[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 3 08:15:31 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9cb142d6 by security tracker role at 2026-10-03T07:15:24+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,33 +1,33 @@
CVE-2026-97660 (The WPC Product Options for WooCommerce plugin for WordPress is vulner ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97644 (The Groundhogg \u2014 CRM, Newsletters, and Marketing Automation plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97363 (The WebSocket Application Programming Interface lacks restrictions on ...)
TODO: check
CVE-2026-97344 (The Wp Social Login and Register Social Counter plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97343 (The Burst Statistics \u2013 Simple WordPress Analytics (Google Analyti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97341 (The Visitor Traffic Real Time Statistics plugin for WordPress is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97337 (The Simple Membership plugin for WordPress is vulnerable to unauthoriz ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97212 (The WebSocket backend uses charging station identifiers to uniquely as ...)
TODO: check
CVE-2026-96962 (The Pie Register WordPress plugin before 3.8.4.14 does not restrict a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96650 (The Strong Testimonials plugin for WordPress is vulnerable to Stored C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96575 (The Transliterator \u2013 Multilingual and Multi-script Text Conversio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96564 (The SEOPress \u2013 AI SEO Plugin & On-site SEO plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96270 (The Ultimate Member \u2013 User Profile, Registration, Login, Member D ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96267 (The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-95865 (The Beaver Builder Page Builder \u2013 Drag and Drop Website Builder p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-95102 (WebSocket endpoints lack proper authentication mechanisms, enabling at ...)
TODO: check
CVE-2026-94594 (Armatura One's message broker logs client connection credentials and t ...)
@@ -39,67 +39,67 @@ CVE-2026-94592 (Armatura One's database initialization routine assigns a fixed,
CVE-2026-94591 (Armatura One stores database and message-broker credentials in an inst ...)
TODO: check
CVE-2026-94539 (The SupportCandy \u2013 AI Customer Support Ticket System & Live Chatb ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94505 (The Nelio Content \u2013 Editorial Calendar & Social Media Auto-Postin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94378 (The SupportCandy \u2013 AI Customer Support Ticket System & Live Chatb ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94239 (The Loco Translate WordPress plugin before 2.8.9 does not sanitise and ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94238 (The Loco Translate WordPress plugin before 2.8.9 does not restrict whi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93896 (The WPFront Notification Bar plugin for WordPress is vulnerable to Ref ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93889 (The Mail logging \u2013 WP Mail Catcher plugin for WordPress is vulner ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93474 (Charging station authentication identifiers are publicly accessible vi ...)
TODO: check
CVE-2026-93430 (The GD Rating System plugin for WordPress is vulnerable to Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93428 (The Ultimate Member \u2013 User Profile, Registration, Login, Member D ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92977 (The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92974 (The Photo Gallery by 10Web \u2013 Mobile-Friendly Image Gallery plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92923 (The Unlimited Elements for Elementor WordPress plugin before 2.0.21 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92826 (The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflect ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92727 (The EmbedPress \u2013 PDF Embedder, 3D PDF FlipBook, Google Reviews, Y ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92551 (The Paid Membership Plugin, Ecommerce, User Registration Form, Login F ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92538 (The LearnPress \u2013 WordPress LMS Plugin for Create and Sell Online ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92536 (The Paid Membership Plugin, Ecommerce, User Registration Form, Login F ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92437 (The Mailchimp for WooCommerce WordPress plugin before 6.3 does not req ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92243 (The Ivory Search \u2013 WordPress Search Plugin plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91108 (The Alt Text AI \u2013 Automatically generate image alt text for SEO a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91078 (The TillKit WordPress plugin before 1.0.5 does not require the hard-co ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89236 (The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88783 (The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88782 (The Kubio AI Page Builder WordPress plugin before 2.9.3 does not valid ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87115 (The VikAppointments Services Booking Calendar plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87091 (The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86834 (The MetForm WordPress plugin before 4.3.1 does not properly restrict ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86832 (The MetForm WordPress plugin before 4.3.1 does not properly restrict ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85568 (The Unlimited Elements for Elementor WordPress plugin before 2.0.21 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85015 (The Unlimited Elements for Elementor WordPress plugin before 2.0.21 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84411 (The web management service in affected RouterOS versions contains an i ...)
TODO: check
CVE-2026-82045 (UTMStack before 11.2.16 contains a JPQL injection vulnerability that a ...)
@@ -117,27 +117,27 @@ CVE-2026-82040 (UTMStack before 11.2.16 contains a server-side request forgery v
CVE-2026-82039 (UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmA ...)
TODO: check
CVE-2026-80518 (The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-80517 (The WP Ultimate CSV Importer WordPress plugin before 9.2 does not pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-79113 (OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow ...)
TODO: check
CVE-2026-75937 (A specially crafted HTTP POST request to the web administration interf ...)
- TODO: check
+ NOT-FOR-US: Digi
CVE-2026-75028 (The WPCafe \u2013 Restaurant Menu, Online Food Ordering & Table Bookin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-39718 (Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-18443 (The Smart Manager \u2013 Advanced WooCommerce Bulk Edit & Inventory Ma ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15795 (The Responsive Plus \u2013 Elementor Templates & Starter Sites plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12392 (An information exposure vulnerability in Canonical MAAS prior to versi ...)
TODO: check
CVE-2026-11601 (The WPCafe \u2013 Restaurant Menu, Online Food Ordering & Table Bookin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11399 (The Helpdesk Support Ticket System for WooCommerce plugin for WordPres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105090 (Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The surv ...)
TODO: check
CVE-2026-105083 (ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vul ...)
@@ -193,55 +193,55 @@ CVE-2026-104474 (OpenLiteSpeed before 1.9.3 contains a local privilege escalatio
CVE-2026-104433 (Mooncake transfer engine before 0.3.12 contains an out-of-bounds read ...)
TODO: check
CVE-2026-104313 (The WPC Estimated Delivery Date for WooCommerce plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104055 (The postgresql-operator charm runs a Prometheus postgres_exporter to c ...)
TODO: check
CVE-2026-104019 (OS command injection in the Studio Space startup validation script in ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-103918 (oRPC is a tool that helps build APIs that are end-to-end type-safe and ...)
TODO: check
CVE-2026-103913 (The GeoDirectory plugin for WordPress is vulnerable to SQL Injection v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103909 (The Calculated Fields Form \u2013 AI Form Builder for WordPress \u2013 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103888 (The WPC Smart Quick View for WooCommerce plugin for WordPress is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103519 (The The WP Ultimate Review plugin for WordPress is vulnerable to arbit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103514 (The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-b ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103421 (The WPMobile.App \u2013 Android and iOS App Builder plugin for WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103293 (The MPG WordPress plugin before 4.2.3 does not validate that the data ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103036 (oRPC is a tool that helps build APIs that are end-to-end type-safe and ...)
TODO: check
CVE-2026-101928 (The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerab ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101923 (The Photo Reviews for WooCommerce plugin for WordPress is vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101357 (The SEOPress \u2013 AI SEO Plugin & On-site SEO plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101162 (The WP Ultimate Review WordPress plugin before 2.4.4 does not escape s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101161 (The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101160 (The WP Ultimate Review WordPress plugin before 2.4.4 does not validate ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101159 (The WP Ultimate Review WordPress plugin before 2.4.4 does not properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100180 (The Jeg Kit for Elementor \u2013 Powerful Addons for Elementor, Widget ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100157 (The The WP Ultimate Review plugin for WordPress is vulnerable to arbit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100152 (The The All in One SEO \u2013 AI SEO Plugin to Boost SEO Rankings & Tr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100149 (The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Butto ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100148 (The Rich Showcase for Google Reviews plugin for WordPress is vulnerabl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-12828 (The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97663 (The Customer Reviews for WooCommerce plugin for WordPress is vulnerabl ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97652 (The WP Statistics \u2013 Simple, privacy-friendly Google Analytics alt ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9cb142d63426d62bbc3a5ab8771806a4e4a261e7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9cb142d63426d62bbc3a5ab8771806a4e4a261e7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/00004379/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list