Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f01174ad by security tracker role at 2026-10-16T07:15:36+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,79 +1,79 @@
CVE-2026-97640 (The WPConsent \u2013 Cookie Banner & Cookie Consent for
Privacy Compli ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97339 (The Complianz GDPR/CCPA Cookie Consent Banner plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97296 (Deserialization of Untrusted Data vulnerability in
Rocketgenius, Inc G ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96806 (The Apache Airflow Keycloak auth manager did not end the
session on lo ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-96570 (The Schema & Structured Data for WP & AMP plugin for WordPress
is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96562 (The The Broken Link Checker plugin for WordPress is vulnerable
to arbi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96339 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95809 (The Opti-Behavior \u2013 Self-Hosted Heatmaps, Session
Recordings, Fun ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-95686 (The Opti-Behavior \u2013 Self-Hosted Heatmaps, Session
Recordings, Fun ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94388 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94169 (Improper Control of Generation of Code ('Code Injection')
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94135 (The Apache Airflow SFTP provider's deferrable code paths
(`SFTPTrigger ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-94134 (The Apache Airflow SSH provider hook disables SSH host-key
verificatio ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-93953 (The Backuply \u2013 Backup, Restore, Migrate and Clone plugin
for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93767 (The Tainacan plugin for WordPress is vulnerable to Directory
Traversal ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93535 (The Dark Mode \u2013 Improve Accessibility with AI Powered
Dark Theme ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92777 (A potential vulnerability was reported in some Lenovo Tablets
that cou ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-92629 (A potential improper authorization vulnerability was reported
in Lenov ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-92553 (The YaySMTP \u2013 WP Mail SMTP with Email Logs, Tracking &
Reports pl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92427 (The Coinsnap Bitcoin Crowdfunding WordPress plugin through
1.2.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92228 (The Apache Airflow Keycloak provider's multi-team provisioning
(`_atta ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-92115 (The WP Photo Album Plus plugin for WordPress is vulnerable to
authenti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91833 (The WX Subscribe
\u5fae\u4fe1\u652f\u4ed8\u4ed8\u8d39\u8ba2\u9605 Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91830 (The Subscribe to Comments WordPress plugin before 2.3.3 does
not sign ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-8311
REJECTED
CVE-2026-89280 (The Dokan: AI Powered WooCommerce Multivendor Marketplace
Solution \u2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89079 (The Theme My Login plugin for WordPress is vulnerable to
privilege esc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89062 (A potential out-of-bounds write vulnerability was reported in
the Leno ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-89057 (A potential authentication bypass vulnerability was reported
in some L ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-89051 (The WP Ghost (Hide My WP Ghost) \u2013 Security & Firewall
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88963 (The Tutor LMS \u2013 eLearning and online course solution
plugin for W ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85659 (The PilotPress plugin for WordPress is vulnerable to Privilege
Escalat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84823 (A flaw was found in WildFly. A user with the `Monitor` role,
which is ...)
TODO: check
CVE-2026-77829 (The Cooked \u2013 Recipe Management plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-75941 (A potential vulnerability was reported in the Lenovo Legion
Zone appli ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-74923 (The Document Gallery WordPress plugin through 5.1.1 does not
perform a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-5819
REJECTED
CVE-2026-45165 (An authorization flaw in Idira Conjur version 13.9.0 allows an
authent ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2026-36436 (An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP
credenti ...)
TODO: check
CVE-2026-2937
@@ -81,7 +81,7 @@ CVE-2026-2937
CVE-2026-19867 (Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1,
11.8.x <= 11 ...)
TODO: check
CVE-2026-19798 (The Wp Map Block plugin for WordPress is vulnerable to
unauthorized mo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19603 (Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x
<= 11.7 ...)
TODO: check
CVE-2026-19601 (Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x
<= 11.7 ...)
@@ -93,13 +93,13 @@ CVE-2026-18795 (Mattermost versions 11.10.x <= 11.10.0,
11.7.x <= 11.7.9, 11.9.x
CVE-2026-18551 (Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9,
11.9.x <= 11 ...)
TODO: check
CVE-2026-16755 (A potential vulnerability was reported in Lenovo Smart Camera
C33, dis ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-16754 (A potential improper certificate validation vulnerability was
reported ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-15222 (The The User Registration & Membership \u2013 Free & Paid
Memberships, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12272 (The Lightweight Cookie Notice \u2013 Cookie Banner for Cookie
Consent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111458 (The fanx_fingerprint function in ssl/sslxprint.c of ssldump
allocates ...)
TODO: check
CVE-2026-111451 (Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or
escapes cal ...)
@@ -123,9 +123,9 @@ CVE-2026-111443 (Wheels 4.0.6 through 4.1.2 lets an
unauthenticated client switc
CVE-2026-111442 (Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before
1.34.6 does n ...)
TODO: check
CVE-2026-111389 (Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and
16.x before ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-111388 (Frappe Framework before 15.120.0 and 16.x before 16.33.0 does
not enfo ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-111387 (Nezha from 2.2.5 before 2.3.15 contains an information
disclosure vuln ...)
TODO: check
CVE-2026-111386 (Nezha from 1.7.0 before 2.3.15 contains an information
disclosure vuln ...)
@@ -175,7 +175,7 @@ CVE-2026-111359 (CRMEB 5.6.1 through 6.0.0 contains an
insecure direct object re
CVE-2026-111358 (SendPortal sendportal-core through 4.0.1 contains an
authorization byp ...)
TODO: check
CVE-2026-111357 (Ivanti Connect Secure 22.8R2.4 mishandles the manner in which
the dsin ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-111356 (MacCMS v10 through 2026.1000.4056 does not limit attempts on
the six-d ...)
TODO: check
CVE-2026-111355 (zhontai Admin.Core through 10.1.0 contains an authorization
bypass vul ...)
@@ -263,15 +263,15 @@ CVE-2026-111212 (A security flaw has been discovered in
ImprintLab Medical-SAM-A
CVE-2026-111210 (A vulnerability was determined in bitcoinj up to 0.17.
Affected is the ...)
TODO: check
CVE-2026-111178 (The WP Booking System \u2013 Booking Calendar plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111122 (The SiteOrigin CSS plugin for WordPress is vulnerable to
Stored DOM-Ba ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111114 (The Nexter Extension \u2013 Security, Performance, Code
Snippets & Sit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111106 (The Mail Mint plugin for WordPress is vulnerable to SQL
Injection via ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111069 (The GeoDirectory \u2013 WP Business Directory Plugin and
Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110922 (Use after free in Prerender in Google Chrome prior to
155.0.8059.84 al ...)
TODO: check
CVE-2026-110921 (Use after free in V8 in Google Chrome prior to 155.0.8059.84
allowed a ...)
@@ -293,159 +293,159 @@ CVE-2026-110914 (Memory corruption in Workers in Google
Chrome prior to 155.0.80
CVE-2026-110913 (Memory corruption in DOM in Google Chrome prior to
155.0.8059.84 allow ...)
TODO: check
CVE-2026-110721 (The NotificationX plugin for WordPress is vulnerable to
Missing Author ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110701 (The CP Multi View Events Calendar plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110664 (The Premium Packages \u2013 Sell Digital Products Securely
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110590 (The Klarna for WooCommerce plugin for WordPress is vulnerable
to autho ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110366 (Missing Authorization vulnerability in Gemini Labs Site
Reviews site-r ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-110290 (The WebberZone Top 10 \u2014 Popular Posts plugin for
WordPress is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110252 (The WPeMatico RSS Feed Fetcher plugin for WordPress is
vulnerable to S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110191 (The Product Delivery Date for WooCommerce WordPress plugin
before 3.3 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110179 (The affiliate-toolkit WordPress plugin before 3.8.9 does not
validate ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110135 (The OTP Login & Register Woocommerce WordPress plugin before
2.7.3 doe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110039 (The Smush WordPress plugin before 4.3.4 does not restrict
changes to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110019 (The Bulk Page Generator \u2013 LPagery plugin for WordPress
is vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110017 (The Quick PayPal Payments: Payment Button & Form plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110015 (The Salon Booking System WordPress plugin before 10.31.9
does not cor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110014 (The Salon Booking System WordPress plugin before 10.31.9
does not pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110013 (The Salon Booking System WordPress plugin before 10.31.9
does not gen ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110012 (The Salon Booking System WordPress plugin before 10.31.3
does not res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109998 (The Mang Board plugin for WordPress is vulnerable to Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109990 (The Flying Scripts: Delay JavaScript to Improve Site Speed &
Performan ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109982 (The MB Custom Post Types & Custom Taxonomies WordPress plugin
before 2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109813 (A hard-coded cryptographic key vulnerability exists in the
`/usr/bin/s ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-109812 (A missing authorization vulnerability exists in the internal
API `/api ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-109515 (The MailOptin \u2013 Popup, Optin Forms & Email Newsletters
for Mailch ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109513 (The NotificationX \u2013 FOMO, Live Sales Notification,
WooCommerce Sa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109512 (The Mang Board plugin for WordPress is vulnerable to Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109468 (Allocation of resources without limits or throttling in
ASP.NET Core a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-109447 (The User Profile Builder \u2013 Beautiful User Registration
Forms, Use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109414 (The Vitepos \u2013 Point of Sale (POS) for WooCommerce plugin
for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109401 (The WP Mail Logging plugin for WordPress is vulnerable to
Sensitive In ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109400 (The InstaWP Connect \u2013 1-click WP Staging & Migration
plugin for W ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109388 (The HivePress \u2013 Business Directory, Listings &
Classified Ads Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109382 (The WSP MCP AI Agents Connector plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109232 (The Salon Booking System \u2013 Appointment Booking for
Salons, Barber ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109221 (The Groundhogg \u2014 CRM, Newsletters, and Marketing
Automation plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109219 (The Mang Board plugin for WordPress is vulnerable to
Arbitrary File Up ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109207 (The RSS Aggregator by Feedzy \u2013 Feed to Post,
Autoblogging, News & ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109193 (The HivePress \u2013 Business Directory, Listings &
Classified Ads Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109191 (The Image Hub \u2013 Free Images from Unsplash, Pixabay,
Pexels, Openv ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108455 (Out-of-bounds read in Microsoft Office PowerPoint allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108454 (Buffer over-read in Microsoft Office PowerPoint allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108453 (Out-of-bounds read in Microsoft Office PowerPoint allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108452 (Improper limitation of a pathname to a restricted directory
('path tra ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108451 (Numeric truncation error in Microsoft Office Word allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108450 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108449 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108448 (Heap-based buffer overflow in Microsoft Office Outlook allows
an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108447 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108446 (Use after free in Microsoft Office Excel allows an
unauthorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108445 (Stack-based buffer overflow in Microsoft Office Word allows
an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108444 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108443 (Off-by-one error in Microsoft Office Word allows an
unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108442 (Use after free in Microsoft Office Word allows an
unauthorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108441 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108440 (Stack-based buffer overflow in Microsoft Office Word allows
an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108439 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108438 (Use after free in Microsoft Office Word allows an
unauthorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108437 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108436 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108435 (Untrusted pointer dereference in Microsoft Office Word allows
an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108434 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108433 (Reliance on untrusted inputs in a security decision in
Microsoft Offic ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108432 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108431 (Stack-based buffer overflow in Microsoft Office Word allows
an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108430 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108429 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108428 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108427 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108426 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108126 (temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted
payloads to ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-107770 (The Photo Engine (Media Organizer & Lightroom) plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107768 (The TranslatePress \u2013 Translate Multilingual sites with
AI Transla ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107764 (The SiteOrigin CSS plugin for WordPress is vulnerable to
Stored DOM-Ba ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107758 (The Colibri Page Builder plugin for WordPress is vulnerable
to Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107748 (The User Profile Builder \u2013 Beautiful User Registration
Forms, Use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107746 (The FunnelKit \u2013 Funnel Builder for WooCommerce Checkout
plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107659 (The Modula Image Gallery \u2013 Photo Grid & Video Gallery
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107646 (The HUSKY \u2013 Products Filter for WooCommerce Professional
plugin f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107316
REJECTED
CVE-2026-107172
@@ -455,13 +455,13 @@ CVE-2026-106708 (XXL-JOB 3.5.0-SNAPSHOT and earlier
contains a Cross-Site Reques
CVE-2026-106700 (ELADMIN v2.7 and earlier contains an improper access control
vulnerabi ...)
TODO: check
CVE-2026-105974 (The Visual Form Builder WordPress plugin through 3.1 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105973 (The Visual Form Builder WordPress plugin through 3.1 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105228 (This vulnerability allows remote attackers to disclose
sensitive infor ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2026-105227 (This vulnerability allows remote attackers to disclose
sensitive infor ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2026-105040 (The EnergizeLab Eilik NestJS auth service accepts a
user-controlled us ...)
TODO: check
CVE-2026-105039 (EnergizeLab station-middleware (NestJS) Docker images 1.6.5
through 1. ...)
@@ -481,55 +481,55 @@ CVE-2026-105033 (The EnergizeLab AI Station (RK3562)
firmware image ships with d
CVE-2026-105032 (The EnergizeLab Eilik and EilikO AI skill upload endpoint,
served by t ...)
TODO: check
CVE-2026-104932 (The Search Regex plugin for WordPress is vulnerable to PHP
Object Inje ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104798 (The My Calendar \u2013 Accessible Event Manager plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104769 (The Debloat \u2013 Remove Unused CSS, Optimize JS plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104755 (The WP Compress \u2013 Instant Performance & Speed
Optimization plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104745 (The Customer Email Verification for WooCommerce plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104730 (The Sunshine Photo Cart \u2013 Client Photo Gallery & Photo
Proofing f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104198 (ZoneMinder is a free, open source closed-circuit television
software a ...)
TODO: check
CVE-2026-104001 (The The Slim SEO \u2013 AI SEO Plugin, Lightweight, Fast &
Automated p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104000 (The Simply Schedule Appointments plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103999 (The Ultra Addons for Contact Form 7 plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103911 (The The Forminator Forms \u2013 Contact Form, Payment Form &
Custom Fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103910
REJECTED
CVE-2026-103896 (The 10Web Booster \u2013 Website speed optimization, Cache &
Page Spee ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103895 (The miniOrange OTP Login, Verification and SMS Notifications
plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103768 (The ELEX WordPress HelpDesk & Customer Ticketing System
plugin for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103696 (The Mobile builder WordPress plugin through 1.4.2 does not
sanitise an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103525 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter,
and Simp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103518 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter,
and Simp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103481 (The Gwolle Guestbook plugin for WordPress is vulnerable to
Reflected C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103480 (The Tourfic \u2013 AI Powered Travel Booking, Hotel Booking &
Car Rent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102764 (The vulnerability exists within internal components of
BeyondTrust\u20 ...)
- TODO: check
+ NOT-FOR-US: BeyondTrust
CVE-2026-101335 (The Forminator Forms \u2013 Contact Form, Payment Form &
Custom Form B ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100186 (The User Profile Builder \u2013 Beautiful User Registration
Forms, Use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100159 (The Popup Box plugin for WordPress is vulnerable to Arbitrary
Shortcod ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100158 (The SQL Chart Builder plugin for WordPress is vulnerable to
Stored Cro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-3778
REJECTED
CVE-2024-58397 (MP4v2 through 2.1.3 contains a heap-based out-of-bounds read
in MP4Fil ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f01174ad39d60da2d0b8f57918a3106bfb6708cf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f01174ad39d60da2d0b8f57918a3106bfb6708cf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
