Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
85eb06a5 by security tracker role at 2026-09-20T07:14:35+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
CVE-2026-9858 (The Partial Shipment for Woocommerce plugin for WordPress is
vulnerabl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9855 (The Custom Field Template plugin for WordPress is vulnerable to
generi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9832 (The Payment Gateway of Stripe for WooCommerce plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9766 (The Empik for Woocommerce plugin for WordPress is vulnerable to
author ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9615 (The Flex Import plugin for WordPress is vulnerable to Missing
Authoriz ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9613 (The Datalogics Ecommerce Delivery \u2013 Datalogics plugin for
WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9289 (The WordLift \u2013 AI powered SEO \u2013 Schema plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-9232 (The Easy Appointments plugin for WordPress is vulnerable to
Sensitive ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94084 (Suricata before 8.0.7 has an Http2ThreadMultiBuf
use-after-free when a ...)
TODO: check
CVE-2026-94083 (Suricata before 8.0.7 has a DoH2 type confusion that can cause
an inva ...)
@@ -71,7 +71,7 @@ CVE-2026-93965 (A flaw has been found in aiyiyi121 SxDevOps
1.0/1.1. Affected is
CVE-2026-93964 (A vulnerability was detected in NginxProxyManager
nginx-proxy-manager ...)
TODO: check
CVE-2026-93963 (A security vulnerability has been detected in itsourcecode
Leave Manag ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-93962 (A weakness has been identified in Kamailio up to
5.8.8/6.0.7/6.1.4/6.2 ...)
TODO: check
CVE-2026-93961 (A security flaw has been discovered in Dromara UJCMS up to
12.3.1. The ...)
@@ -79,9 +79,9 @@ CVE-2026-93961 (A security flaw has been discovered in
Dromara UJCMS up to 12.3.
CVE-2026-93960 (A vulnerability was identified in Pixelfed up to 0.12.11.
Impacted is ...)
TODO: check
CVE-2026-93959 (A vulnerability was determined in SourceCodester Online
Reviewer Manag ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-93958 (A vulnerability was found in D-Link R95 BE9500_1.00.16. This
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-93957 (A vulnerability has been found in olivier-ls PHP-FTS up to
1.1.3. This ...)
TODO: check
CVE-2026-93956 (A flaw has been found in olivier-ls PHP-FTS up to 1.1.2.
Affected by t ...)
@@ -91,117 +91,117 @@ CVE-2026-93955 (A vulnerability was detected in
grimmory-tools grimmory up to 3.
CVE-2026-93954 (A security vulnerability has been detected in grimmory-tools
grimmory ...)
TODO: check
CVE-2026-93742 (A weakness has been identified in Totolink A3002MU
Hh-B20211125.1046. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-92965 (The TikTok WordPress plugin before 1.4.2 does not check that a
request ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92541 (The Import and export users and customers WordPress plugin
before 2.5. ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92540 (The Import and export users and customers WordPress plugin
before 2.5. ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92423 (The Meow Gallery WordPress plugin before 5.5.5 does not
perform a prop ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92422 (The Meow Gallery WordPress plugin before 5.5.5 does not
properly sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92410 (The Sign-up Sheets WordPress plugin before 2.4.0 does not
properly val ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-8354 (The Gum Addon for Elementor plugin for WordPress is vulnerable
to Stor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89155
REJECTED
CVE-2026-87917 (The MC4WP: Mailchimp for WordPress plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87840 (The Tripzzy WordPress plugin before 1.5.1 does not perform
any capabi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87839 (The Tripzzy WordPress plugin before 1.5.1 does not have
authorisation ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87068 (The Forminator Forms WordPress plugin before 1.57.2.1 does
not apply ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87067 (The Forminator Forms WordPress plugin before 1.57.2.1 does
not restri ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86553 (SmartLife app dynamically generates fresh SmartLife
application authen ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-86552 (SmartLife app dynamically generates brand\u2011new SmartLife
applicati ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-86551 (The Z80Ultra (NX741J) product contains a vulnerability where
non-privi ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-85658 (The Paid Membership Plugin, Ecommerce, User Registration Form,
Login F ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85017 (The Unlimited Elements For Elementor WordPress plugin before
2.0.20 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84223 (The Kirki WordPress plugin before 6.3.1 does not sanitize
uploaded SV ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82842 (The SAML Single Sign On WordPress plugin before 6.0.0 does
not honour ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82672 (Inconsistent Interpretation of HTTP Requests ('HTTP
Request/Response S ...)
TODO: check
CVE-2026-81654 (The Photo Gallery, Sliders, Proofing and WordPress plugin
before 4.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81653 (The Photo Gallery, Sliders, Proofing and WordPress plugin
before 4.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81652 (The Photo Gallery, Sliders, Proofing and WordPress plugin
before 4.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81651 (The Photo Gallery, Sliders, Proofing and WordPress plugin
before 4.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81650 (The Photo Gallery, Sliders, Proofing and WordPress plugin
before 4.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-7527 (The WP Ghost (Hide My WP Ghost) \u2013 Security & Firewall
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76579 (The LiteSpeed Cache plugin for WordPress is vulnerable to
Reflected Cr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-75959 (The GoPay for WooCommerce plugin for WordPress is vulnerable
to generi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-6295 (The WP Optimizer plugin for WordPress is vulnerable to SQL
Injection v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-5410 (The Redux Framework plugin for WordPress is vulnerable to
Stored Cross ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-5400 (The Redux Framework plugin for WordPress is vulnerable to
Stored Cross ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4792 (The Bread plugin for WordPress is vulnerable to information
exposure i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4327 (The The Welcomizer plugin for WordPress is vulnerable to Remote
Code E ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-2422 (The WP Composer \u2013 The Easiest Page Builder plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-2278 (The VW Writer Blog theme for WordPress is vulnerable to
unauthorized m ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-1984 (The Ibtana \u2013 Ecommerce Product Addons plugin for WordPress
is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-1641 (The Wow Elements Addons for Elementor plugin for WordPress is
vulnerab ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-1256 (The YS LeadGen plugin for WordPress is vulnerable to
authorization byp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-1255 (The YS LeadGen plugin for WordPress is vulnerable to Sensitive
Informa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-1242 (The BlockSpare plugin for WordPress is vulnerable to
authorization byp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18346 (The TikTok plugin for WordPress is vulnerable to authorization
bypass ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16542 (The Import and export users and customers WordPress plugin
before 2.4. ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15947 (The Metasync plugin for WordPress is vulnerable to
unauthorized modifi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15946 (The Search Atlas SEO \u2013 Premier SEO Plugin for One-Click
WP Publis ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15664 (The Quill Forms | Conversational Multi Step Forms, Surveys &
quizzes p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15463 (The SSL Zen \u2014 SSL Certificate Installer & HTTPS Redirects
plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15098 (The Real3D Flipbook Lite plugin for WordPress is vulnerable to
Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14844 (The Master Slider WordPress plugin through 3.11.2 does not
sanitise a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13770 (The AppMySite \u2013 WordPress & WooCommerce Mobile App
Builder (No-Co ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13200 (The Create plugin for WordPress is vulnerable to generic SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13191 (The Create plugin for WordPress is vulnerable to generic SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12402 (The OTP Login & Register Woocommerce plugin for WordPress is
vulnerabl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11899 (The PDF Builder for WooCommerce. Create invoices,packing slips
and mor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11608 (The WP Customer Reviews plugin for WordPress is vulnerable to
Reflecte ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82560 (Pod::Text versions before 6.1.1 for Perl allow CPU and memory
exhausti ...)
- perl <unfixed> (bug #1148455)
- podlators-perl <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85eb06a584a7ca2aa073b48cdd7369687c23a553
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85eb06a584a7ca2aa073b48cdd7369687c23a553
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
