Skip to content
OpenAdvisories

Archive

3 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /3 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-96451 Public exploit

    WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

    Ultimate Member Ultimate Member
  • Critical 9.8
    CVE-2026-105105 Public exploit

    Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

    CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject space…

    NASA-AMMOS AIT-Core
  • Critical 9.1
    CVE-2026-92084 Public exploit

    Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

    The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does n…

    Beaver Builder Beaver Builder Page Builder – Drag and Drop Website Builder Web / CMS
  • High 7.5
    CVE-2026-101160 Public exploit

    WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating

    The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when rendering reviews, allowing unauthenticated users to make the reviewed content fai…

    Web / CMS
  • High 7.5
    CVE-2026-101161 Public exploit

    WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode

    The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when th…

    Web / CMS
  • Medium 6.4
    CVE-2026-101162 Public exploit

    WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings

    The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as low as author to perform Stored Cross-Site Scripting attacks, when author reviews…

    Web / CMS
  • Critical 9.9
    CVE-2026-105080 Public exploit

    In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-conv…

    C4illin ConvertX