Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
12e9a3f6 by Salvatore Bonaccorso at 2026-10-03T10:12:14+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2026-97660 (The WPC Product Options for WooCommerce plugin
for WordPress is
CVE-2026-97644 (The Groundhogg \u2014 CRM, Newsletters, and Marketing
Automation plugi ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97363 (The WebSocket Application Programming Interface lacks
restrictions on ...)
- TODO: check
+ NOT-FOR-US: Monta monta.app
CVE-2026-97344 (The Wp Social Login and Register Social Counter plugin for
WordPress i ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97343 (The Burst Statistics \u2013 Simple WordPress Analytics (Google
Analyti ...)
@@ -13,7 +13,7 @@ CVE-2026-97341 (The Visitor Traffic Real Time Statistics
plugin for WordPress is
CVE-2026-97337 (The Simple Membership plugin for WordPress is vulnerable to
unauthoriz ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97212 (The WebSocket backend uses charging station identifiers to
uniquely as ...)
- TODO: check
+ NOT-FOR-US: Monta monta.app
CVE-2026-96962 (The Pie Register WordPress plugin before 3.8.4.14 does not
restrict a ...)
NOT-FOR-US: WordPress plugin
CVE-2026-96650 (The Strong Testimonials plugin for WordPress is vulnerable to
Stored C ...)
@@ -29,15 +29,15 @@ CVE-2026-96267 (The WP Visitor Statistics (Real Time
Traffic) plugin for WordPre
CVE-2026-95865 (The Beaver Builder Page Builder \u2013 Drag and Drop Website
Builder p ...)
NOT-FOR-US: WordPress plugin
CVE-2026-95102 (WebSocket endpoints lack proper authentication mechanisms,
enabling at ...)
- TODO: check
+ NOT-FOR-US: Monta monta.app
CVE-2026-94594 (Armatura One's message broker logs client connection
credentials and t ...)
- TODO: check
+ NOT-FOR-US: Armatura LLC
CVE-2026-94593 (Armatura One's backup and restore routine records the full
database co ...)
- TODO: check
+ NOT-FOR-US: Armatura LLC
CVE-2026-94592 (Armatura One's database initialization routine assigns a
fixed, vendor ...)
- TODO: check
+ NOT-FOR-US: Armatura LLC
CVE-2026-94591 (Armatura One stores database and message-broker credentials in
an inst ...)
- TODO: check
+ NOT-FOR-US: Armatura LLC
CVE-2026-94539 (The SupportCandy \u2013 AI Customer Support Ticket System &
Live Chatb ...)
NOT-FOR-US: WordPress plugin
CVE-2026-94505 (The Nelio Content \u2013 Editorial Calendar & Social Media
Auto-Postin ...)
@@ -53,7 +53,7 @@ CVE-2026-93896 (The WPFront Notification Bar plugin for
WordPress is vulnerable
CVE-2026-93889 (The Mail logging \u2013 WP Mail Catcher plugin for WordPress
is vulner ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93474 (Charging station authentication identifiers are publicly
accessible vi ...)
- TODO: check
+ NOT-FOR-US: Monta monta.app
CVE-2026-93430 (The GD Rating System plugin for WordPress is vulnerable to
Stored Cros ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93428 (The Ultimate Member \u2013 User Profile, Registration, Login,
Member D ...)
@@ -101,27 +101,27 @@ CVE-2026-85568 (The Unlimited Elements for Elementor
WordPress plugin before 2.0
CVE-2026-85015 (The Unlimited Elements for Elementor WordPress plugin before
2.0.21 do ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84411 (The web management service in affected RouterOS versions
contains an i ...)
- TODO: check
+ NOT-FOR-US: MikroTik
CVE-2026-82045 (UTMStack before 11.2.16 contains a JPQL injection
vulnerability that a ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-82044 (UTMStack before 11.2.16 contains a server-side request forgery
vulnera ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-82043 (UTMStack before 11.2.16 contains an account enumeration
vulnerability ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-82042 (UTMStack before 11.2.16 contains an authentication bypass
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-82041 (UTMStack before 11.2.16 contains a missing authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-82040 (UTMStack before 11.2.16 contains a server-side request forgery
vulnera ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-82039 (UTMStack before 11.2.16 contains a SQL injection vulnerability
in UtmA ...)
- TODO: check
+ NOT-FOR-US: UTMStack
CVE-2026-80518 (The WP Ultimate CSV Importer WordPress plugin before 9.2 does
not use ...)
NOT-FOR-US: WordPress plugin
CVE-2026-80517 (The WP Ultimate CSV Importer WordPress plugin before 9.2 does
not pro ...)
NOT-FOR-US: WordPress plugin
CVE-2026-79113 (OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer
overflow ...)
- TODO: check
+ NOT-FOR-US: OpenAPV
CVE-2026-75937 (A specially crafted HTTP POST request to the web
administration interf ...)
NOT-FOR-US: Digi
CVE-2026-75028 (The WPCafe \u2013 Restaurant Menu, Online Food Ordering &
Table Bookin ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12e9a3f63d20d2d0e881a7ceb9d98c853ecd3303
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12e9a3f63d20d2d0e881a7ceb9d98c853ecd3303
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
