CyberStack

NIST

CVE intelligence

Cached from NVD. 2026-10-26 03:40 Perth time (AWST). Recent.

1756KEV listed
209Published, last 14 days
654Critical
981High
CVETitleVendorPublishedCVSSKEV listed
CVE-2026-106029The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and m—2026-10-11—
CVE-2026-104684The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing —2026-10-11—
CVE-2026-104682The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that t—2026-10-11—
CVE-2026-104681The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment t—2026-10-11—
CVE-2026-104680The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira —2026-10-11—
CVE-2026-104028The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation befor—2026-10-11—
CVE-2026-103695The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unau—2026-10-11—
CVE-2026-103694The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of—2026-10-11—
CVE-2026-103305The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape so—2026-10-11—

Previous201–209 of 209