Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f9e5dc25 by security tracker role at 2026-10-10T07:13:47+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,127 +1,127 @@
CVE-2026-9696 (The Download Manager plugin for WordPress is vulnerable to
Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97670 (The Avada (Fusion) Builder plugin for WordPress is vulnerable
to autho ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97643 (The GiveWP \u2013 Donation Plugin and Fundraising Platform
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97630 (The FV Flowplayer Video Player plugin for WordPress is
vulnerable to S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97348 (The SiteOrigin Widgets Bundle plugin for WordPress is
vulnerable to Di ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96840 (The Post Grid Gutenberg Blocks \u2013 PostX plugin for
WordPress is vu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96743 (The Table Field Add-on for ACF and SCF plugin for WordPress is
vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96682 (The Presto Player plugin for WordPress is vulnerable to Stored
Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96667 (The Real Estate Manager \u2013 Property Listing and Agent
Management p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96648 (The Data Tables Generator by Supsystic plugin for WordPress is
vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96574 (The User Frontend \u2013 Membership, User Registration, User
Profile, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96572 (The WP Meteor Website Speed Optimization Addon plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96558 (The Quiz and Survey Master (QSM) \u2013 Quiz Maker & Survey
Maker plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-95684 (The VikBooking Hotel Booking Engine & PMS plugin for WordPress
is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94589 (The Extensions For CF7 (Contact form 7 Database, Conditional
Fields an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94538 (The WP File Download plugin for WordPress is vulnerable to
authorizati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94421 (The Church Admin plugin for WordPress is vulnerable to Stored
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94375 (The Order Export & Order Import for WooCommerce plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94257 (The SMS Alert WordPress plugin before 4.0.1 does not bind the
account ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94256 (The SMS Alert WordPress plugin before 4.0.1 does not verify
that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93883 (The Advanced Classifieds & Directory Pro plugin for WordPress
is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93775 (The Podlove Podcast Publisher plugin for WordPress is
vulnerable to St ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92975 (The Groundhogg \u2014 CRM, Newsletters, and Marketing
Automation plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92705 (Aegisub is a cross-platform advanced subtitle editor. From
3.2.0 to 3. ...)
TODO: check
CVE-2026-91862 (The Getwid \u2013 Gutenberg Blocks plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91050 (The Appointment Booking Plugin \u2013 LatePoint | Calendar &
Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89301 (The rtMedia for WordPress, BuddyPress and bbPress plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89100 (The Payment Plugins for Stripe WooCommerce plugin for
WordPress is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87869 (The Filter Everything \u2014 WordPress & WooCommerce Filters
plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87781 (The LTL Freight Quotes WordPress plugin before 4.2.19 does
not saniti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87780 (The LTL Freight Quotes WordPress plugin before 4.2.19 does
not saniti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85571 (The Tutor LMS WordPress plugin before 4.1.1 does not verify
that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-83526 (The FV Player 8 plugin for WordPress is vulnerable to
Arbitrary File U ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-78797 (An issue in iStoreOS istoreos-24.10.7 and before allows a
remote attac ...)
TODO: check
CVE-2026-78068 (The Table Field Add-on for ACF and SCF plugin for WordPress is
vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77183 (The FooSales \u2013 Point of Sale (POS) for WooCommerce plugin
for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-6723 (The Appointment Booking Calendar \u2014 Simply Schedule
Appointments B ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-6243 (The Frontend Admin by DynamiApps plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-62376 (Vikunja is an open-source self-hosted task management
platform. Versio ...)
TODO: check
CVE-2026-62367 (Vikunja is an open-source self-hosted task management
platform. In ver ...)
TODO: check
CVE-2026-5727 (The Hello Plus plugin for WordPress is vulnerable to
authorization byp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-5725 (The Favicon Rotator plugin for WordPress is vulnerable to
Reflected Cr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-57458 (Vikunja is an open-source self-hosted task management
platform. In ver ...)
TODO: check
CVE-2026-3717 (The CV Builder \u2013 Professional Resume Builder SaaS plugin
for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-22061 (Trident versions v25.02.1 through v26.06.1 are susceptible to
a vulner ...)
- TODO: check
+ NOT-FOR-US: NetApp
CVE-2026-18558 (The Embed Any Document \u2013 Embed PDF, Word, PowerPoint and
Excel Fi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18524
REJECTED
CVE-2026-18496 (The Booking Calendar plugin for WordPress is vulnerable to
Sensitive I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17025 (The Graphene theme for WordPress is vulnerable to Stored
Cross-Site Sc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16776 (The MP3 Audio Player \u2013 Music Player, Podcast Player &
Radio by So ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16681
REJECTED
CVE-2026-15178 (The Fluent Forms plugin for WordPress is vulnerable to
authorization b ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14882 (The Brizy \u2013 Page Builder plugin for WordPress is
vulnerable to St ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14877 (The Data Tables Generator by Supsystic plugin for WordPress is
vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14379 (The GamiPress \u2013 Gamification plugin to reward points,
achievement ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14335 (The Easy Digital Downloads \u2013 eCommerce Payments and
Subscriptions ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12626 (The Online Scheduling and Appointment Booking System \u2013
Bookly plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12054 (The Download Manager plugin for WordPress is vulnerable to
Reflected C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108503 (ZTE Z80 Ultra has an interface permission validation
vulnerability. Th ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-108502 (ZTE Z80 Ultra contains an information disclosure
vulnerability, throug ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-108501 (ZTE Z80 Ultra has a system interface permission verification
defect. T ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-108474 (In JetBrains Exposed before 1.5.1 sQL injection was possible
via unesc ...)
- TODO: check
+ NOT-FOR-US: JetBrains
CVE-2026-108269 (Remote Attestation TLS Clients provides multi-language
utilities for v ...)
TODO: check
CVE-2026-108268 (Enclave OS Virtual runs container workloads inside
confidential virtua ...)
@@ -167,109 +167,109 @@ CVE-2026-107843 (Contao is an Open Source CMS. From
version 4.1.0 until 5.3.50 a
CVE-2026-107842 (Contao is an Open Source CMS. From version 4.0.0 until 5.3.50
and 5.7. ...)
TODO: check
CVE-2026-107742 (The 10Web Booster \u2013 Website speed optimization, Cache &
Page Spee ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107712 (The WP Booking System \u2013 Booking Calendar plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107645 (The Blocksy Companion plugin for WordPress is vulnerable to
privilege ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107323 (The Gallery PhotoBlocks WordPress plugin before 1.3.6 does
not sanitiz ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107321 (The W3 Total Cache WordPress plugin before 2.10.6 does not
confine a m ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107120 (The Contest Gallery WordPress plugin before 33.0.1 does not
limit the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105995 (The Booking Package WordPress plugin before 1.7.30 does not
perform au ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105990 (The Accept PayPal Payments using Contact Form 7 WordPress
plugin befor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105989 (The Accept PayPal Payments using Contact Form 7 WordPress
plugin befor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105977 (The Portfolio Filter Gallery WordPress plugin before 2.2.1
does not p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105976 (The Portfolio Filter Gallery WordPress plugin before 2.2.1
does not p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104993 (The GeoDirectory \u2013 WP Business Directory Plugin and
Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104915 (The Academy LMS \u2013 AI Course Builder, Quizzes,
Certificates & eLea ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104899 (The GeoDirectory \u2013 WP Business Directory Plugin and
Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104898 (The Online Scheduling and Appointment Booking System \u2013
Bookly plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104801 (The PPOM \u2013 Product Addons & Custom Fields for
WooCommerce plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104797 (The Advanced Form Integration \u2014 Connect Forms to 300+
Apps plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104766 (The Appointment Booking Plugin \u2013 LatePoint | Calendar &
Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104763 (The Post Export Import with Media plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104762 (The Kadence Blocks \u2014 Page Builder Toolkit for Gutenberg
Editor pl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104758
REJECTED
CVE-2026-104754 (The Rank Math SEO WordPress plugin before 1.0.280 does not
escape a s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104753 (The Rank Math SEO WordPress plugin before 1.0.280 does not
properly s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104752 (The Rank Math SEO WordPress plugin before 1.0.280 does not
correctly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104742 (The AI Puffer \u2013 Chat. Create. Automate. (formerly AI
Power) plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104741 (The AI Puffer \u2013 Chat. Create. Automate. (formerly AI
Power) plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104735 (The RSS Aggregator by Feedzy \u2013 Feed to Post,
Autoblogging, News & ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104732 (The Advanced IP Blocker plugin for WordPress is vulnerable to
Authenti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104725 (The Groundhogg \u2014 CRM, Newsletters, and Marketing
Automation plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104724 (The FireBox \u2013 WooCommerce Popup Builder, Exit Intent
Popup, Email ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104723 (The LifterLMS \u2013 WP LMS for eLearning, Online Courses, &
Quizzes p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104023 (The Smart Popup by Supsystic plugin for WordPress is
vulnerable to gen ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104022 (The Academy LMS \u2013 AI Course Builder, Quizzes,
Certificates & eLea ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104021 (The Fastcache by Host.it plugin for WordPress is vulnerable
to Code In ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104006 (The SpeedyCache \u2013 Cache, Optimization, Performance
plugin for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103998 (The Form Maker by 10Web \u2013 Mobile-Friendly Drag & Drop
Contact For ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103964 (The Download Manager plugin for WordPress is vulnerable to
Sensitive I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103912 (The JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin
for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103897 (The Responsive Lightbox & Gallery plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103889 (The 3D Product configurator for WooCommerce plugin for
WordPress is vu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103755
REJECTED
CVE-2026-103520 (The HivePress \u2013 Business Directory, Listings &
Classified Ads Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103482 (The Simple Newsletter Plugin \u2013 Noptin plugin for
WordPress is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103427 (The Simple Membership plugin for WordPress is vulnerable to
Stored Cro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103424 (The Anti-Spam by CleanTalk \u2013 Spam Protection Without
CAPTCHA plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103365 (The Bookly \u2013 Online Scheduling and Appointment Booking
System plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102402 (The Team \u2013 Team Members Showcase Plugin plugin for
WordPress is v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102401 (The Download Manager plugin for WordPress is vulnerable to
Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101947 (ExifTool for photo and video 5.0.1-gms by CellHubs constructs
shell co ...)
TODO: check
CVE-2026-101324 (The Fluent Forms \u2013 Customizable Contact Forms, Survey,
Quiz, & Co ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100196 (The LazyLoad Plugin \u2013 Lazy Load Images, Videos, and
Iframes plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100161 (The Photo Reviews for WooCommerce plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-8457
REJECTED
CVE-2026-97791 (In Apache CXF, STSTokenValidator checks whether a SAML
assertion is si ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9e5dc250849d8746dd2814fd0f210b47c676450
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9e5dc250849d8746dd2814fd0f210b47c676450
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
