mang Board | High | 8.1 | 2026-10-14 07:43:36 | Deep Dive |
| CVE-2026-104748 | SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register | wpazleen | SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications | Critical | 9.8 | 2026-10-14 07:43:36 | Deep Dive |
| CVE-2026-103907 | Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action | jegtheme | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | Medium | 6.5 | 2026-10-14 07:43:35 | Deep Dive |
| CVE-2026-107631 | Record of Consent Extension for Complianz <= 2.5 - Unauthenticated Stored Cross-Site Scripting via 'uid' Parameter | davidevalerio | Record of Consent Extension for Complianz | High | 7.2 | 2026-10-14 07:43:35 | Deep Dive |
| CVE-2026-107650 | GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Title | paoltaia | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | Medium | 6.4 | 2026-10-14 07:43:35 | Deep Dive |
| CVE-2026-104761 | Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter | kitae-park | Mang Board | Medium | 6.4 | 2026-10-14 07:43:34 | Deep Dive |
| CVE-2026-107751 | Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter | kitae-park | Mang Board | High | 7.2 | 2026-10-14 07:43:34 | Deep Dive |
| CVE-2026-107756 | Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name | tigroumeow | Meow Lightbox | Medium | 6.4 | 2026-10-14 07:43:34 | Deep Dive |
| CVE-2026-103367 | ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter | wpdesk | ShopMagic – email automation for WordPress | High | 8.1 | 2026-10-14 07:43:33 | Deep Dive |
| CVE-2026-110284 | LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes | lifterlms | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | High | 7.5 | 2026-10-14 07:43:33 | Deep Dive |