Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-107757 |
4.9 (3.1)
|
Gallery Custom Links <= 2.3.3 - Authenticated (Subscri… |
tigroumeow |
Gallery Custom Links |
2026-10-14T07:43:36.794Z | 2026-10-14T07:43:36.794Z |
| CVE-2026-104909 |
8.1 (3.1)
|
Mang Board <= 2.4.3 - Unauthenticated Local File Inclu… |
kitae-park |
Mang Board |
2026-10-14T07:43:36.462Z | 2026-10-14T07:43:36.462Z |
| CVE-2026-104764 |
7.2 (3.1)
|
Post Export Import with Media <= 1.17.1 - Authenticate… |
wpazleen |
Post Export Import with Media |
2026-10-14T07:43:36.131Z | 2026-10-14T07:43:36.131Z |
| CVE-2026-104748 |
9.8 (3.1)
|
SimpleForm <= 3.10.0 - Unauthenticated Privilege Escal… |
wpazleen |
SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications |
2026-10-14T07:43:35.763Z | 2026-10-14T07:43:35.763Z |
| CVE-2026-107650 |
6.4 (3.1)
|
GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) … |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-14T07:43:35.373Z | 2026-10-14T07:43:35.373Z |
| CVE-2026-103907 |
6.5 (3.1)
|
Jeg Kit for Elementor <= 3.2.19 - Missing Authorizatio… |
jegtheme |
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress |
2026-10-14T07:43:35.022Z | 2026-10-14T07:43:35.022Z |
| CVE-2026-107631 |
7.2 (3.1)
|
Record of Consent Extension for Complianz <= 2.5 - Una… |
davidevalerio |
Record of Consent Extension for Complianz |
2026-10-14T07:43:34.674Z | 2026-10-14T07:43:34.674Z |
| CVE-2026-107751 |
7.2 (3.1)
|
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Sit… |
kitae-park |
Mang Board |
2026-10-14T07:43:34.349Z | 2026-10-14T07:43:34.349Z |
| CVE-2026-107756 |
6.4 (3.1)
|
Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) S… |
tigroumeow |
Meow Lightbox |
2026-10-14T07:43:33.999Z | 2026-10-14T07:43:33.999Z |
| CVE-2026-104761 |
6.4 (3.1)
|
Mang Board <= 2.4.3 - Authenticated (Custom+) Stored C… |
kitae-park |
Mang Board |
2026-10-14T07:43:33.581Z | 2026-10-14T07:43:33.581Z |
| CVE-2026-110284 |
7.5 (3.1)
|
LifterLMS <= 10.3.1 - Authenticated (Contributor+) Loc… |
lifterlms |
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes |
2026-10-14T07:43:33.249Z | 2026-10-14T07:43:33.249Z |
| CVE-2026-103367 |
8.1 (3.1)
|
ShopMagic <= 4.9.0 - Unauthenticated Local File Inclus… |
wpdesk |
ShopMagic – email automation for WordPress |
2026-10-14T07:43:32.923Z | 2026-10-14T07:43:32.923Z |
| CVE-2025-9373 |
6.4 (3.1)
|
PeproDev Branches Map <= 3.0.1 - Authenticated (Contri… |
peprodev |
PeproDev Branches Map (Mapify) |
2026-10-14T07:43:32.584Z | 2026-10-14T07:43:32.584Z |
| CVE-2026-103380 |
4.3 (3.1)
|
Appointment Booking Plugin <= 5.7.3 - Authenticated (S… |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-14T07:43:32.242Z | 2026-10-14T07:43:32.242Z |
| CVE-2026-103366 |
7.5 (3.1)
|
Appointment Booking Plugin <= 5.7.3 - Insecure Direct … |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-14T07:43:31.890Z | 2026-10-14T07:43:31.890Z |
| CVE-2026-100163 |
7.4 (3.1)
|
Appointment Booking Plugin <= 5.7.2 - Unauthenticated … |
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
2026-10-14T07:43:31.547Z | 2026-10-14T07:43:31.547Z |
| CVE-2026-107754 |
6.4 (3.1)
|
GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) … |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-14T07:43:31.053Z | 2026-10-14T07:43:31.053Z |
| CVE-2019-19923 |
N/A
|
flattenSubquery in select.c in SQLite 3.30.1 mish… |
n/a |
n/a |
2019-12-24T15:43:33.000Z | 2026-10-14T07:40:12.550Z |
| CVE-2019-19906 |
N/A
|
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-… |
n/a |
n/a |
2019-12-19T17:39:13.000Z | 2026-10-14T07:34:28.873Z |
| CVE-2019-19880 |
N/A
|
exprListAppendList in window.c in SQLite 3.30.1 a… |
n/a |
n/a |
2019-12-18T05:07:13.000Z | 2026-10-14T07:34:27.245Z |
| CVE-2026-105107 |
7.6 (3.1)
7.2 (4.0)
|
Koha SQL injection in reports/cat_issues_top.pl via th… |
Koha Community |
Koha |
2026-10-14T07:32:56.786Z | 2026-10-14T07:32:56.786Z |
| CVE-2019-19646 |
N/A
|
pragma.c in SQLite through 3.30.1 mishandles NOT … |
n/a |
n/a |
2019-12-09T18:36:18.000Z | 2026-10-14T07:28:44.915Z |
| CVE-2019-19645 |
N/A
|
alter.c in SQLite through 3.30.1 allows attackers… |
n/a |
n/a |
2019-12-09T15:15:57.000Z | 2026-10-14T07:23:12.550Z |
| CVE-2026-105106 |
8.8 (3.1)
|
Koha authenticated OS command injection in tools/sched… |
Koha Community |
Koha |
2026-10-14T07:23:03.069Z | 2026-10-14T07:23:03.069Z |
| CVE-2019-19603 |
N/A
|
SQLite 3.30.1 mishandles certain SELECT statement… |
n/a |
n/a |
2019-12-09T18:44:06.000Z | 2026-10-14T07:17:37.095Z |
| CVE-2026-110227 |
5.3 (3.1)
|
WordPress Restricted Site Access plugin <= 7.6.2 - Bro… |
10up |
Restricted Site Access |
2026-10-14T07:11:41.657Z | 2026-10-14T07:12:43.050Z |
| CVE-2026-109901 |
8.5 (3.1)
|
WordPress CP Multi View Event Calendar plugin <= 1.4.… |
Codepeople |
CP Multi View Event Calendar |
2026-10-14T07:11:16.010Z | 2026-10-14T07:12:15.660Z |
| CVE-2019-19317 |
N/A
|
lookupName in resolve.c in SQLite 3.30.1 omits bi… |
n/a |
n/a |
2019-12-05T13:53:16.000Z | 2026-10-14T07:12:05.802Z |
| CVE-2026-107171 |
6.9 (4.0)
|
An Hardcoded Cryptographic Key vulnerability exis… |
Trellix |
Trellix Agent |
2026-10-14T07:11:09.227Z | 2026-10-14T07:11:09.227Z |
| CVE-2019-19244 |
N/A
|
sqlite3Select in select.c in SQLite 3.30.1 allows… |
n/a |
n/a |
2019-11-25T19:32:38.000Z | 2026-10-14T07:06:27.340Z |