[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Aug 10 08:14:00 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
43713131 by security tracker role at 2026-08-10T07:13:54+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,7 +5,7 @@ CVE-2026-19389 (Multiple integer overflow and underflow vulnerabilities were fou
CVE-2026-19387 (A heap out-of-bounds write vulnerability was found in the GStreamer gs ...)
TODO: check
CVE-2026-19384 (A weakness has been identified in SourceCodester Simple Doctors Appoin ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-19383 (A security vulnerability has been detected in saithink/saigroup SaiAdm ...)
TODO: check
CVE-2026-19382 (A weakness has been identified in Almico Speedfan 4.52. This affects t ...)
@@ -17,7 +17,7 @@ CVE-2026-19380 (A vulnerability was identified in Mullvad wireguard.sys 0.10.1.
CVE-2026-19379 (A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted ...)
TODO: check
CVE-2026-19378 (A vulnerability was found in code-projects Task Management System 1.0. ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-19376 (A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vuln ...)
TODO: check
CVE-2026-19375 (A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. ...)
@@ -39,105 +39,105 @@ CVE-2026-19368 (A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affecte
CVE-2026-19367 (A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affec ...)
TODO: check
CVE-2026-19089 (The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19077 (The Duplicate Post WordPress plugin before 1.5.5 does not perform per- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19075 (All-in-One Video Gallery registers a public, unauthenticated file-down ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19074 (The Advanced Classifieds & Directory Pro Advanced Classifieds & Direct ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19053 (The ProSolution WP Client WordPress plugin before 2.0.6 does not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19049 (The ProSolution WP Client WordPress plugin before 2.0.9 does not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18960 (The Block User Account WordPress plugin before 2.0.1 does not enforce ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18946 (The Contact Form to Any API WordPress plugin before 3.0.7 does not use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18934 (The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18786 (The CheckView WordPress plugin before 2.3.2 does not restrict its RES ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18666 (The Library Management System WordPress plugin before 3.6.7 does not s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18470 (The Login & Register Forms WordPress plugin before 4.0.2 does not ver ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18469 (The Login & Register Forms WordPress plugin before 4.0.2 does not enf ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18468 (The Login & Register Forms WordPress plugin before 4.0.2 does not bin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18200 (The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18030 (The BricksForge WordPress plugin before 3.1.8.8 does not verify the id ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17542 (The File Manager WordPress plugin before 6.9.1 does not perform any ca ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17541 (The File Manager WordPress plugin before 6.9.1 does not have authorisa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17540 (The File Manager WordPress plugin before 6.9.1 does not properly autho ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17519
REJECTED
CVE-2026-17023 (The Salon Booking System WordPress plugin through 10.30.33 does not p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17022 (The Salon Booking System WordPress plugin through 10.30.33 does not p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17021 (The Salon Booking System WordPress plugin through 10.30.33 does not p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17020 (The Salon Booking System WordPress plugin through 10.30.33 does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17019 (The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17018 (The CubeWP Framework WordPress plugin through 1.1.30 does not perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17016 (The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17012 (The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17010 (The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitis ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16985 (The Squeeze WordPress plugin before 1.7.12 does not validate the file ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16949 (The Term Pages WordPress plugin before 2.0.0 does not properly sanitis ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16299 (The Single Sign On For TNG WordPress plugin before 2.2.0 does not prop ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16298 (The FoodBoxBooker WordPress plugin before 1.0.7 does not properly vali ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16257 (The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15238 (The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not ver ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15237 (The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not per ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15229 (The Pinpoint Booking System WordPress plugin through 2.9.9.6.9 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15047 (The s2Member WordPress plugin before 260805 does not escape several s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14941 (The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14860 (The Podcast Player WordPress plugin before 8.3.1 does not validate th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14293 (The Autopay WordPress plugin before 5.0.1 does not perform any capabil ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14238 (The vitepos WordPress plugin before 3.6.0 does not sanitize or paramet ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14237 (The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin b ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14211 (The Booking for Appointments and Events Calendar WordPress plugin bef ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14206 (The HT Contact Form WordPress plugin before 2.9.3 does not perform an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13701 (The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13600 (The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13170 (The Eventin WordPress plugin before 4.1.20 does not properly validate ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13133 (A vulnerability has been identified in LineInst.exe (LINE for Windows) ...)
TODO: check
CVE-2026-12971 (The LearnPress WordPress plugin before 4.4.4 does not validate a user ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12570 (A vulnerability in keras-team/keras versions <= 3.15.0 allows for a de ...)
TODO: check
CVE-2026-12372 (A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/437131317fa4abdd779cbfd2b56575a8e8cdc616
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/437131317fa4abdd779cbfd2b56575a8e8cdc616
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260810/b8315a50/attachment.htm>
More information about the debian-security-tracker-commits
mailing list