Skip to content
OpenAdvisories

Archive

30 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /30 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-94545 Public exploit

    Satori-generated SVG has improper escaping

    Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG ma…

    vercel next satori satori npm
  • Medium 6.5
    CVE-2026-97286 Public exploit

    WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

    WP Chill Strong Testimonials
  • Medium 6.5
    CVE-2026-94074 Public exploit

    WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

    N Squared Simply Schedule Appointments
  • Medium 5.5
    CVE-2026-102578 Public exploit

    Moodle: sql injection in question bank web service

    A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could allow an a…

    moodle Web / CMS Ubuntu
  • Medium 6.8
    CVE-2026-92424 Public exploit

    Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue

    The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users…

    Web / CMS