Skip to content
OpenAdvisories

Archive

4 October 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-103355 Public exploit

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue …

  • Critical 10.0
    CVE-2026-105134 Exploited Public exploit Scanner template EPSS 82%

    Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

    A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os comma…

    KEV Oct 14, 2026