Skip to content
OpenAdvisories

Archive

September 2026

Vulnerabilities first published in this month (UTC), newest first.

← August 2026 2026 / September October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

15,012 results · Feed

  • Medium 6.3
    CVE-2026-103226

    Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow

    A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the att…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu
  • High 8.8
    CVE-2026-18783 Public exploit

    Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES

    Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.

    Trex Digital Smart Manufacturing Systems Trex MES
  • Medium 5.3
    CVE-2026-97259

    WordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4.

    WP Hosting AS Pay with Vipps for WooCommerce Web / CMS
  • High 7.3
    CVE-2026-101295

    Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction

    Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image laye…

    Red Hat Red Hat OpenShift Container Platform 5 Red Hat OpenShift Container Platform 4.15 Red Hat OpenShift Container Platform 4.13
  • Medium 6.5
    CVE-2026-62084

    WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Submitted Posts: from n/a through 20260810.

    Jeff Starr User Submitted Posts
  • High 7.6
    CVE-2026-62097

    WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27.

    WPTasty Business Directory
  • Medium 5.6
    CVE-2026-103222

    Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow

    A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_decompress of the file blosc/blosclz.c of the component blosclz Decompression. Executing a manipulation can lead to integer overflow. The attack may be launched re…

    Blosc c-blosc2 c-blosc2 c-blosc2 Debian Ubuntu
  • Critical 9.4
    CVE-2026-93903 Public exploit

    LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case"…

    litespeedtech LiteSpeed Web Server
  • Medium 4.3
    CVE-2026-103118

    GraphicsMagick WPG File wpg.c ExtractPostscript recursion

    A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack m…

    graphicsmagick graphicsmagick Debian Ubuntu
  • Critical 9.8
    CVE-2026-82307

    Multiple Vulnerabilities in Dolusoft Software's SOPLOG

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1.

    Dolusoft Software Technologies SOPLOG
  • Medium 5.3
    CVE-2026-93547

    Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells

    A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a c…

    vaadin vaadin vaadin-spreadsheet-flow vaadin-spreadsheet
  • Medium 6.3
    CVE-2026-91860

    Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge

    A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Component Base. Merging an object the application does not control into a chart configuration or into a component's i18n property writes onto Object.prototype, ma…

    vaadin vaadin vaadin-core vaadin-charts-flow
  • Critical 9.8
    CVE-2026-76504 Exploited Public exploit EPSS 39%

    Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Sep 30, 2026
  • Medium 4.7
    CVE-2026-103117

    OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection

    A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. Th…

    OS4ED openSIS-Classic
  • Medium 5.3
    CVE-2026-86778

    Username Enumeration in Maksisoft Technology's Maksisoft Gym

    Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc. Maksisoft Gym allows Account Footprinting. This issue affects Maksisoft Gym: from 0.5.10 before 0.5.11.

    Maksisoft Technology, IT, and Software Industry and Trade Maksisoft Gym
  • Medium 6.3
    CVE-2026-103116

    OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection

    A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LO_sort causes sql injection. The att…

    OS4ED openSIS-Classic
  • High 7.1
    CVE-2026-102398

    WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions.

    supsystic Popup by Supsystic
  • Medium 5.4
    CVE-2026-102399

    WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions.

    supsystic Photo Gallery by Supsystic
  • High 7.1
    CVE-2026-102396

    WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions.

    supsystic Ultimate Maps by Supsystic
  • High 7.1
    CVE-2026-102395

    WordPress Easy Google Maps plugin <= 1.14.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions.

    supsystic Easy Google Maps
  • Medium 6.5
    CVE-2026-102386

    WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions.

    Jacob N. Breetvelt WP Photo Album Plus
  • High 7.1
    CVE-2026-102385

    WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.

    Kevin Stover Ninja Forms
  • Medium 5.9
    CVE-2026-102384

    WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

    Author Cross Site Scripting (XSS) in Supreme Modules Lite <= 2.5.63 versions.

    Supreme Modules Supreme Modules Lite
  • Medium 6.5
    CVE-2026-100513

    WordPress CF7 Views &#8211; Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.5 versions.

    Aman CF7 Views &#8211; Complete Entry Management for Contact Form 7
  • Medium 5.3
    CVE-2026-100508

    WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability

    Unauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versions.

    WordPress Two Factor
  • High 7.1
    CVE-2026-100507

    WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a thr…

    If-So Dynamic Content If-So Dynamic Content Personalization
  • Medium 5.3
    CVE-2026-97302

    WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.

    themeisle MPG
  • Medium 6.5
    CVE-2026-97301

    WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

    Cool Plugins Cool Formkit Lite
  • Medium 6.5
    CVE-2026-97298

    WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions.

    King Addons King Addons for Elementor
  • Medium 5.4
    CVE-2026-97299

    WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions.

    Knit Pay Razorpay Payment Links for WooCommerce Web / CMS
  • High 8.5
    CVE-2026-97293

    WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability

    Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-97292

    WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability

    Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

    YITHEMES YITH WooCommerce Tab Manager Web / CMS
  • Medium 6.5
    CVE-2026-97288

    WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.

    Jayson T Cote OAuth Server
  • High 7.1
    CVE-2026-97289

    WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.6.

    ExpressTech Systems Quiz And Survey Master
  • High 8.5
    CVE-2026-97287

    WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.

    Liquid Web / StellarWP Event Tickets
  • Medium 6.5
    CVE-2026-97286 Public exploit

    WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

    WP Chill Strong Testimonials
  • Medium 5.3
    CVE-2026-97282

    WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.

    RadiusTheme Review Schema
  • Medium 5.4
    CVE-2026-97285

    WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability

    Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.

    Nexcess The Events Calendar
  • Medium 6.5
    CVE-2026-97279

    WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

    Chouby Polylang
  • Critical 9.8
    CVE-2026-97274

    WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

    Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.

    miniOrange OAuth Single Sign On – SSO (OAuth Client)