Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.8The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to,…CVE-2026-97657 · Tyche Softwares · Abandoned Cart Pro for WooCommerce · CVE.org · NIST NVDOct 13, 2026
Medium5.3The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1.CVE-2026-107652 · CVE.org · NIST NVDOct 13, 2026
Medium6.9Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.CVE-2026-15468 · CVE.org · NIST NVDOct 13, 2026
Medium4.3Contao: Improper access control in the preview links moduleCVE-2026-107850 · CVE.org · FIRST EPSS · GitHub Advisory Database · packagistEPSS 0.2%Oct 9, 2026
Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCVE-2026-102663 · CVE.org · FIRST EPSS · GitHub Advisory Database · goEPSS 0.2%Jul 24, 2026
High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCVE-2026-54641 · CVE.org · GitHub Advisory Database · OSV.dev · mavenJul 6, 2026
High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityCVE-2026-55255 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 0.9%Jun 23, 2026