CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- productdesignerapp product designer appProduct Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design7.5 High
- ahsangadit viable url media uploaderViable URL Media Uploader <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- kazukiyanamoto post views stats counterPost Views Stats Counter <= 1.1.7 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header7.2 High
- rameez iqbal real estate manager – property listing and agent managementReal Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter6.4 Medium
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Arbitrary File Upload8.6 High
- apache software foundation plc4xApache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them8.5 High
- apache software foundation plc4xApache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths8.7 High
- apache software foundation plc4xApache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser8.7 High
- pgpool global development group pgpool-iiPgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an...6.9 Medium
- pgpool global development group pgpool-iiPgpool-II inserts sensitive information into log file, which may allow an authenticated attacker...5.3 Medium
- pgpool global development group pgpool-iiA NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated...8.7 High
- apache software foundation plc4xApache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade9.2 Critical
- basercms user community basercmsA missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information.6.9 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter6.4 Medium
- wpdirectorykit wp directory kitWP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter6.5 Medium
- stylemix motors – car dealership & classified listings pluginMotors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters7.5 High
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute6.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute6.4 Medium
- nextendweb smart slider 3Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block6.4 Medium
- devitemsllc ht mega addons for elementor – elementor widgets & template builderHT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting6.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title6.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter6.4 Medium
- basercms user community basercmsA stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.5.1 Medium
- basercms user community basercmsA stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web brow…5.1 Medium
- basercms user community basercmsA cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.5.1 Medium
- pgpool global development group pgpool-iiA stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an...8.7 High
- pgpool global development group pgpool-iiAn out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated...7.1 High
- pgpool global development group pgpool-iiAn improper certificate validation vulnerability exists in Pgpool-II, which may allow an...6.9 Medium
- pgpool global development group pgpool-iiAn out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated...8.7 High
- basercms users community bcaddonmigratorWhen converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config...8.6 High
- liquid web / stellarwp givewpWordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability9.1 Critical
- croixhaug simply schedule appointmentsSimply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter7.5 High
- containers podmanPodman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation10.0 Critical
- apos37 broken link notifierBroken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass5.8 Medium
- unknown course booking systemCourse Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export5.3 Medium
- unknown media library organizerMedia Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation2.7 Low
- unknown yayreviewsYayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API5.3 Medium
- inspirelabs inpost plInPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook5.3 Medium
- soft8soft llc verge3d publishing and e-commerceVerge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API8.8 High
- keywordrush content eggContent Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue6.8 Medium
- freshlight lab wp mobile menuWP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF7.1 High
- exactly www ewww image optimizerEWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler4.4 Medium
- exactly www ewww image optimizerEWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta6.6 Medium
- unknown image optimizerImage Optimizer by Elementor < 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure via Discarded REST Permission Callbacks4.3 Medium
- creative motion robin image optimizerRobin Image Optimizer 2.0.0 - 2.0.7 - Unauthenticated Stored XSS via WebP URL Delivery HTML Parser7.5 High
- creative motion robin image optimizerRobin Image Optimizer < 2.0.8 - Subscriber+ Plugin Settings Disclosure via fy_ajax4.3 Medium
- unknown vayu xVayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation7.1 High
- unknown safe redirect managerSafe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules3.4 Low
- unknown hostinger reachHostinger Reach 1.0.6 - 1.8.2 - Contributor+ Stored XSS via formId Elementor Widget Attribute6.8 Medium
- shazahm1hotmailcom connections business directoryConnections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes5.3 Medium
- Show moreLoading…