[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Feb 11 08:14:26 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1ac4e85e by security tracker role at 2026-02-11T08:14:19+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31,31 +31,31 @@ CVE-2026-25870 (DoraCMS version 3.1 and prior contains a server-side request for
 CVE-2026-25251
 	REJECTED
 CVE-2026-1893 (The Orbisius Random Name Generator plugin for WordPress is vulnerable  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-1763 (Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue a ...)
-	TODO: check
+	NOT-FOR-US: GE Vernova
 CVE-2026-1762 (A vulnerability in GE Vernova Enervista UR Setup on Windows allows Fil ...)
-	TODO: check
+	NOT-FOR-US: GE Vernova
 CVE-2026-1571 (User-controlled input is reflected into the HTML output without proper ...)
-	TODO: check
+	NOT-FOR-US: TP-Link
 CVE-2026-1507 (The affected products are vulnerable to an uncaught exception that cou ...)
 	TODO: check
 CVE-2026-1495 (The vulnerability, if exploited, could allow an attacker with Event Lo ...)
 	TODO: check
 CVE-2026-1357 (The Migration, Backup, Staging \u2013 WPvivid Backup & Migration plugi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-1235 (The WP eCommerce WordPress plugin through 3.15.1 unserializes user inp ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-1231 (The Beaver Builder Page Builder \u2013 Drag and Drop Website Builder p ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-15524 (The Gallery by FooGallery plugin for WordPress is vulnerable to unauth ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-15400 (The Pix para Woocommerce  WordPress plugin through 2.13.3 allows any a ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-14541 (The Lucky Wheel Giveaway plugin for WordPress is vulnerable to Remote  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-13431 (The SlimStat Analytics plugin for WordPress is vulnerable to time-base ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-12699 (The ZOLL ePCR IOS application reflects unsanitized user input into a W ...)
 	TODO: check
 CVE-2025-10912 (Authorization Bypass Through User-Controlled Key vulnerability in Saas ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1ac4e85ea1ac488cee3197f29beaad20ff355fbc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1ac4e85ea1ac488cee3197f29beaad20ff355fbc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260211/2f926786/attachment.htm>


More information about the debian-security-tracker-commits mailing list