CVEs published in November 2026
7,953 vulnerabilities, 680 critical, 12 exploited.
- unknown fiber adminFiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header9.0 Critical
- tournamatchTournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API5.3 Medium
- tournamatchTournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion9.6 Critical
- unknown live composerLive Composer < 2.1.23 - Contributor+ Stored XSS via Post Module Pagination6.8 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDOR4.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Order and Payment Information Disclosure via Payment Receipt4.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image Field6.5 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action5.0 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing Checkout3.1 Low
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR4.3 Medium
- unknown advanced custom fields (acf®)Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path2.7 Low
- unknown advanced custom fields (acf®)Advanced Custom Fields 6.2.0 - 6.8.10 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR2.7 Low
- unknown advanced custom fields (acf®)Advanced Custom Fields < 6.8.11 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields2.7 Low
- jgwhite33 wp google review sliderWP Google Review Slider < 18.11 - Google API Settings Update via CSRF4.3 Medium
- fv flowplayer video player flowplayer video player, unknown fv flowplayer video player +1 moreFV Player < 7.5.57.7212 - Unauthenticated Stored XSS via Comment Popup7.5 High
- unknown live composerLive Composer < 2.1.23 - Admin+ Stored XSS via Partner Slug3.5 Low
- ibm api connectIBM API Connect Denial of Service9.6 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect6.8 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect5.1 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.1 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect7.2 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect6.5 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect6.8 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect7.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect5.9 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect3.8 Low
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.3 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.4 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.3 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect4.3 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect5.0 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect7.6 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.9 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.4 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.8 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.8 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.0 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.9 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect7.2 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect7.7 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.9 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect8.5 High
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.6 Critical
- ibm api connectMultiple Vulnerabilities in IBM API Connect6.4 Medium
- ibm api connectMultiple Vulnerabilities in IBM API Connect9.6 Critical
- Show moreLoading…