Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dd577a3d by security tracker role at 2026-10-25T07:15:01+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-94295 (The Chikkili- Google Pay India for Woocommerce WordPress
plugin throug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89284
REJECTED
CVE-2026-116046 (A flaw has been found in eventcatalog sdk up to 2.29.0. This
vulnerabi ...)
@@ -29,37 +29,37 @@ CVE-2026-115982 (A vulnerability was detected in phpIPAM up
to 1.8.3. Affected b
CVE-2026-115981 (A security vulnerability has been detected in phpIPAM up to
1.8.3. Aff ...)
TODO: check
CVE-2026-115251 (The Duplicator WordPress plugin before 5.0.0 does not
restrict its on ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115214 (The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115183 (The Qi Addons For Elementor WordPress plugin before 1.11.2
does not pr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114743 (The InstaWP Connect WordPress plugin before 0.1.4.2 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114742 (The WPVR WordPress plugin before 9.0.3 does not perform
object-level ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114741 (The WPVR WordPress plugin before 9.0.3 does not perform
object-level ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114740 (The WPVR WordPress plugin before 9.1.3 does not correctly
check user ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111981 (The GiveWP WordPress plugin before 4.19.0.1 does not perform
a capabi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111980 (The GiveWP WordPress plugin before 4.19.0.1 does not
correctly determ ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111979 (The GiveWP WordPress plugin before 4.19.0.1 does not
properly sanitis ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111978 (The GiveWP WordPress plugin before 4.19.0.1 does not
properly validat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111976 (The GiveWP WordPress plugin before 4.19.0.1 does not perform
any stat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111326
REJECTED
CVE-2026-110285 (The WP Stripe Checkout WordPress plugin before 1.2.2.62 does
not verif ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109111
REJECTED
CVE-2025-15705 (The Contact Form by Supsystic WordPress plugin before 1.8.0
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94075 (Deserialization of Untrusted Data vulnerability in Tribulant
Software ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-116020 (BookStack before 26.09.2 contains an incorrect authorization
vulnerabi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd577a3df0de031b2736e5a37fc68b0cf920449f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd577a3df0de031b2736e5a37fc68b0cf920449f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
