Burning hot

Critical signals — ransomware, KEV, and high-EPSS activity

Back to overview

CVE-2026-110152debianchromium+11d ago2026-10-13 21:01

Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)CVE-2026-16740tr7 cyber defense inc.tr7 asp8h ago2026-10-14 12:47Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.CVE-2026-16741tr7 cyber defense inc.tr7 asp8h ago2026-10-14 12:42Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.CVE-2026-108291itthinxaffiliates9h ago2026-10-14 12:08Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.CVE-2026-107424m a vinoth kumarfrontend dashboard9h ago2026-10-14 12:08Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.CVE-2026-371071d ago2026-10-13 00:00

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component CVE-2026-62025tailored mediatailored tools+14d ago2026-10-10 19:35

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.CVE-2026-39802everestthemeseverest_backup+14d ago2026-10-10 19:34

Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.CVE-2026-39774tourfic ai studiotourfic pro+18d ago2026-10-06 08:34

The Tourfic Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.17.3. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for their role.CVE-2026-103065themeumkirki+111d ago2026-10-03 14:00

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.CVE-2026-94389acymailing newsletter teamacymailing smtp newsletter+114d ago2026-09-30 12:27

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 11.0.5. This is due to insufficient validation of user supplied input before it is executed. This makes it possible for unauthenticated attackers to execute arbitrary code on the server.CVE-2026-75799unknownyahman add-ons+121d ago2026-09-23 06:00

The YAHMAN Add-ons plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.9.30. This is due to insufficient validation of user supplied input before it is executed. This makes it possible for unauthenticated attackers to execute arbitrary code on the server.CVE-2026-84750unknownultra addons for contact form 7+125d ago2026-09-19 06:00

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions 3.2.4 to 3.5.50. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server, which may make remote code execution possible.CVE-2026-88795unknownwpshopgermany it-recht kanzlei+127d ago2026-09-17 06:00

The wpShopGermany IT-RECHT KANZLEI plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.3. This is due to insufficient validation of user supplied input before it is executed. This makes it possible for unauthenticated attackers to execute arbitrary code on the server.CVE-2026-85128unknownchoose user role at registration+127d ago2026-09-17 06:00

The Choose User Role at Registration for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.2. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for their role.CVE-2024-3094alpinelighttpd+42y ago2024-03-29 16:51

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.CVE-2026-104748wordpresssimple-form+113h ago2026-10-14 07:43

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capability check for role assignment and the `save_custom_fields_to_user_meta()` function using an exclusion list that omits `wp_capabilities`, combined with `get_form_settings()` returning a hard-coded defaults array that unconditionally enables meta writing regardless of the supplied `form_id`. This makes it possible for unauthenticated attackers to create a new Administrator-level WordPress account by supplying `wp_capabilities[administrator]=1` alongside standard registration fields. The nonce required by the endpoint is publicly emitted into the `front_end_data` JavaScript object on every front-end page via `wp_enqueue_scripts`, making it trivially obtainable by any unauthenticated visitor before submitting the malicious request.CVE-2026-89310jtl sw gmbhjtl-wms14h ago2026-10-14 06:50

A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.CVE-2026-87855ntbykjtl-connector for woocommerce+117h ago2026-10-14 03:40

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation in handleImagePush(). This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.CVE-2026-104800streetforce1age-gate+117h ago2026-10-14 03:39

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with unsanitized injection of POST parameters directly into generated PHP source written to an included file. This makes it possible for unauthenticated attackers to execute code on the server. This is possible because admin.php does not load WordPress and carries no ABSPATH guard, making it a fully unauthenticated entry point regardless of the decorative capability arguments registered via the plugin's simulated menu API.