[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 16 08:28:00 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f01174ad by security tracker role at 2026-10-16T07:15:36+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,79 +1,79 @@
CVE-2026-97640 (The WPConsent \u2013 Cookie Banner & Cookie Consent for Privacy Compli ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97339 (The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97296 (Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc G ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96806 (The Apache Airflow Keycloak auth manager did not end the session on lo ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-96570 (The Schema & Structured Data for WP & AMP plugin for WordPress is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96562 (The The Broken Link Checker plugin for WordPress is vulnerable to arbi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96339 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95809 (The Opti-Behavior \u2013 Self-Hosted Heatmaps, Session Recordings, Fun ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-95686 (The Opti-Behavior \u2013 Self-Hosted Heatmaps, Session Recordings, Fun ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94388 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94169 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94135 (The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-94134 (The Apache Airflow SSH provider hook disables SSH host-key verificatio ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-93953 (The Backuply \u2013 Backup, Restore, Migrate and Clone plugin for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93767 (The Tainacan plugin for WordPress is vulnerable to Directory Traversal ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93535 (The Dark Mode \u2013 Improve Accessibility with AI Powered Dark Theme ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92777 (A potential vulnerability was reported in some Lenovo Tablets that cou ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-92629 (A potential improper authorization vulnerability was reported in Lenov ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-92553 (The YaySMTP \u2013 WP Mail SMTP with Email Logs, Tracking & Reports pl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92427 (The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92228 (The Apache Airflow Keycloak provider's multi-team provisioning (`_atta ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-92115 (The WP Photo Album Plus plugin for WordPress is vulnerable to authenti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91833 (The WX Subscribe \u5fae\u4fe1\u652f\u4ed8\u4ed8\u8d39\u8ba2\u9605 Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91830 (The Subscribe to Comments WordPress plugin before 2.3.3 does not sign ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-8311
REJECTED
CVE-2026-89280 (The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution \u2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89079 (The Theme My Login plugin for WordPress is vulnerable to privilege esc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89062 (A potential out-of-bounds write vulnerability was reported in the Leno ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-89057 (A potential authentication bypass vulnerability was reported in some L ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-89051 (The WP Ghost (Hide My WP Ghost) \u2013 Security & Firewall plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88963 (The Tutor LMS \u2013 eLearning and online course solution plugin for W ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85659 (The PilotPress plugin for WordPress is vulnerable to Privilege Escalat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84823 (A flaw was found in WildFly. A user with the `Monitor` role, which is ...)
TODO: check
CVE-2026-77829 (The Cooked \u2013 Recipe Management plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-75941 (A potential vulnerability was reported in the Lenovo Legion Zone appli ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-74923 (The Document Gallery WordPress plugin through 5.1.1 does not perform a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-5819
REJECTED
CVE-2026-45165 (An authorization flaw in Idira Conjur version 13.9.0 allows an authent ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2026-36436 (An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credenti ...)
TODO: check
CVE-2026-2937
@@ -81,7 +81,7 @@ CVE-2026-2937
CVE-2026-19867 (Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11 ...)
TODO: check
CVE-2026-19798 (The Wp Map Block plugin for WordPress is vulnerable to unauthorized mo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19603 (Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7 ...)
TODO: check
CVE-2026-19601 (Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7 ...)
@@ -93,13 +93,13 @@ CVE-2026-18795 (Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x
CVE-2026-18551 (Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11 ...)
TODO: check
CVE-2026-16755 (A potential vulnerability was reported in Lenovo Smart Camera C33, dis ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-16754 (A potential improper certificate validation vulnerability was reported ...)
- TODO: check
+ NOT-FOR-US: Lenovo
CVE-2026-15222 (The The User Registration & Membership \u2013 Free & Paid Memberships, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12272 (The Lightweight Cookie Notice \u2013 Cookie Banner for Cookie Consent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111458 (The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates ...)
TODO: check
CVE-2026-111451 (Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes cal ...)
@@ -123,9 +123,9 @@ CVE-2026-111443 (Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switc
CVE-2026-111442 (Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does n ...)
TODO: check
CVE-2026-111389 (Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-111388 (Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enfo ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-111387 (Nezha from 2.2.5 before 2.3.15 contains an information disclosure vuln ...)
TODO: check
CVE-2026-111386 (Nezha from 1.7.0 before 2.3.15 contains an information disclosure vuln ...)
@@ -175,7 +175,7 @@ CVE-2026-111359 (CRMEB 5.6.1 through 6.0.0 contains an insecure direct object re
CVE-2026-111358 (SendPortal sendportal-core through 4.0.1 contains an authorization byp ...)
TODO: check
CVE-2026-111357 (Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsin ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-111356 (MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-d ...)
TODO: check
CVE-2026-111355 (zhontai Admin.Core through 10.1.0 contains an authorization bypass vul ...)
@@ -263,15 +263,15 @@ CVE-2026-111212 (A security flaw has been discovered in ImprintLab Medical-SAM-A
CVE-2026-111210 (A vulnerability was determined in bitcoinj up to 0.17. Affected is the ...)
TODO: check
CVE-2026-111178 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111122 (The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Ba ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111114 (The Nexter Extension \u2013 Security, Performance, Code Snippets & Sit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111106 (The Mail Mint plugin for WordPress is vulnerable to SQL Injection via ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111069 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110922 (Use after free in Prerender in Google Chrome prior to 155.0.8059.84 al ...)
TODO: check
CVE-2026-110921 (Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a ...)
@@ -293,159 +293,159 @@ CVE-2026-110914 (Memory corruption in Workers in Google Chrome prior to 155.0.80
CVE-2026-110913 (Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allow ...)
TODO: check
CVE-2026-110721 (The NotificationX plugin for WordPress is vulnerable to Missing Author ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110701 (The CP Multi View Events Calendar plugin for WordPress is vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110664 (The Premium Packages \u2013 Sell Digital Products Securely plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110590 (The Klarna for WooCommerce plugin for WordPress is vulnerable to autho ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110366 (Missing Authorization vulnerability in Gemini Labs Site Reviews site-r ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-110290 (The WebberZone Top 10 \u2014 Popular Posts plugin for WordPress is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110252 (The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110191 (The Product Delivery Date for WooCommerce WordPress plugin before 3.3 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110179 (The affiliate-toolkit WordPress plugin before 3.8.9 does not validate ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110135 (The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 doe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110039 (The Smush WordPress plugin before 4.3.4 does not restrict changes to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110019 (The Bulk Page Generator \u2013 LPagery plugin for WordPress is vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110017 (The Quick PayPal Payments: Payment Button & Form plugin for WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110015 (The Salon Booking System WordPress plugin before 10.31.9 does not cor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110014 (The Salon Booking System WordPress plugin before 10.31.9 does not pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110013 (The Salon Booking System WordPress plugin before 10.31.9 does not gen ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110012 (The Salon Booking System WordPress plugin before 10.31.3 does not res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109998 (The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109990 (The Flying Scripts: Delay JavaScript to Improve Site Speed & Performan ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109982 (The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109813 (A hard-coded cryptographic key vulnerability exists in the `/usr/bin/s ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-109812 (A missing authorization vulnerability exists in the internal API `/api ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-109515 (The MailOptin \u2013 Popup, Optin Forms & Email Newsletters for Mailch ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109513 (The NotificationX \u2013 FOMO, Live Sales Notification, WooCommerce Sa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109512 (The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109468 (Allocation of resources without limits or throttling in ASP.NET Core a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-109447 (The User Profile Builder \u2013 Beautiful User Registration Forms, Use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109414 (The Vitepos \u2013 Point of Sale (POS) for WooCommerce plugin for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109401 (The WP Mail Logging plugin for WordPress is vulnerable to Sensitive In ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109400 (The InstaWP Connect \u2013 1-click WP Staging & Migration plugin for W ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109388 (The HivePress \u2013 Business Directory, Listings & Classified Ads Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109382 (The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109232 (The Salon Booking System \u2013 Appointment Booking for Salons, Barber ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109221 (The Groundhogg \u2014 CRM, Newsletters, and Marketing Automation plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109219 (The Mang Board plugin for WordPress is vulnerable to Arbitrary File Up ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109207 (The RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109193 (The HivePress \u2013 Business Directory, Listings & Classified Ads Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109191 (The Image Hub \u2013 Free Images from Unsplash, Pixabay, Pexels, Openv ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108455 (Out-of-bounds read in Microsoft Office PowerPoint allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108454 (Buffer over-read in Microsoft Office PowerPoint allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108453 (Out-of-bounds read in Microsoft Office PowerPoint allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108452 (Improper limitation of a pathname to a restricted directory ('path tra ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108451 (Numeric truncation error in Microsoft Office Word allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108450 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108449 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108448 (Heap-based buffer overflow in Microsoft Office Outlook allows an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108447 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108446 (Use after free in Microsoft Office Excel allows an unauthorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108445 (Stack-based buffer overflow in Microsoft Office Word allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108444 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108443 (Off-by-one error in Microsoft Office Word allows an unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108442 (Use after free in Microsoft Office Word allows an unauthorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108441 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108440 (Stack-based buffer overflow in Microsoft Office Word allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108439 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108438 (Use after free in Microsoft Office Word allows an unauthorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108437 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108436 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108435 (Untrusted pointer dereference in Microsoft Office Word allows an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108434 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108433 (Reliance on untrusted inputs in a security decision in Microsoft Offic ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108432 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108431 (Stack-based buffer overflow in Microsoft Office Word allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108430 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108429 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108428 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108427 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108426 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-108126 (temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-107770 (The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107768 (The TranslatePress \u2013 Translate Multilingual sites with AI Transla ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107764 (The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Ba ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107758 (The Colibri Page Builder plugin for WordPress is vulnerable to Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107748 (The User Profile Builder \u2013 Beautiful User Registration Forms, Use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107746 (The FunnelKit \u2013 Funnel Builder for WooCommerce Checkout plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107659 (The Modula Image Gallery \u2013 Photo Grid & Video Gallery plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107646 (The HUSKY \u2013 Products Filter for WooCommerce Professional plugin f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107316
REJECTED
CVE-2026-107172
@@ -455,13 +455,13 @@ CVE-2026-106708 (XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Reques
CVE-2026-106700 (ELADMIN v2.7 and earlier contains an improper access control vulnerabi ...)
TODO: check
CVE-2026-105974 (The Visual Form Builder WordPress plugin through 3.1 does not perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105973 (The Visual Form Builder WordPress plugin through 3.1 does not perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105228 (This vulnerability allows remote attackers to disclose sensitive infor ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2026-105227 (This vulnerability allows remote attackers to disclose sensitive infor ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2026-105040 (The EnergizeLab Eilik NestJS auth service accepts a user-controlled us ...)
TODO: check
CVE-2026-105039 (EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1. ...)
@@ -481,55 +481,55 @@ CVE-2026-105033 (The EnergizeLab AI Station (RK3562) firmware image ships with d
CVE-2026-105032 (The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by t ...)
TODO: check
CVE-2026-104932 (The Search Regex plugin for WordPress is vulnerable to PHP Object Inje ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104798 (The My Calendar \u2013 Accessible Event Manager plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104769 (The Debloat \u2013 Remove Unused CSS, Optimize JS plugin for WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104755 (The WP Compress \u2013 Instant Performance & Speed Optimization plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104745 (The Customer Email Verification for WooCommerce plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104730 (The Sunshine Photo Cart \u2013 Client Photo Gallery & Photo Proofing f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104198 (ZoneMinder is a free, open source closed-circuit television software a ...)
TODO: check
CVE-2026-104001 (The The Slim SEO \u2013 AI SEO Plugin, Lightweight, Fast & Automated p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104000 (The Simply Schedule Appointments plugin for WordPress is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103999 (The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103911 (The The Forminator Forms \u2013 Contact Form, Payment Form & Custom Fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103910
REJECTED
CVE-2026-103896 (The 10Web Booster \u2013 Website speed optimization, Cache & Page Spee ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103895 (The miniOrange OTP Login, Verification and SMS Notifications plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103768 (The ELEX WordPress HelpDesk & Customer Ticketing System plugin for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103696 (The Mobile builder WordPress plugin through 1.4.2 does not sanitise an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103525 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103518 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103481 (The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103480 (The Tourfic \u2013 AI Powered Travel Booking, Hotel Booking & Car Rent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102764 (The vulnerability exists within internal components of BeyondTrust\u20 ...)
- TODO: check
+ NOT-FOR-US: BeyondTrust
CVE-2026-101335 (The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form B ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100186 (The User Profile Builder \u2013 Beautiful User Registration Forms, Use ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100159 (The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcod ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-100158 (The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-3778
REJECTED
CVE-2024-58397 (MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4Fil ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f01174ad39d60da2d0b8f57918a3106bfb6708cf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f01174ad39d60da2d0b8f57918a3106bfb6708cf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/6f3e0bb2/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list