Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9a216f31 by security tracker role at 2026-10-31T19:15:06+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-96554 (The BuddyBoss Platform plugin for WordPress is vulnerable to
Stored Cr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-78192 (WebDyne versions from 2.022 before 3.022 for Perl disclose
application ...)
TODO: check
CVE-2026-78191 (WebDyne versions from 2.031 before 3.022 for Perl execute
files with . ...)
@@ -11,9 +11,9 @@ CVE-2026-78189 (WebDyne versions from 3.007 before 3.022 for
Perl execute .psp f
CVE-2026-78188 (WebDyne versions from 2.014 before 3.022 for Perl issue
session cookie ...)
TODO: check
CVE-2026-76010 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN
Gallery ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15272 (The Web 2.0 Directory plugin for WordPress is vulnerable to
time-based ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120210 (FFmpeg 5.0 through 9.0.2 contains a path traversal
vulnerability in th ...)
TODO: check
CVE-2026-120209 (AJ-Report through 1.7.1 signs share tokens with a hard-coded
JWT secre ...)
@@ -41,77 +41,77 @@ CVE-2026-120199 (LearnHouse before 1.1.1 contains a missing
authorization vulner
CVE-2026-120194 (A flaw was found in json-glib. The JSONPath slice evaluator
used by js ...)
TODO: check
CVE-2026-120114 (The Debug Log Manager \u2013 Conveniently Monitor and Inspect
Errors p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120075 (The WP Activity Log plugin for WordPress is vulnerable to
Stored Cross ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120070 (The User Frontend \u2013 Membership, User Registration, User
Profile, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119160 (The Smart Post \u2013 Post Grid, Post Carousel, Post Slider
Gutenberg ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119096 (The Uncanny Toolkit for LearnDash plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118235 (The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll
and Mult ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118147 (Improper certificate validation in Visual Studio allows an
unauthorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-118057 (The Shield Security \u2013 Smart Bot Blocking, Brute-Force
Login Prote ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-117681 (A flaw was found in konflux-ci. This vulnerability allows
privilege es ...)
TODO: check
CVE-2026-116964 (A flaw was found in konflux-ci. An attacker with repository
write acce ...)
TODO: check
CVE-2026-116752 (The GeoDirectory \u2013 WP Business Directory Plugin and
Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116535 (The SEOPress \u2013 AI SEO Plugin & On-site SEO plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116512 (The Project Manager \u2013 AI Powered Project Management,
Task Managem ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116086 (A flaw was found in konflux-ci. An attacker with permission
to trigger ...)
TODO: check
CVE-2026-114217 (A flaw was found in konflux-ci. Continuous Integration (CI)
automation ...)
TODO: check
CVE-2026-111592 (The Co-Authors, Multiple Authors and Guest Authors in an
Author Box wi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111070 (The Content Pilot \u2013 Autoblogging & Affiliate Marketing
Suite plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110530 (The FeedWordPress plugin for WordPress is vulnerable to
Stored Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110023 (The WP Data Access \u2013 App Builder for Tables, Forms,
Dashboards, C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109367 (The All in One SEO \u2013 AI SEO Plugin to Boost SEO Rankings
& Traffi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109231 (The Germanized for WooCommerce plugin for WordPress is
vulnerable to U ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109197 (The WP Directory Kit plugin for WordPress is vulnerable to
generic SQL ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107759 (The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress
is vulner ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107711 (The FlexStock \u2013 Product Stock Sync with Google Sheets
for WooComm ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104926 (The WooCommerce Extra Product Options Pro plugin for
WordPress is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104012 (The Rox Appointment Booking \u2013 Appointment Booking
Scheduling Solu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103997 (The Redux Framework plugin for WordPress is vulnerable to
authorizatio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103962 (The User Frontend \u2013 Membership, User Registration, User
Profile, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103915 (The Booking for Appointments and Events Calendar \u2013
Amelia plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103898 (The Wp Social Login and Register Social Counter plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103882 (The Acadlix LMS \u2013 AI Quiz Maker, Online Exam & Course
Plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102212 (Heap-based buffer overflow in Opengear IM72XX, CM71XX, and
ACM70XX fir ...)
- TODO: check
+ NOT-FOR-US: Digi
CVE-2026-101325 (The Newsletters plugin for WordPress is vulnerable to
time-based SQL I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100151 (The Ninja Forms \u2013 Contact Form Builder with Calculators,
Quizzes, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-9462 (The WP2LEADS plugin for WordPress is vulnerable to time-based
SQL Inje ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-11455 (The Perfect Images plugin for WordPress is vulnerable to
unauthorized ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-XXXX [GHSA-4pp3-6hmx-mfmg: Memory exhaustion DoS via crafted
QuickTime dref/elst/keys/stsd atoms in module.audio-video.quicktime.php]
- php-getid3 1.9.28+dfsg-1
NOTE:
https://github.com/JamesHeinrich/getID3/security/advisories/GHSA-4pp3-6hmx-mfmg
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a216f31da14fa1002fb52faf36e8b2be975618c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a216f31da14fa1002fb52faf36e8b2be975618c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
