[Git][security-tracker-team/security-tracker][master] Process some NFUs

Sat Oct 3 09:12:35 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
12e9a3f6 by Salvatore Bonaccorso at 2026-10-03T10:12:14+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2026-97660 (The WPC Product Options for WooCommerce plugin for WordPress is
 CVE-2026-97644 (The Groundhogg \u2014 CRM, Newsletters, and Marketing Automation plugi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-97363 (The WebSocket Application Programming Interface lacks restrictions on  ...)
-	TODO: check
+	NOT-FOR-US: Monta monta.app
 CVE-2026-97344 (The Wp Social Login and Register Social Counter plugin for WordPress i ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-97343 (The Burst Statistics \u2013 Simple WordPress Analytics (Google Analyti ...)
@@ -13,7 +13,7 @@ CVE-2026-97341 (The Visitor Traffic Real Time Statistics plugin for WordPress is
 CVE-2026-97337 (The Simple Membership plugin for WordPress is vulnerable to unauthoriz ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-97212 (The WebSocket backend uses charging station identifiers to uniquely as ...)
-	TODO: check
+	NOT-FOR-US: Monta monta.app
 CVE-2026-96962 (The Pie Register  WordPress plugin before 3.8.4.14 does not restrict a ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-96650 (The Strong Testimonials plugin for WordPress is vulnerable to Stored C ...)
@@ -29,15 +29,15 @@ CVE-2026-96267 (The WP Visitor Statistics (Real Time Traffic) plugin for WordPre
 CVE-2026-95865 (The Beaver Builder Page Builder \u2013 Drag and Drop Website Builder p ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-95102 (WebSocket endpoints lack proper authentication mechanisms, enabling at ...)
-	TODO: check
+	NOT-FOR-US: Monta monta.app
 CVE-2026-94594 (Armatura One's message broker logs client connection credentials and t ...)
-	TODO: check
+	NOT-FOR-US: Armatura LLC
 CVE-2026-94593 (Armatura One's backup and restore routine records the full database co ...)
-	TODO: check
+	NOT-FOR-US: Armatura LLC
 CVE-2026-94592 (Armatura One's database initialization routine assigns a fixed, vendor ...)
-	TODO: check
+	NOT-FOR-US: Armatura LLC
 CVE-2026-94591 (Armatura One stores database and message-broker credentials in an inst ...)
-	TODO: check
+	NOT-FOR-US: Armatura LLC
 CVE-2026-94539 (The SupportCandy \u2013 AI Customer Support Ticket System & Live Chatb ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94505 (The Nelio Content \u2013 Editorial Calendar & Social Media Auto-Postin ...)
@@ -53,7 +53,7 @@ CVE-2026-93896 (The WPFront Notification Bar plugin for WordPress is vulnerable
 CVE-2026-93889 (The Mail logging \u2013 WP Mail Catcher plugin for WordPress is vulner ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93474 (Charging station authentication identifiers are publicly accessible vi ...)
-	TODO: check
+	NOT-FOR-US: Monta monta.app
 CVE-2026-93430 (The GD Rating System plugin for WordPress is vulnerable to Stored Cros ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93428 (The Ultimate Member \u2013 User Profile, Registration, Login, Member D ...)
@@ -101,27 +101,27 @@ CVE-2026-85568 (The Unlimited Elements for Elementor WordPress plugin before 2.0
 CVE-2026-85015 (The Unlimited Elements for Elementor WordPress plugin before 2.0.21 do ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84411 (The web management service in affected RouterOS versions contains an i ...)
-	TODO: check
+	NOT-FOR-US: MikroTik
 CVE-2026-82045 (UTMStack before 11.2.16 contains a JPQL injection vulnerability that a ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-82044 (UTMStack before 11.2.16 contains a server-side request forgery vulnera ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-82043 (UTMStack before 11.2.16 contains an account enumeration vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-82042 (UTMStack before 11.2.16 contains an authentication bypass vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-82041 (UTMStack before 11.2.16 contains a missing authorization vulnerability ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-82040 (UTMStack before 11.2.16 contains a server-side request forgery vulnera ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-82039 (UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmA ...)
-	TODO: check
+	NOT-FOR-US: UTMStack
 CVE-2026-80518 (The WP Ultimate CSV Importer  WordPress plugin before 9.2 does not use ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-80517 (The WP Ultimate CSV Importer  WordPress plugin before 9.2 does not pro ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-79113 (OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow ...)
-	TODO: check
+	NOT-FOR-US: OpenAPV
 CVE-2026-75937 (A specially crafted HTTP POST request to the web administration interf ...)
 	NOT-FOR-US: Digi
 CVE-2026-75028 (The WPCafe \u2013 Restaurant Menu, Online Food Ordering & Table Bookin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12e9a3f63d20d2d0e881a7ceb9d98c853ecd3303

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12e9a3f63d20d2d0e881a7ceb9d98c853ecd3303
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/3757c776/attachment-0001.htm>
