Recent changes
Records added, updated or removed by each recent sync. RSS feed
| Synced (UTC) | Change | CVE | Severity | Summary |
|---|---|---|---|---|
| 2026-10-23 06:19 | new | CVE-2026-94268 | Unscored | Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action |
| 2026-10-23 06:19 | new | CVE-2026-94267 | Unscored | Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action |
| 2026-10-23 06:19 | new | CVE-2026-94264 | Unscored | Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes |
| 2026-10-23 06:19 | new | CVE-2026-94262 | Unscored | Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action |
| 2026-10-23 06:19 | new | CVE-2026-113501 | Unscored | LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal |
| 2026-10-23 06:19 | new | CVE-2026-113500 | Unscored | LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display Optimization |
| 2026-10-23 06:19 | new | CVE-2026-113499 | Unscored | LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via CDN Inline CSS Rewriting |
| 2026-10-23 06:19 | new | CVE-2026-113472 | Unscored | Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload |
| 2026-10-23 06:19 | new | CVE-2026-112230 | Unscored | Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter |
| 2026-10-23 06:19 | new | CVE-2026-112219 | Unscored | Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route |
| 2026-10-23 06:19 | new | CVE-2026-111982 | Unscored | Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change |
| 2026-10-23 06:19 | new | CVE-2026-111966 | Unscored | Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute |
| 2026-10-23 06:19 | new | CVE-2026-111738 | Unscored | Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option |
| 2026-10-23 06:19 | new | CVE-2026-111737 | Unscored | Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists |
| 2026-10-23 06:19 | new | CVE-2026-110537 | Unscored | Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action |
| 2026-10-23 06:19 | new | CVE-2026-110510 | Unscored | Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag |
| 2026-10-23 06:19 | new | CVE-2026-109936 | Unscored | Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter |
| 2026-10-23 06:19 | new | CVE-2026-109935 | Unscored | Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API |
| 2026-10-23 06:19 | new | CVE-2026-109934 | Unscored | Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API |
| 2026-10-23 06:19 | new | CVE-2026-109933 | Unscored | Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes |
| 2026-10-23 05:49 | new | CVE-2026-107858 | High 7.2 | Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server |