Veille CVE

Dimanche 11 octobre 2026

43 CVE

Critique 5 Élevée 25 Moyenne 13 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-96653 6.5 Moyenne

    wpdirectorykit WP Directory Kit

    The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection: a Subscriber stores a display_name containing a single quote via their own profile, which WordPress preserves verbatim; the payload is then triggered when WdkCachedUserEditor::update_listings_user_editor() re-reads that stored value and passes it unsanitized to the SQL sink.

  2. CVE-2026-85479 5.3 Moyenne

    Grid Protection Alliance openPDC · Grid Protection Alliance openPDC (Docker image) · Grid Protection Alliance openHistorian

    The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.

  3. CVE-2026-39453 8.3 Élevée

    Red Lion Controls 700 Series

    Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots.

  4. CVE-2026-33367 8.1 Élevée

    Red Lion Controls 700 Series

    SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.

  5. CVE-2026-33272 4.9 Moyenne

    Red Lion Controls 700 Series

    A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.

  6. CVE-2026-29797 7.1 Élevée

    Red Lion Controls 700 Series

    No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.

  7. CVE-2026-28745 7.5 Élevée

    Red Lion Controls 700 Series

    Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.

  8. CVE-2026-15340 9.8 Critique

    Savannah lwIP SMTP client

    lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

  9. CVE-2026-105278 9.8 Critique

    Grid Protection Alliance openPDC (Docker image)

    The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.

  10. CVE-2026-105281 7.5 Élevée

    Grid Protection Alliance openPDC · Grid Protection Alliance openPDC (Docker image) · Grid Protection Alliance openHistorian

    The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.

  11. CVE-2026-100730 9.8 Critique

    Grid Protection Alliance openPDC · Grid Protection Alliance openPDC (Docker image) · Grid Protection Alliance openHistorian

    A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker. This allows an attacker to trigger deserialization of an arbitrary object graph, which could allow remote code execution under the privileges of the affected service account.

  12. CVE-2026-97076 7.5 Élevée

    WP Media WP Rocket

    Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5.

  13. CVE-2026-96539 5.6 Moyenne

    Ultimate Member

    Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

  14. CVE-2026-96336 7.5 Élevée

    WPMU DEV Forminator

    Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.

  15. CVE-2026-96334 5.6 Moyenne

    ThemeGrill User Registration

    Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7.

  16. CVE-2026-95597 6.5 Moyenne

    codemstory 워드프레스 결제 심플페이

    Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17.

  17. CVE-2026-94666 7.5 Élevée

    ZealousWeb Generate PDF using Contact Form 7

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1.

  18. CVE-2026-94065 8.8 Élevée

    BuddhaThemes ColorFolio

    Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3.

  19. CVE-2026-94064 8.8 Élevée

    BuddhaThemes Neo | Barber Shop WordPress Theme

    Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5.

  20. CVE-2026-62028 5.4 Moyenne

    bPlugins Before After Image Comparison – Image comparison for WP

    Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through 1.1.21.

  21. CVE-2026-106602 4.8 Moyenne

    Automattic Jetpack

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.

  22. CVE-2026-107419 5.4 Moyenne

    Cool Plugins AI Translation for Polylang

    Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Translation for Polylang: from n/a through 1.6.2.

  23. CVE-2026-105872 7.2 Élevée

    mklacroix Product Configurator for WooCommerce

    Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5.

  24. CVE-2026-96809 9.3 Critique

    MultiNet Interactive AB EduAdmin Booking

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL Injection.This issue affects EduAdmin Booking: from n/a before 6.0.0.

  25. CVE-2026-96553 7.1 Élevée

    Damian Góra FiboSearch

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Reflected XSS.This issue affects FiboSearch: from n/a through 1.34.1.

  26. CVE-2026-96330 9.3 Critique

    tagDiv Opt-In Builder

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

  27. CVE-2026-96329 8.5 Élevée

    tagDiv Opt-In Builder

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

  28. CVE-2026-95609 7.1 Élevée

    David Lingren Media LIbrary Assistant

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

  29. CVE-2026-95608 7.1 Élevée

    PluginUs.Net HUSKY

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

  30. CVE-2026-95596 7.1 Élevée

    Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1.

  31. CVE-2026-94667 6.5 Moyenne

    Crocoblock JetReviews

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2.

  32. CVE-2026-94661 7.1 Élevée

    Crocoblock JetBlog

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.

  33. CVE-2026-94641 7.1 Élevée

    Stiofan UsersWP

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.

  34. CVE-2026-94415 7.1 Élevée

    Muffingroup Betheme

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: from n/a through 28.5.8.

  35. CVE-2026-94170 7.1 Élevée

    Heateor Support Sassy Social Share

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.This issue affects Sassy Social Share: from n/a through 3.3.79.

  36. CVE-2026-94159 7.1 Élevée

    KlbTheme Total Donations

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Donations totaldonations allows Stored XSS.This issue affects Total Donations: from n/a through 2.0.5.

  37. CVE-2026-94158 7.1 Élevée

    bkninja Gloria Admin Panel

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel: from n/a through 1.3.

  38. CVE-2026-94061 7.1 Élevée

    Designthemes Whistle - Sports Club

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS.This issue affects Whistle - Sports Club: from n/a through 4.2.

  39. CVE-2026-94060 7.1 Élevée

    Bracketweb Voldor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor voldor allows Reflected XSS.This issue affects Voldor: from n/a through 1.0.0.

  40. CVE-2026-62039 6.5 Moyenne

    bPlugins Html5 Audio Player

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.8.8.

  41. CVE-2026-62036 4.3 Moyenne

    AREOI All Bootstrap Blocks

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Data.This issue affects All Bootstrap Blocks: from n/a through 1.3.31.

  42. CVE-2026-42695 6.5 Moyenne

    FolioVision FV Flowplayer Video Player

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Stored XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.54.7212.

  43. CVE-2026-105870 7.1 Élevée

    Delight Star Inc. WP Associate Post R2

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2 wp-associate-post-r2 allows Reflected XSS.This issue affects WP Associate Post R2: from n/a through 5.0.1.