[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dd577a3d by security tracker role at 2026-10-25T07:15:01+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-94295 (The Chikkili- Google Pay India for Woocommerce WordPress plugin throug ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-89284
 	REJECTED
 CVE-2026-116046 (A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerabi ...)
@@ -29,37 +29,37 @@ CVE-2026-115982 (A vulnerability was detected in phpIPAM up to 1.8.3. Affected b
 CVE-2026-115981 (A security vulnerability has been detected in phpIPAM up to 1.8.3. Aff ...)
 	TODO: check
 CVE-2026-115251 (The Duplicator  WordPress plugin before 5.0.0 does not restrict its on ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-115214 (The Datawiza Proxy Auth Plugin  WordPress plugin before 1.1.1 does not ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-115183 (The Qi Addons For Elementor WordPress plugin before 1.11.2 does not pr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-114743 (The InstaWP Connect  WordPress plugin before 0.1.4.2 does not perform  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-114742 (The WPVR  WordPress plugin before 9.0.3 does not perform object-level  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-114741 (The WPVR  WordPress plugin before 9.0.3 does not perform object-level  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-114740 (The WPVR  WordPress plugin before 9.1.3 does not correctly check user  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111981 (The GiveWP  WordPress plugin before 4.19.0.1 does not perform a capabi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111980 (The GiveWP  WordPress plugin before 4.19.0.1 does not correctly determ ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111979 (The GiveWP  WordPress plugin before 4.19.0.1 does not properly sanitis ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111978 (The GiveWP  WordPress plugin before 4.19.0.1 does not properly validat ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111976 (The GiveWP  WordPress plugin before 4.19.0.1 does not perform any stat ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111326
 	REJECTED
 CVE-2026-110285 (The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verif ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-109111
 	REJECTED
 CVE-2025-15705 (The Contact Form by Supsystic  WordPress plugin before 1.8.0 does not  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-94075 (Deserialization of Untrusted Data vulnerability in Tribulant Software  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-116020 (BookStack before 26.09.2 contains an incorrect authorization vulnerabi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd577a3df0de031b2736e5a37fc68b0cf920449f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd577a3df0de031b2736e5a37fc68b0cf920449f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/7fab3c9d/attachment.htm>