[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9a216f31 by security tracker role at 2026-10-31T19:15:06+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-96554 (The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-78192 (WebDyne versions from 2.022 before 3.022 for Perl disclose application ...)
 	TODO: check
 CVE-2026-78191 (WebDyne versions from 2.031 before 3.022 for Perl execute files with . ...)
@@ -11,9 +11,9 @@ CVE-2026-78189 (WebDyne versions from 3.007 before 3.022 for Perl execute .psp f
 CVE-2026-78188 (WebDyne versions from 2.014 before 3.022 for Perl issue session cookie ...)
 	TODO: check
 CVE-2026-76010 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN Gallery ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-15272 (The Web 2.0 Directory plugin for WordPress is vulnerable to time-based ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-120210 (FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in th ...)
 	TODO: check
 CVE-2026-120209 (AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secre ...)
@@ -41,77 +41,77 @@ CVE-2026-120199 (LearnHouse before 1.1.1 contains a missing authorization vulner
 CVE-2026-120194 (A flaw was found in json-glib. The JSONPath slice evaluator used by js ...)
 	TODO: check
 CVE-2026-120114 (The Debug Log Manager \u2013 Conveniently Monitor and Inspect Errors p ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-120075 (The WP Activity Log plugin for WordPress is vulnerable to Stored Cross ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-120070 (The User Frontend \u2013 Membership, User Registration, User Profile,  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-119160 (The Smart Post \u2013 Post Grid, Post Carousel, Post Slider Gutenberg  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-119096 (The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable t ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-118235 (The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Mult ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-118147 (Improper certificate validation in Visual Studio allows an unauthorize ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2026-118057 (The Shield Security \u2013 Smart Bot Blocking, Brute-Force Login Prote ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-117681 (A flaw was found in konflux-ci. This vulnerability allows privilege es ...)
 	TODO: check
 CVE-2026-116964 (A flaw was found in konflux-ci. An attacker with repository write acce ...)
 	TODO: check
 CVE-2026-116752 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-116535 (The SEOPress \u2013 AI SEO Plugin & On-site SEO plugin for WordPress i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-116512 (The Project Manager \u2013 AI Powered Project Management, Task Managem ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-116086 (A flaw was found in konflux-ci. An attacker with permission to trigger ...)
 	TODO: check
 CVE-2026-114217 (A flaw was found in konflux-ci. Continuous Integration (CI) automation ...)
 	TODO: check
 CVE-2026-111592 (The Co-Authors, Multiple Authors and Guest Authors in an Author Box wi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-111070 (The Content Pilot \u2013 Autoblogging & Affiliate Marketing Suite plug ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-110530 (The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-110023 (The WP Data Access \u2013 App Builder for Tables, Forms, Dashboards, C ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-109367 (The All in One SEO \u2013 AI SEO Plugin to Boost SEO Rankings & Traffi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-109231 (The Germanized for WooCommerce plugin for WordPress is vulnerable to U ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-109197 (The WP Directory Kit plugin for WordPress is vulnerable to generic SQL ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-107759 (The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulner ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-107711 (The FlexStock \u2013 Product Stock Sync with Google Sheets for WooComm ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-104926 (The WooCommerce Extra Product Options Pro plugin for WordPress is vuln ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-104012 (The Rox Appointment Booking \u2013 Appointment Booking Scheduling Solu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-103997 (The Redux Framework plugin for WordPress is vulnerable to authorizatio ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-103962 (The User Frontend \u2013 Membership, User Registration, User Profile,  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-103915 (The Booking for Appointments and Events Calendar \u2013 Amelia plugin  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-103898 (The Wp Social Login and Register Social Counter plugin for WordPress i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-103882 (The Acadlix LMS \u2013 AI Quiz Maker, Online Exam & Course Plugin for  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-102212 (Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX fir ...)
-	TODO: check
+	NOT-FOR-US: Digi
 CVE-2026-101325 (The Newsletters plugin for WordPress is vulnerable to time-based SQL I ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-100151 (The Ninja Forms \u2013 Contact Form Builder with Calculators, Quizzes, ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-9462 (The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Inje ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-11455 (The Perfect Images plugin for WordPress is vulnerable to unauthorized  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-XXXX [GHSA-4pp3-6hmx-mfmg: Memory exhaustion DoS via crafted QuickTime dref/elst/keys/stsd atoms in module.audio-video.quicktime.php]
 	- php-getid3 1.9.28+dfsg-1
 	NOTE: https://github.com/JamesHeinrich/getID3/security/advisories/GHSA-4pp3-6hmx-mfmg



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a216f31da14fa1002fb52faf36e8b2be975618c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9a216f31da14fa1002fb52faf36e8b2be975618c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/8d3fe564/attachment.htm>