Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fe3ddefa by security tracker role at 2026-11-07T19:15:27+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,33 +1,33 @@
CVE-2026-96565 (The WP-Members Membership Plugin plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-95870 (The wpForo Forum plugin for WordPress is vulnerable to generic
SQL Inj ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93766 (The Happyforms Pro plugin for WordPress is vulnerable to
Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93755 (The Happyforms plugin for WordPress is vulnerable to Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93429 (The VikBooking Hotel Booking Engine & PMS plugin for WordPress
is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-66669 (Cross-Site Request Forgery (CSRF) vulnerability in Suplugins
Superb Ad ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61990 (Missing Authorization vulnerability in WC Lovers WCFM
Membership wc-mu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-52713 (Missing Authorization vulnerability in ThimPress LearnPress
learnpress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-39733 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-124318 (Treeio through 2.0 contains an insecure deserialization
vulnerability ...)
TODO: check
CVE-2026-124317 (libexpat through 2.10.0 contains an out-of-bounds read
vulnerability i ...)
TODO: check
CVE-2026-124316 (Frappe ERPNext before 15.121.4 and 16.x before 16.36.0
contains a miss ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-124315 (Frappe ERPNext before 15.121.4 and 16.x before 16.36.0
contains a miss ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-124314 (Frappe ERPNext before 15.121.4 and 16.x before 16.36.0
contains a miss ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-124313 (Frappe ERPNext before 15.121.4 and 16.x before 16.36.0
contains a miss ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-124312 (Fraunhofer HHI VVdeC through 3.2.1 contains a heap
out-of-bounds read ...)
TODO: check
CVE-2026-124311 (Fraunhofer HHI VVdeC through 3.2.1 contains a NULL pointer
dereference ...)
@@ -41,295 +41,295 @@ CVE-2026-124308 (Fraunhofer HHI VVdeC before 3.2.1
contains a heap use-after-fre
CVE-2026-124307 (Fraunhofer HHI VVdeC before 3.2.1 contains a heap
use-after-free vulne ...)
TODO: check
CVE-2026-124274 (Missing Authorization vulnerability in myCred myCred mycred
allows Exp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-124258 (Missing Authorization vulnerability in ThemeGrill User
Registration us ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-124058 (A weakness has been identified in TOTOLINK CA300-PoE
6.2c.884. Affecte ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-124057 (A security flaw has been discovered in TOTOLINK CA300-PoE
6.2c.884. Th ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-123992 (A flaw has been found in DataEase up to 2.10.27. Affected by
this issu ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-123991 (A vulnerability was detected in DataEase up to 2.10.27.
Affected by th ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-123990 (A security vulnerability has been detected in DataEase up to
2.10.27/3 ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-123989 (A vulnerability was found in ESEngine DeepSeek-Reasonix up to
1.33.0. ...)
TODO: check
CVE-2026-123988 (A vulnerability has been found in SililaWijesinghe Food
Ordering Syste ...)
TODO: check
CVE-2026-123966 (A vulnerability was determined in Tenda AC19 16.03.10.07.
Affected by ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2026-123964 (A vulnerability was detected in OpenBMB Internet of Agents up
to 9d78e ...)
TODO: check
CVE-2026-123963 (A security vulnerability has been detected in OpenBMB
Internet of Agen ...)
TODO: check
CVE-2026-123961 (A security vulnerability has been detected in TOTOLINK
CA300-PoE 6.2c. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-123960 (A weakness has been identified in TOTOLINK CA300-PoE
6.2c.884. This af ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-123959 (A security flaw has been discovered in TOTOLINK CA300-PoE
6.2c.884. Th ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-123958 (A vulnerability was identified in TOTOLINK CA300-PoE
6.2c.884. The aff ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-123957 (A vulnerability was determined in TOTOLINK CA300-PoE
6.2c.884. Impacte ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-123881 (A vulnerability was found in OpenBMB Internet of Agents up to
9d78e88e ...)
TODO: check
CVE-2026-123861 (Authorization Bypass Through User-Controlled Key
vulnerability in Croc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123860 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123776 (RRD::CGI::Image versions through 0.01 for Perl pass CGI query
paramete ...)
TODO: check
CVE-2026-123483 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123477 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123474 (Missing Authorization vulnerability in LeapWorx Premium
Blocks \u2013 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123472 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123470 (Missing Authorization vulnerability in HivePress HivePress
hivepress a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123469 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123468 (Missing Authorization vulnerability in StylemixThemes Motors
motors-ca ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123467 (Missing Authorization vulnerability in StylemixThemes Motors
motors-ca ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123466 (Missing Authorization vulnerability in LeapWorx Premium
Blocks \u2013 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123464 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123462 (Missing Authorization vulnerability in myCred myCred mycred
allows Exp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123461 (Missing Authorization vulnerability in PluginUs.Net FOX
woocommerce-cu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123418 (The Church Admin plugin for WordPress is vulnerable to Stored
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-123183 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-123148 (Missing Authorization vulnerability in TMS IvyForms ivyforms
allows Ex ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122675 (Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp
Social wp- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122669 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122668 (Missing Authorization vulnerability in myCred myCred mycred
allows Exp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122663 (Missing Authorization vulnerability in VillaTheme CURCY
woo-multi-curr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122660 (Missing Authorization vulnerability in BAKKBONE Australia
FloristPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122659 (Missing Authorization vulnerability in WP ManageNinja LLC
Fluent Booki ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-122231 (The WS Form LITE \u2013 Drag & Drop Contact Form Builder
plugin for Wo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-122059 (The WP ImageViewer plugin for WordPress is vulnerable to
Stored DOM-Ba ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-122041 (The Checkout Field Editor for WooCommerce (Pro) plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-121977 (The JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin
for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-121976 (The Modula plugin for WordPress is vulnerable to Stored
Cross-Site Scr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-121784 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121783 (Cross-Site Request Forgery (CSRF) vulnerability in Passionate
Programm ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121781 (Missing Authorization vulnerability in WP ManageNinja LLC
Fluent Booki ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121779 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121778 (Missing Authorization vulnerability in WP Lab WP-Lister Lite
for Amazo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121777 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121775 (Missing Authorization vulnerability in VillaTheme CURCY
woo-multi-curr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121768 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121767 (Missing Authorization vulnerability in weDevs weDocs wedocs
allows Exp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121766 (Missing Authorization vulnerability in Blubrry Podcasting
PowerPress P ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121765 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121762 (Cross-Site Request Forgery (CSRF) vulnerability in Blubrry
Podcasting ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121761 (Missing Authorization vulnerability in Infomaniak Network VOD
Infomani ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121724 (Missing Authorization vulnerability in WebberZone Contextual
Related P ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121579 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121575 (Missing Authorization vulnerability in WP User Manager WP
User Manager ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121571 (Missing Authorization vulnerability in WP Desk Autopay dla
WooCommerce ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-121265 (SQL::Abstract versions before 2.000003 for Perl allow SQL
injection vi ...)
TODO: check
CVE-2026-120984 (A flaw was found in the Keycloak server's client management
component. ...)
TODO: check
CVE-2026-120857 (Missing Authorization vulnerability in VideoWhisper.com 2Way
VideoCall ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120853 (Missing Authorization vulnerability in Brainstorm Force
CartFlows cart ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120852 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120850 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120849 (Missing Authorization vulnerability in WC Lovers WCFM
Marketplace wc-m ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120848 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120847 (Missing Authorization vulnerability in Wpmet Metform metform
allows Ex ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120842 (Missing Authorization vulnerability in Brainstorm Force
SureForms sure ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120841 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120840 (Missing Authorization vulnerability in ThemeGrill User
Registration us ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120839 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120837 (Missing Authorization vulnerability in Everest Forms Everest
Forms eve ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120836 (Missing Authorization vulnerability in eLightUp Meta Box
\u2013 WordPr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120685 (The Real Testimonials \u2013 Testimonial Slider, Collect
Customer Revi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120683 (The Real Testimonials \u2013 Testimonial Slider, Collect
Customer Revi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120579 (The Active Woot Products Tables for WooCommerce. 100% FREE
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120548 (The YML for Yandex Market plugin for WordPress is vulnerable
to Sensit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120532 (The wpForo Forum plugin for WordPress is vulnerable to Stored
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120514 (The Zephyr Project Manager plugin for WordPress is vulnerable
to Store ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120509 (The Real Testimonials \u2013 Testimonial Slider, Collect
Customer Revi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120365 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-120364 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119525 (Missing Authorization vulnerability in WP Desk Dropshipping
XML for Wo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119523 (Missing Authorization vulnerability in Cozmoslabs Paid Member
Subscrip ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119522 (Missing Authorization vulnerability in ThemeGrill User
Registration us ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119520 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119513 (Missing Authorization vulnerability in Ahmad JS Help Desk
js-support-t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119511 (Missing Authorization vulnerability in Saeed MC Woocommerce
Wishlist s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119510 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119508 (Missing Authorization vulnerability in Mamunur Rashid Radius
Booking \ ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119507 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119502 (Missing Authorization vulnerability in BdThemes Ultimate
Store Kit Ele ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119501 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119500 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119498 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119496 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119494 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119493 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119492 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119491 (Missing Authorization vulnerability in David Lingren Media
LIbrary Ass ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119490 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119489 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119486 (Missing Authorization vulnerability in WP ManageNinja LLC
FluentBoards ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119484 (Cross-Site Request Forgery (CSRF) vulnerability in Supsystic
Photo Gal ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119478 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119473 (Improper Neutralization of Script-Related HTML Tags in a Web
Page (Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119467 (Missing Authorization vulnerability in WPVibes AnyWhere
Elementor anyw ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119465 (Insertion of Sensitive Information Into Sent Data
vulnerability in WPV ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119183 (The JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin
for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119164 (The wpForo Forum plugin for WordPress is vulnerable to
Privilege Escal ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119156 (The Download Manager plugin for WordPress is vulnerable to
Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119155 (The wpForo Forum plugin for WordPress is vulnerable to
time-based SQL ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119075 (The Registration Form for WooCommerce plugin for WordPress is
vulnerab ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118784 (The WPSpeed plugin for WordPress is vulnerable to Stored
Cross-Site Sc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118267 (The WP Data Access \u2013 App Builder for Tables, Forms,
Dashboards, C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118066 (The Appointment Booking Plugin \u2013 LatePoint | Calendar &
Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118056 (The Image Hover Effects Ultimate ( Image Gallery, Effects,
Lightbox, C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118050 (The Football Pool plugin for WordPress is vulnerable to
Stored Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118047 (The Falang multilanguage for WordPress plugin for WordPress
is vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116751 (The Booking for Appointments and Events Calendar \u2013
Amelia Pro plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116537 (The Link Library plugin for WordPress is vulnerable to Stored
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115548 (The Quttera ThreatSign \u2013 Web Malware Scanner for
WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111370 (The WP Visitor Statistics (Real Time Traffic) plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111317 (The JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin
for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110004 (The wpForo Forum plugin for WordPress is vulnerable to
arbitrary file ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109991 (The FunnelKit Payment Gateway for Stripe WooCommerce plugin
for WordPr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109973 (The Image Hover Effects Ultimate Visual Composer (Flipbox -
Awesomes F ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109230 (The WP Visitor Statistics (Real Time Traffic) plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109214 (The User Frontend \u2013 Membership, User Registration, User
Profile, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107616 (The Amelia plugin for WordPress is vulnerable to unauthorized
access o ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104992 (The Booking for Appointments and Events Calendar \u2013
Amelia plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104768 (The AutomatorWP \u2013 No-Code Workflow Automation,
Integration & Webh ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104760 (The weDocs: AI Powered Knowledge Base, Docs, Documentation,
Wiki & AI ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104746 (The Motors \u2013 Car Dealership & Classified Listings Plugin
plugin f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104738 (The Advanced Form Integration \u2014 Connect Forms to 300+
Apps plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104014 (The Naimur Email OTP Verification for WooCommerce plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103914 (The Dynific Addons for Elementor plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103900 (The WPJAM Basic plugin for WordPress is vulnerable to
Privilege Escala ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102564 (The The Dynific Addons for Elementor (formerly Anywhere
Elementor) plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-99280 (In the Linux kernel, the following vulnerability has been
resolved: k ...)
- linux 7.3.3-1
[trixie] - linux <not-affected> (Vulnerable code not present)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe3ddefaaf13ed69a06108c6ad551328a06ffb19
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe3ddefaaf13ed69a06108c6ad551328a06ffb19
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
