Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fac94010 by security tracker role at 2026-10-11T07:12:34+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,577 @@
+CVE-2026-97853 (Memory Allocation with Excessive Size Value vulnerability in
ericmj de ...)
+ TODO: check
+CVE-2026-97183 (The WP-Invoice WordPress plugin through 4.3.1 does not
perform capabi ...)
+ TODO: check
+CVE-2026-96227 (The Piotnet Forms WordPress plugin through 1.0.30 does not
authenticat ...)
+ TODO: check
+CVE-2026-94235 (The MemberHero WordPress plugin through 6.9 does not perform
any capa ...)
+ TODO: check
+CVE-2026-93550 (The Veeqo for WooCommerce WordPress plugin through 2.2.8 does
not rest ...)
+ TODO: check
+CVE-2026-91829 (The Subscribe to Comments WordPress plugin before 2.3.3 does
not prope ...)
+ TODO: check
+CVE-2026-89305 (The paymendo WordPress plugin through 1.1 does not properly
sanitize ...)
+ TODO: check
+CVE-2026-89304 (The paymendo WordPress plugin through 1.1 does not properly
sanitize ...)
+ TODO: check
+CVE-2026-89302 (The Post Voting System WordPress plugin through 1.0 does not
properly ...)
+ TODO: check
+CVE-2026-89299 (The WP Verify API WordPress plugin through 1.0.0 does not
properly san ...)
+ TODO: check
+CVE-2026-89297 (The Loja Autom\xe1tica WordPress plugin through 1.0.0 does not
properl ...)
+ TODO: check
+CVE-2026-89287 (The ASPL Product Quotation WordPress plugin through 1.1.0 does
not san ...)
+ TODO: check
+CVE-2026-89285 (The Datalist it WordPress plugin through 0.0.3 does not
sanitize and e ...)
+ TODO: check
+CVE-2026-89283 (The WP Posts Password Batch Manager WordPress plugin through
1.1 does ...)
+ TODO: check
+CVE-2026-89234 (The WP-Partner WordPress plugin through 1.2.1 does not
sanitise and es ...)
+ TODO: check
+CVE-2026-89232 (The Recordbrowser WordPress plugin through 1.1.7 does not
sanitise and ...)
+ TODO: check
+CVE-2026-89214 (The WpCues Basic Quiz WordPress plugin through 1.6.5 does not
properly ...)
+ TODO: check
+CVE-2026-89213 (The Llavero.io WordPress plugin through 0.1.4 does not
properly saniti ...)
+ TODO: check
+CVE-2026-89195 (The Site Setup Wizard WordPress plugin through 1.5.8 does not
properly ...)
+ TODO: check
+CVE-2026-88930 (The Social Web Suite WordPress plugin through 4.1.12 does not
require ...)
+ TODO: check
+CVE-2026-88905 (The KeyWord Collector WordPress plugin through 1.4 does not
have any a ...)
+ TODO: check
+CVE-2026-88903 (The Topcontent WordPress plugin through 1.2.1 does not
properly author ...)
+ TODO: check
+CVE-2026-88827 (The Disable Users WordPress plugin through 1.0.5 does not
enforce its ...)
+ TODO: check
+CVE-2026-88826 (The SmugMug Embed WordPress plugin through 3.13 does not have
authoris ...)
+ TODO: check
+CVE-2026-88785 (The Simple Membership WordPress plugin before 4.8.3 does not
avoid tra ...)
+ TODO: check
+CVE-2026-87764 (The BuddyPress Instant Chat WordPress plugin through 1.6 does
not chec ...)
+ TODO: check
+CVE-2026-87762 (The Adwised Web Push Notification WordPress plugin through
2.5.7 does ...)
+ TODO: check
+CVE-2026-87761 (The Adwised Web Push Notification WordPress plugin through
2.5.7 does ...)
+ TODO: check
+CVE-2026-87760 (The Web Vitals Tracking WordPress plugin through 5.4.2 does
not valida ...)
+ TODO: check
+CVE-2026-86798 (The HootBoard WordPress plugin through 3.1.4 does not perform
any aut ...)
+ TODO: check
+CVE-2026-86717 (The Insurify WordPress plugin through 1.0 does not have
authorisation ...)
+ TODO: check
+CVE-2026-86706 (The Quick quotes WordPress plugin through 1.0.0 does not
perform any ...)
+ TODO: check
+CVE-2026-85126 (The Crowdfundly WordPress plugin through 2.2.2 does not have
capabilit ...)
+ TODO: check
+CVE-2026-85121 (The Insurify WordPress plugin through 1.0 does not have
authorisation ...)
+ TODO: check
+CVE-2026-85118 (The AI Content Generator Marketing WordPress plugin through
1.0.0 does ...)
+ TODO: check
+CVE-2026-84737 (The Freeton WP WordPress plugin through 1.0.0 does not
correctly valid ...)
+ TODO: check
+CVE-2026-84734 (The Mindstien Quick Login WordPress plugin through 1.0 does
not correc ...)
+ TODO: check
+CVE-2026-84261 (The click5 CRM add-on to Contact Form 7 WordPress plugin
through 1.0.4 ...)
+ TODO: check
+CVE-2026-84260 (The click5 CRM add-on to Gravity Forms WordPress plugin
through 1.0.3 ...)
+ TODO: check
+CVE-2026-84259 (The click5 CRM add-on to WPForms WordPress plugin through
1.0.3 does n ...)
+ TODO: check
+CVE-2026-84258 (The click5 CRM add-on to Ninja Forms WordPress plugin through
1.0.1 do ...)
+ TODO: check
+CVE-2026-84254 (The click5 CRM add-on to Contact Form 7 WordPress plugin
through 1.0.4 ...)
+ TODO: check
+CVE-2026-84253 (The click5 CRM add-on to Gravity Forms WordPress plugin
through 1.0.3 ...)
+ TODO: check
+CVE-2026-84252 (The click5 CRM add-on to WPForms WordPress plugin through
1.0.3 does n ...)
+ TODO: check
+CVE-2026-84251 (The click5 CRM add-on to Ninja Forms WordPress plugin through
1.0.1 do ...)
+ TODO: check
+CVE-2026-81797 (Unauthenticated PHP Object Injection in Buzz Stone | Magazine
& Viral ...)
+ TODO: check
+CVE-2026-81649 (The Fundiin cho WooCommerce WordPress plugin through 3.4.0
does not ha ...)
+ TODO: check
+CVE-2026-81420 (The Tcard WP WordPress plugin through 1.8.0 does not sanitise
and esca ...)
+ TODO: check
+CVE-2026-81156 (The Robo Gallery WordPress plugin before 5.2.6 does not
sanitise and ...)
+ TODO: check
+CVE-2026-81155 (The Robo Gallery WordPress plugin before 5.2.6 does not
sanitise and ...)
+ TODO: check
+CVE-2026-81154 (The Robo Gallery WordPress plugin before 5.2.6 does not
sanitise and ...)
+ TODO: check
+CVE-2026-81153 (The Robo Gallery WordPress plugin before 5.2.6 does not
sanitise and ...)
+ TODO: check
+CVE-2026-78535 (Unauthenticated PHP Object Injection in Photolia <= 1.0.3
versions.)
+ TODO: check
+CVE-2026-78534 (Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2
version ...)
+ TODO: check
+CVE-2026-78533 (Unauthenticated PHP Object Injection in Qwery <= 3.6.1
versions.)
+ TODO: check
+CVE-2026-78532 (Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3
versions.)
+ TODO: check
+CVE-2026-78531 (Unauthenticated PHP Object Injection in Jacqueline <= 2.22
versions.)
+ TODO: check
+CVE-2026-78530 (Subscriber Arbitrary File Deletion in FoodBakery <= 4.6
versions.)
+ TODO: check
+CVE-2026-78529 (Unauthenticated PHP Object Injection in Alliance <= 3.11
versions.)
+ TODO: check
+CVE-2026-66569 (Unauthenticated PHP Object Injection in Kicker <= 2.2.1
versions.)
+ TODO: check
+CVE-2026-66568 (Unauthenticated PHP Object Injection in Original <= 1.9.0
versions.)
+ TODO: check
+CVE-2026-66567 (Unauthenticated PHP Object Injection in Anesta <= 1.5.3
versions.)
+ TODO: check
+CVE-2026-66566 (Unauthenticated Local File Inclusion in Ambient <= 1.7
versions.)
+ TODO: check
+CVE-2026-66565 (Unauthenticated PHP Object Injection in FC United <= 1.1.1
versions.)
+ TODO: check
+CVE-2026-66564 (Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14
versions.)
+ TODO: check
+CVE-2026-66563 (Unauthenticated PHP Object Injection in Windsor <= 2.10
versions.)
+ TODO: check
+CVE-2026-66483 (Unauthenticated PHP Object Injection in Education Center <=
3.6.12 ver ...)
+ TODO: check
+CVE-2026-66482 (Unauthenticated PHP Object Injection in Drone Media <= 2.2.0
versions.)
+ TODO: check
+CVE-2026-66481 (Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1
versions.)
+ TODO: check
+CVE-2026-66480 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
+ TODO: check
+CVE-2026-65459 (Unauthenticated Arbitrary Content Deletion in Forminator <=
1.57.3 ver ...)
+ TODO: check
+CVE-2026-62130 (Shop manager PHP Object Injection in WooCommerce Multilingual
& Multic ...)
+ TODO: check
+CVE-2026-62129 (Contributor Arbitrary File Upload in Creator LMS <= 1.2.21
versions.)
+ TODO: check
+CVE-2026-62125 (Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1
versions.)
+ TODO: check
+CVE-2026-62124 (Unauthenticated PHP Object Injection in N7 | Golf Club Sports
& Events ...)
+ TODO: check
+CVE-2026-62123 (Unauthenticated PHP Object Injection in Invetex <= 2.18
versions.)
+ TODO: check
+CVE-2026-62120 (Unauthenticated PHP Object Injection in Law Office <= 3.20
versions.)
+ TODO: check
+CVE-2026-62118 (Unauthenticated Broken Access Control in Barcode Scanner with
Inventor ...)
+ TODO: check
+CVE-2026-62117 (Subscriber SQL Injection in Barcode Scanner with Inventory &
Order Man ...)
+ TODO: check
+CVE-2026-62116 (Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner
with Inv ...)
+ TODO: check
+CVE-2026-62115 (Unauthenticated Local File Inclusion in KuteShop <= 4.2.9
versions.)
+ TODO: check
+CVE-2026-62100 (Unauthenticated Cross Site Scripting (XSS) in KuteShop <=
4.2.9 versio ...)
+ TODO: check
+CVE-2026-62099 (Unauthenticated Local File Inclusion in Boutique <= 2.3.3
versions.)
+ TODO: check
+CVE-2026-62098 (Unauthenticated Content Injection in Boutique <= 2.3.3
versions.)
+ TODO: check
+CVE-2026-62096 (Unauthenticated Local File Inclusion in Biolife <= 3.2.3
versions.)
+ TODO: check
+CVE-2026-62095 (Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3
version ...)
+ TODO: check
+CVE-2026-62094 (Unauthenticated Local File Inclusion in TechOne <= 3.0.3
versions.)
+ TODO: check
+CVE-2026-62093 (Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3
version ...)
+ TODO: check
+CVE-2026-62092 (Unauthenticated Local File Inclusion in Armania <= 1.4.8
versions.)
+ TODO: check
+CVE-2026-62091 (Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8
version ...)
+ TODO: check
+CVE-2026-62090 (Unauthenticated PHP Object Injection in WineShop <= 3.20
versions.)
+ TODO: check
+CVE-2026-62087 (Unauthenticated PHP Object Injection in Equadio <= 1.1.4
versions.)
+ TODO: check
+CVE-2026-62086 (Unauthenticated PHP Object Injection in Juno <= 2.25 versions.)
+ TODO: check
+CVE-2026-62082 (Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0
versions.)
+ TODO: check
+CVE-2026-62077 (Unauthenticated PHP Object Injection in Avala <= 1.1.4
versions.)
+ TODO: check
+CVE-2026-62076 (Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1
versions.)
+ TODO: check
+CVE-2026-62075 (Unauthenticated Local File Inclusion in Backhoe <= 2.0
versions.)
+ TODO: check
+CVE-2026-62074 (Unauthenticated Local File Inclusion in Ozeum <= 1.3.0
versions.)
+ TODO: check
+CVE-2026-62070 (Unauthenticated Local File Inclusion in Flipmart <= 2.8
versions.)
+ TODO: check
+CVE-2026-62069 (Unauthenticated Local File Inclusion in Fabius <= 1.0
versions.)
+ TODO: check
+CVE-2026-62068 (Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.)
+ TODO: check
+CVE-2026-62067 (Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.)
+ TODO: check
+CVE-2026-62066 (Unauthenticated Local File Inclusion in Volos <= 1.2 versions.)
+ TODO: check
+CVE-2026-62065 (Unauthenticated Local File Inclusion in Cardea <= 2.3
versions.)
+ TODO: check
+CVE-2026-62064 (Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0
versions.)
+ TODO: check
+CVE-2026-62054 (Unauthenticated PHP Object Injection in Yacht Rental <= 2.6
versions.)
+ TODO: check
+CVE-2026-62053 (Unauthenticated PHP Object Injection in Wine House <= 3.20
versions.)
+ TODO: check
+CVE-2026-62052 (Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.)
+ TODO: check
+CVE-2026-62051 (Unauthenticated PHP Object Injection in Stargaze <= 1.10
versions.)
+ TODO: check
+CVE-2026-62050 (Unauthenticated PHP Object Injection in Splendour <= 1.23
versions.)
+ TODO: check
+CVE-2026-62043 (Unauthenticated Sensitive Data Exposure in Contact Form 7
\u2013 Dynam ...)
+ TODO: check
+CVE-2026-62038 (Unauthenticated Broken Authentication in eRoom <= 1.7.1
versions.)
+ TODO: check
+CVE-2026-62037 (Unauthenticated Cross Site Scripting (XSS) in Document
Embedder <= 2.4 ...)
+ TODO: check
+CVE-2026-62035 (Subscriber Broken Access Control in AWS S3 for WordPress
Plugin \u2013 ...)
+ TODO: check
+CVE-2026-62034 (Unauthenticated Cross Site Scripting (XSS) in Before After
Image Compa ...)
+ TODO: check
+CVE-2026-62033 (Subscriber Settings Change in uListing <= 2.2.0 versions.)
+ TODO: check
+CVE-2026-62032 (Unauthenticated Local File Inclusion in DirectoryPress <=
3.6.27 versi ...)
+ TODO: check
+CVE-2026-62031 (Unauthenticated SQL Injection in uListing <= 2.2.0 versions.)
+ TODO: check
+CVE-2026-62030 (Unauthenticated Server Side Request Forgery (SSRF) in
StreamCast <= 2. ...)
+ TODO: check
+CVE-2026-62027 (Unauthenticated Cross Site Scripting (XSS) in Team Section
Block <= 2. ...)
+ TODO: check
+CVE-2026-62025 (Unauthenticated Arbitrary File Upload in Tailored Tools <=
3.0.3 versi ...)
+ TODO: check
+CVE-2026-62024 (Subscriber Arbitrary File Upload in CodeBard Help Desk <=
1.1.2 versio ...)
+ TODO: check
+CVE-2026-62022 (Unauthenticated Privilege Escalation in Tonda Membership <=
1.0.1 vers ...)
+ TODO: check
+CVE-2026-62021 (Subscriber PHP Object Injection in Angio <= 1.1.1 versions.)
+ TODO: check
+CVE-2026-62020 (Unauthenticated Local File Inclusion in TouchUp < 1.4
versions.)
+ TODO: check
+CVE-2026-57742 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-48194 (Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0
versions.)
+ TODO: check
+CVE-2026-48193 (Unauthenticated Local File Inclusion in Uminex <= 1.0.9
versions.)
+ TODO: check
+CVE-2026-45440 (Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2
version ...)
+ TODO: check
+CVE-2026-42777 (Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.)
+ TODO: check
+CVE-2026-42724 (Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0
versions.)
+ TODO: check
+CVE-2026-42723 (Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0
versions.)
+ TODO: check
+CVE-2026-42722 (Administrator SQL Injection in Frontend Admin by DynamiApps <=
3.29.13 ...)
+ TODO: check
+CVE-2026-42719 (Subscriber PHP Object Injection in Dynamic User Directory <=
2.4 versi ...)
+ TODO: check
+CVE-2026-42718 (Unauthenticated PHP Object Injection in Booster for
WooCommerce <= 8.4 ...)
+ TODO: check
+CVE-2026-42717 (Administrator SQL Injection in Leyka <= 3.32.3 versions.)
+ TODO: check
+CVE-2026-42716 (Unauthenticated PHP Object Injection in Payever - WooCommerce
Gateway ...)
+ TODO: check
+CVE-2026-42715 (Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by
10Web < ...)
+ TODO: check
+CVE-2026-42712 (Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.)
+ TODO: check
+CVE-2026-42711 (Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web
<= 1.2.6 ...)
+ TODO: check
+CVE-2026-42709 (Unauthenticated Cross Site Scripting (XSS) in Food Menu \u2013
Restaur ...)
+ TODO: check
+CVE-2026-42706 (Unauthenticated Broken Access Control in DK <= 3.2.1 versions.)
+ TODO: check
+CVE-2026-42705 (Unauthenticated Broken Access Control in Grand News <= 3.4
versions.)
+ TODO: check
+CVE-2026-42704 (Unauthenticated Local File Inclusion in Kids Care <= 3.2.4
versions.)
+ TODO: check
+CVE-2026-42702 (Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <=
4.1.0 versi ...)
+ TODO: check
+CVE-2026-42699 (Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <=
8.1.8 ver ...)
+ TODO: check
+CVE-2026-42697 (Unauthenticated Cross Site Scripting (XSS) in Social Share
Icons & Soc ...)
+ TODO: check
+CVE-2026-42696 (Unauthenticated Remote Code Execution (RCE) in SiteVault
\u2013 Backup ...)
+ TODO: check
+CVE-2026-42693 (Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5
versions ...)
+ TODO: check
+CVE-2026-42633 (Subscriber SQL Injection in Events Manager <= 7.4.6 versions.)
+ TODO: check
+CVE-2026-42632 (Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate
<= 1.1. ...)
+ TODO: check
+CVE-2026-42631 (Unauthenticated Cross Site Scripting (XSS) in Qode Music <=
2.1.8.2 ve ...)
+ TODO: check
+CVE-2026-42630 (Unauthenticated Sensitive Data Exposure in Web Plura Backup
& Rest ...)
+ TODO: check
+CVE-2026-42419 (Unauthenticated Sensitive Data Exposure in Swish Migrate and
Backup <= ...)
+ TODO: check
+CVE-2026-40808 (Subscriber Broken Access Control in Jetpack VideoPress <= 3.6
versions ...)
+ TODO: check
+CVE-2026-40805 (Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4
versions.)
+ TODO: check
+CVE-2026-40803 (Unauthenticated Cross Site Scripting (XSS) in Jotform –
AI Chatb ...)
+ TODO: check
+CVE-2026-40802 (Subscriber Settings Change in Pubjet |
\u067e\u0627\u0628\u062c\u062a ...)
+ TODO: check
+CVE-2026-40801 (Subscriber Broken Access Control in Wordable <= 8.2.10
versions.)
+ TODO: check
+CVE-2026-40800 (Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk
Edit Produc ...)
+ TODO: check
+CVE-2026-40777 (Subscriber Broken Access Control in WPSection <= 1.5.1
versions.)
+ TODO: check
+CVE-2026-39802 (Unauthenticated Remote Code Execution (RCE) in Everest Backup
<= 2.3.1 ...)
+ TODO: check
+CVE-2026-39801 (Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.)
+ TODO: check
+CVE-2026-39800 (Unauthenticated Cross Site Scripting (XSS) in Additional Order
Filters ...)
+ TODO: check
+CVE-2026-39799 (Unauthenticated Cross Site Scripting (XSS) in WP File Download
<= 6.3. ...)
+ TODO: check
+CVE-2026-27350 (Server-Side Request Forgery (SSRF) vulnerability in
Builderius.io Buil ...)
+ TODO: check
+CVE-2026-14854 (The WooCommerce Bookings WordPress plugin before 3.11.0 does
not limit ...)
+ TODO: check
+CVE-2026-12980 (The Post Snippets WordPress plugin through 4.2.4 does not
properly es ...)
+ TODO: check
+CVE-2026-108708 (Wukong_HRM through commit 186115e contains a missing
authorization vul ...)
+ TODO: check
+CVE-2026-108707 (Wukong_HRM through commit 186115e contains an authentication
bypass vu ...)
+ TODO: check
+CVE-2026-108706 (eladmin through commit 55fbf70 contains a missing
authorization vulner ...)
+ TODO: check
+CVE-2026-108705 (CordysCRM through 1.9.3 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108704 (CordysCRM through 1.9.3 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-108703 (CordysCRM through 1.9.3 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108702 (1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING
permission ...)
+ TODO: check
+CVE-2026-108701 (1Panel-dev CordysCRM before 1.9.2 contains a missing
authorization vul ...)
+ TODO: check
+CVE-2026-108700 (1Panel-dev CordysCRM before 1.9.2 contains a missing
authorization vul ...)
+ TODO: check
+CVE-2026-108696 (CoreShop through 1.5.5 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-108695 (MultiVendorX WordPress plugin through 5.0.19 contains an
incorrect aut ...)
+ TODO: check
+CVE-2026-108694 (ConvertX through 0.19.0 contains an arbitrary file read
vulnerability ...)
+ TODO: check
+CVE-2026-108693 (ImageMagick on Windows through 7.1.2-33 and 6.9.13-58
contains an unco ...)
+ TODO: check
+CVE-2026-108692 (1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a
missing author ...)
+ TODO: check
+CVE-2026-108691 (mall4j through 4.0 contains an improper authorization
vulnerability th ...)
+ TODO: check
+CVE-2026-108690 (mall4j through 4.0 contains an information disclosure
vulnerability th ...)
+ TODO: check
+CVE-2026-108689 (Wukong AICRM through 20260610 contains a missing
authorization vulnera ...)
+ TODO: check
+CVE-2026-108688 (Eladmin through 2.7 contains a missing authorization
vulnerability in ...)
+ TODO: check
+CVE-2026-108680 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108679 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108678 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108677 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108676 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108675 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108674 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108673 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108672 (JeecgBoot through 3.9.5 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-108671 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108670 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108669 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108668 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108667 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108666 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108665 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108664 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108663 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108662 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108661 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108660 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108659 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108658 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108657 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108656 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108655 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108654 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108653 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108652 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108651 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108650 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108649 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108648 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108647 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108646 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108645 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108644 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108643 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108642 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108641 (JeecgBoot through 3.9.5 contains an insecure direct object
reference v ...)
+ TODO: check
+CVE-2026-108640 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108639 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108638 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108637 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108636 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108635 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108634 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108633 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108632 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108631 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108630 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108629 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108628 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108627 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108626 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108625 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108624 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108623 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108622 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108621 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108620 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108619 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108618 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108617 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108616 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108615 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108614 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108613 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108612 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108611 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108610 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108609 (JeecgBoot through 3.9.5 contains an insecure direct object
reference v ...)
+ TODO: check
+CVE-2026-108608 (JeecgBoot through 3.9.5 contains an insecure direct object
reference v ...)
+ TODO: check
+CVE-2026-108607 (JeecgBoot through 3.9.5 contains an insecure direct object
reference v ...)
+ TODO: check
+CVE-2026-108606 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108605 (JeecgBoot through 3.9.5 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-108604 (Tabularis through 0.27.0 contains an incorrect authorization
vulnerabi ...)
+ TODO: check
+CVE-2026-108603 (slide-maker through 5.8.0 contains a path traversal
vulnerability in g ...)
+ TODO: check
+CVE-2026-108602 (Helicone through v2025.08.21-1 contains a server-side request
forgery ...)
+ TODO: check
+CVE-2026-108541 (A vulnerability has been found in highwarden Super Store
Finder up to ...)
+ TODO: check
+CVE-2026-108540 (A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1.
This impacts ...)
+ TODO: check
+CVE-2026-108539 (A vulnerability was detected in GPAC up to 26.07.0. This
affects the f ...)
+ TODO: check
+CVE-2026-108538 (A security vulnerability has been detected in GPAC up to
26.07.0. The ...)
+ TODO: check
+CVE-2026-108523 (A vulnerability was determined in Studio-Saelix Sencho up to
0.94.1. T ...)
+ TODO: check
+CVE-2026-108522 (A vulnerability was found in Studio-Saelix Sencho up to
0.94.1. This a ...)
+ TODO: check
+CVE-2026-108521 (A vulnerability has been found in Studio-Saelix Sencho up to
0.97.1. A ...)
+ TODO: check
+CVE-2026-107694 (The Dokan: AI Powered WooCommerce Multivendor Marketplace
Solution Wo ...)
+ TODO: check
+CVE-2026-107507 (The Squadeno WordPress plugin before 1.12.0 does not enforce
its rest ...)
+ TODO: check
+CVE-2026-107434 (Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9
versions.)
+ TODO: check
+CVE-2026-107420 (Unauthenticated Bypass Vulnerability in Pay With MetaMask For
WooComme ...)
+ TODO: check
+CVE-2026-106029 (The WeddingCity Lite WordPress plugin through 1.0.4 does not
perform ...)
+ TODO: check
+CVE-2026-104841
+ REJECTED
+CVE-2026-104684 (The Envira Gallery WordPress plugin before 1.16.2 does not
verify tha ...)
+ TODO: check
+CVE-2026-104682 (The Envira Gallery WordPress plugin before 1.16.2 does not
correctly ...)
+ TODO: check
+CVE-2026-104681 (The Envira Gallery WordPress plugin before 1.16.2 does not
verify tha ...)
+ TODO: check
+CVE-2026-104680 (The Envira Gallery WordPress plugin before 1.16.2 does not
verify tha ...)
+ TODO: check
+CVE-2026-104028 (The Anton Extensions WordPress plugin through 1.2.2 does not
perform a ...)
+ TODO: check
+CVE-2026-103695 (The Mobile builder WordPress plugin through 1.4.2 does not
sanitise an ...)
+ TODO: check
+CVE-2026-103694 (The Mobile builder WordPress plugin through 1.4.2 does not
properly re ...)
+ TODO: check
+CVE-2026-103685 (Missing Authorization vulnerability in VillaTheme ALD \u2013
Dropshipp ...)
+ TODO: check
+CVE-2026-103305 (The Prenotazioni WordPress plugin through 1.7.5 does not have
authoris ...)
+ TODO: check
CVE-2026-97396 (The Email Marketing for WordPress and WooCommerce \u2013
Retainful plu ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97340 (The Avada | Website Builder For WordPress & WooCommerce theme
for Word ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fac9401039f1cb13b5e07735ff1603f18d0abdbb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fac9401039f1cb13b5e07735ff1603f18d0abdbb
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
