Application Security Detections Published in September 2026
Table of Contents
In September, Qualys Web Application Scanning released QIDs targeting vulnerabilities in several widely used software products and frameworks, including:
Next.js, WordPress, OpenSSL, Kibana, JFrog Artifactory, Apache APISIX, cPanel, Jenkins, IBM WebSphere Application Server, Progress Telerik UI for ASP.NET AJAX, Craft CMS, Langflow, PaperCut NG/MF, LiteLLM, Grafana, Dify, Ollama, Traefik, JetBrains YouTrack, Adobe ColdFusion, Microsoft SharePoint, Ivanti Endpoint Manager Mobile (EPMM), Ivanti Sentry, CyberPanel, Adobe Magento, GitLab CE/EE, Apache ActiveMQ, Apache Artemis, NGINX, XWiki, Apache NiFi, FlowiseAI, pgAdmin, AdonisJS, Apache Airflow, Joomla! SP Page Builder, Delmia Apriso, Adobe Experience Manager, Spotfire, Apache Tomcat, Zohocorp ManageEngine ADSelfService Plus, Zimbra, NetScaler ADC/Gateway
Details about the following QIDs can be found in our knowledge base. Please review reports of the scanned applications for these detections and, if any are identified, follow the steps provided in the knowledge base to ensure applications are protected against the reported vulnerabilities. Immediate resolution of these vulnerabilities as soon as they are detected should be a priority for all organizations. If not addressed, these vulnerabilities can pose security risks, such as breaches, unauthorized access, and various malicious activities.
| QID | Title |
| 151111 | Next.js Remote Code Execution via Windows Path Traversal Vulnerability (CVE-2026-75604) |
| 154191 | WordPress Core Cross-Site Scripting (XSS) Vulnerability (CVE-2026-93485) |
| 154192 | WordPress Develop Core: Local File Inclusion Vulnerability (CVE-2026-87902) |
| 520237 | OpenSSL DTLS Memory Amplification Denial of Service (DoS) Vulnerability (CVE-2026-54874) |
| 520238 | OpenSSL Heap Buffer Overflow Vulnerability (CVE-2026-63072) |
| 520243 | Kibana Resource Exhaustion DoS Vulnerability (CVE-2026-33465) |
| 520244 | Kibana Workflow Privilege Escalation Vulnerability (CVE-2026-63137) |
| 520245 | Kibana NoSQL Injection Information Disclosure Vulnerability (CVE-2026-63138) |
| 520246 | Kibana Memory Exhaustion DoS Vulnerability (CVE-2026-72628) |
| 520247 | Kibana Privilege Monitoring Authorization Bypass Vulnerability (CVE-2026-72633) |
| 520248 | Kibana Authorization Bypass Vulnerability (CVE-2026-72641) |
| 520249 | Kibana Uncaught Exception DoS Vulnerability (CVE-2026-72644) |
| 520250 | Kibana Resource Exhaustion DoS Vulnerability (CVE-2026-72652) |
| 520251 | Kibana Privilege Escalation Information Disclosure Vulnerability (CVE-2026-72654) |
| 520252 | Kibana Memory Exhaustion DoS Vulnerability (CVE-2026-72682) |
| 520253 | Kibana Path Traversal Resource Deletion Vulnerability (CVE-2026-78592) |
| 520254 | Kibana Missing Authorization in Entity Store Vulnerability (CVE-2026-78597) |
| 520255 | Kibana Authorization Bypass Vulnerability (CVE-2026-78603) |
| 520256 | Kibana Username Collision Authorization Bypass Vulnerability (CVE-2026-78606) |
| 520257 | Kibana Missing Authorization in APM Integration Vulnerability (CVE-2026-78608) |
| 520258 | JFrog Artifactory Authentication Bypass Vulnerability (CVE-2026-82329) |
| 520259 | JFrog Artifactory Server-Side Request Forgery Vulnerability (CVE-2026-70551) |
| 520260 | JFrog Artifactory Improper Authorization Vulnerability (CVE-2026-70550) |
| 520261 | JFrog Artifactory Server-Side Request Forgery Vulnerability (CVE-2026-70548) |
| 520262 | JFrog Artifactory Missing Authorization Vulnerability (CVE-2026-69104) |
| 520263 | Kibana Observable Response Discrepancy Information Disclosure Vulnerability (CVE-2026-78584) |
| 520264 | Kibana Memory Exhaustion DoS Vulnerability (CVE-2026-78586) |
| 520265 | Kibana Path Traversal Resource Deletion Vulnerability (CVE-2026-78590) |
| 520266 | Kibana Path Traversal Resource Deletion Vulnerability (CVE-2026-78591) |
| 520267 | Kibana Machine Learning Authorization Bypass Vulnerability (CVE-2026-78598) |
| 520268 | Kibana Path Traversal in Kibana Fleet Vulnerability (CVE-2026-78599) |
| 520269 | Kibana Missing Authorization Information Disclosure Vulnerability (CVE-2026-78601) |
| 520270 | Kibana Machine Learning Authorization Bypass Vulnerability (CVE-2026-82293) |
| 520271 | Kibana Privilege Escalation via Authorization Bypass Vulnerability (CVE-2026-78583) |
| 520272 | Kibana Server-Side Template Injection Vulnerability (CVE-2026-78593) |
| 520273 | Kibana Missing Authorization in Fleet Feature Vulnerability (CVE-2026-78595) |
| 520274 | Kibana Missing Authorization in Kibana Entity Analytics Vulnerability (CVE-2026-78596) |
| 520275 | Kibana Access Control Denial of Service Vulnerability (CVE-2026-82298) |
| 520276 | Kibana Access Control Information Disclosure Vulnerability (CVE-2026-82299) |
| 520277 | Kibana Authorization Bypass Vulnerability (CVE-2026-82302) |
| 520278 | Apache APISIX HTTP Request Smuggling Vulnerability (CVE-2026-74848) |
| 520279 | Apache APISIX GraphQL Algorithmic Complexity Denial of Service Vulnerability (CVE-2026-75005) |
| 520280 | Apache APISIX LDAP Authentication Bypass Vulnerability (CVE-2026-75020) |
| 520281 | cPanel SQLi leading to RCE Vulnerability (CVE-2026-67401) |
| 520282 | Jenkins Path Traversal/Arbitrary File Write Vulnerability (CVE-2026-33001) |
| 520283 | Jenkins Path Traversal/Arbitrary File Write Vulnerability (CVE-2026-70427) |
| 520284 | Jenkins Path Traversal Vulnerability (CVE-2026-70428) |
| 520285 | Jenkins Authentication Bypass/Privilege Escalation Vulnerability (CVE-2026-70429) |
| 520286 | Jenkins Privilege Escalation/Deserialization Vulnerability (CVE-2026-70430) |
| 520287 | Jenkins RCE Vulnerability (CVE-2026-84645) |
| 520288 | Jenkins Deserialization Vulnerability (CVE-2026-84646) |
| 520289 | Jenkins XSS Vulnerability (CVE-2026-84648) |
| 520290 | Jenkins Deserialization Vulnerability (CVE-2026-84650) |
| 520291 | Jenkins Privilege Escalation/Access Control Bypass Vulnerability (CVE-2026-84651) |
| 520292 | Jenkins Session Fixation Vulnerability (CVE-2026-84652) |
| 520293 | IBM WebSphere Application Server Denial of Service (DoS) Vulnerability (CVE-2026-9336) |
| 520294 | IBM WebSphere Application Server Denial of Service (DoS) Vulnerability (CVE-2026-9338) |
| 520295 | IBM WebSphere Application Server Security Bypass/Privilege Escalation Vulnerability (CVE-2026-9176) |
| 520296 | IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2026-9327) |
| 520297 | IBM WebSphere Application Server SSRF Vulnerability (CVE-2026-9667) |
| 520298 | IBM WebSphere Application Server HTTP Request Smuggling Vulnerability (CVE-2026-15396) |
| 520299 | IBM WebSphere Application Server Open Redirect Vulnerability (CVE-2026-15412) |
| 520300 | IBM WebSphere Application Server HTTP Request Smuggling Vulnerability (CVE-2026-15634) |
| 520301 | IBM WebSphere Application Server SSRF Vulnerability (CVE-2026-15887) |
| 520302 | IBM WebSphere Application Server Authentication Bypass Vulnerability (CVE-2026-16185) |
| 520303 | IBM WebSphere Application Server XSS Vulnerability (CVE-2026-16186) |
| 520304 | IBM WebSphere Application Server Authentication Bypass Vulnerability (CVE-2026-16187) |
| 520305 | IBM WebSphere Application Server Log Injection Vulnerability (CVE-2026-16188) |
| 520306 | IBM WebSphere Application Server Log Injection Vulnerability (CVE-2026-16189) |
| 520307 | IBM WebSphere Application Server Authorization Bypass Vulnerability (CVE-2026-16190) |
| 520308 | IBM WebSphere Application Server Authentication Bypass Vulnerability (CVE-2026-16435) |
| 520309 | cPanel and WHM Privilege Escalation Vulnerability (CVE-2026-87899) |
| 520321 | Kibana Authorization Bypass Vulnerability (CVE-2026-72662) |
| 520322 | Kibana Privilege Escalation Vulnerability (CVE-2026-72668) |
| 520323 | Kibana Missing Authorization Vulnerability (CVE-2026-78582) |
| 520324 | Kibana Denial of Service (DoS) Vulnerability (CVE-2026-94400) |
| 531940 | Progress Telerik UI for ASP.NET AJAX RadAsyncUpload Unsafe Type Resolution RCE Vulnerability (CVE-2026-13181) |
| 532234 | WordPress Depicter Plugin: Arbitrary File Upload Vulnerability (CVE-2026-15049) |
| 532261 | WordPress Mailgun Plugin: Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-78003) |
| 532262 | WordPress Dokan Plugin: Improper Access Control Vulnerability (CVE-2026-16576) |
| 532263 | WordPress Brave Popup Builder Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-77115) |
| 532325 | WordPress All-in-One WP Migration and Backup Plugin: SQL Injection Vulnerability (CVE-2026-19949) |
| 532326 | WordPress WP Fastest Cache Plugin: Host Header Injection Vulnerability (CVE-2026-74932) |
| 532328 | WordPress Cleantalk Spam Protect Plugin: Cross-Site Scripting Vulnerability (CVE-2026-77830) |
| 532344 | Craft CMS Remote Code Execution (RCE) Vulnerability (CVE-2026-79988) |
| 532345 | WordPress GiveWP Plugin: PHP Object Injection Vulnerability (CVE-2026-82222) |
| 532346 | WordPress SAML Single Sign On Plugin: Authentication Bypass Vulnerability (CVE-2026-75807) |
| 532347 | WordPress One User Avatar Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-18983) |
| 532348 | WordPress Custom User Registration Plugin: Privilege Escalation Vulnerability (CVE-2026-15369) |
| 532349 | WordPress MyHome Core Plugin: Authentication Bypass Vulnerability (CVE-2026-15980) |
| 532350 | Langflow Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-18545) |
| 532351 | Langflow Remote Code Execution (RCE) Vulnerability (CVE-2026-18729) |
| 532352 | Langflow Authentication Bypass Vulnerability (CVE-2026-18891) |
| 532353 | Langflow Path Traversal Vulnerability (CVE-2026-18899) |
| 532354 | Langflow User Identifier Namespace Collision Vulnerability (CVE-2026-18904) |
| 532355 | Langflow Remote Code Execution (RCE) Vulnerability (CVE-2026-19286) |
| 532356 | Langflow Improper Authorization Flow Access Vulnerability (CVE-2026-19294) |
| 532357 | Langflow Authenticated Command Injection Vulnerability (CVE-2026-19295) |
| 532358 | WordPress Master Addons for Elementor Plugin: Arbitrary File Upload Vulnerability (CVE-2026-75921) |
| 532359 | WordPress WP Rocket Plugin: Cross-Site Scripting Vulnerability (CVE-2026-5934) |
| 532360 | WordPress Welcart e-Commerce Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-19914) |
| 532361 | WordPress WPLP Cookie Consent Plugin: Arbitrary File Upload Vulnerability (CVE-2026-75865) |
| 532362 | WordPress Affiliate Super Assistent Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-19573) |
| 532363 | WordPress Gravity Forms Plugin: Arbitrary File Upload Vulnerability (CVE-2026-19513) |
| 532364 | WordPress FS Poster Plugin: Remote Code Execution (RCE) Vulnerability (CVE-2026-10195) |
| 532365 | WordPress Frontend Admin Plugin: Arbitrary File Deletion Vulnerability (CVE-2026-19952) |
| 532366 | PaperCut NG/MF Multiple Vulnerabilities (CVE-2026-81578,CVE-2026-82078) |
| 532367 | WordPress Broken Link Checker Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-75528) |
| 532368 | WordPress Listdom Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-19796) |
| 532369 | WordPress Support Genix Plugin: Authentication Bypass Vulnerability (CVE-2026-19806) |
| 532370 | WordPress Amelia (Premium) Plugin: Privilege Escalation Vulnerability (CVE-2026-9055) |
| 532371 | LiteLLM Server-Side Template Injection (SSTI) Vulnerability (CVE-2026-37004) |
| 532372 | LiteLLM Credential Exposure Vulnerability (CVE-2026-84377) |
| 532373 | Grafana SAML Assertion Replay Vulnerability (CVE-2026-12704) |
| 532374 | Grafana Session Takeover Vulnerability (CVE-2026-14199) |
| 532375 | Grafana Denial of Service (DoS) Vulnerability (CVE-2026-19475) |
| 532376 | WordPress Fusion Builder Plugin: Arbitrary File Read Vulnerability (CVE-2026-4782) |
| 532377 | WordPress Fusion Builder Plugin: SQL Injection Vulnerability (CVE-2026-4798) |
| 532378 | WordPress ACF Extended Plugin: Account Takeover Vulnerability (CVE-2026-12526) |
| 532379 | WordPress ACF Extended Plugin: Privilege Escalation Vulnerability (CVE-2026-80467) |
| 532380 | WordPress User Frontend Plugin: PHP Object Injection Vulnerability (CVE-2026-19116) |
| 532381 | WordPress OAuth SSO Plugin: Account Takeover Vulnerability (CVE-2026-82183) |
| 532382 | WordPress Simple Ajax Chat Plugin: Cross-site Scripting (XSS) Vulnerability (CVE-2026-81807) |
| 532383 | WordPress Photo Gallery Plugin: Cross-site Scripting (XSS) Vulnerability (CVE-2026-12865) |
| 532384 | WordPress Ultimate Social Media Icons Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-19723) |
| 532385 | WordPress Formidable Charts Plugin: Directory Traversal Vulnerability (CVE-2026-15990) |
| 532386 | WordPress Developer Tools Plugin: Arbitrary File Upload Vulnerability (CVE-2025-9314) |
| 532387 | WordPress Ninja Forms Layout Styles Plugin: PHP Object Injection Vulnerability (CVE-2026-81772) |
| 532388 | WordPress Mang Board WP Plugin: Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-84770) |
| 532389 | Craft CMS Missing Authorization Vulnerability (CVE-2026-84792) |
| 532390 | Craft CMS Cross-Site Scripting (XSS) Vulnerability (CVE-2026-84793) |
| 532391 | Craft CMS Authorization Bypass Vulnerability (CVE-2026-84794) |
| 532392 | Craft CMS Improper Privilege Management Vulnerability (CVE-2026-84795) |
| 532393 | Craft CMS GraphQL Site Scope Bypass Vulnerability (CVE-2026-84796) |
| 532394 | Craft CMS Authorization Bypass Vulnerability (CVE-2026-84797) |
| 532395 | Craft CMS Authorization Bypass Vulnerability (CVE-2026-84798) |
| 532396 | Craft CMS GraphQL Authorization Bypass Vulnerability (CVE-2026-84799) |
| 532397 | Craft CMS Missing Authorization Vulnerability (CVE-2026-84800) |
| 532398 | Craft CMS Missing Authorization Vulnerability (CVE-2026-84801) |
| 532399 | Craft CMS Information Disclosure Vulnerability (CVE-2026-84802) |
| 532400 | Craft CMS GraphQL Site Scope Authorization Bypass Vulnerability (CVE-2026-79990) |
| 532401 | Craft CMS SQL Injection Vulnerability (CVE-2026-79991) |
| 532402 | Dify Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85021) |
| 532403 | Dify Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85022) |
| 532404 | WordPress Mstore Api Plugin: Authentication Bypass Vulnerability (CVE-2026-13447) |
| 532405 | WordPress Hummingbird Plugin: Remote Code Execution Vulnerability (CVE-2026-83627) |
| 532406 | Ollama Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-85180) |
| 532407 | Traefik Authorization Bypass Vulnerability (CVE-2026-85594) |
| 532408 | Traefik Authentication Bypass Vulnerability (CVE-2026-85595) |
| 532409 | Traefik Authentication Bypass Vulnerability (CVE-2026-85596) |
| 532410 | Traefik Improper Authentication Vulnerability (CVE-2026-85597) |
| 532411 | WordPress SureCart Plugin: Account Takeover Vulnerability (CVE-2026-18480) |
| 532412 | WordPress User Profile Builder Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-6431) |
| 532413 | WordPress RegistrationMagic Plugin: Improper Authentication Vulnerability (CVE-2026-77826) |
| 532414 | WordPress Welcart e-Commerce Plugin: PHP Object Injection Vulnerability (CVE-2026-19887) |
| 532415 | WordPress Mail Mint Plugin: PHP Object Injection Vulnerability (CVE-2026-10196) |
| 532416 | WordPress JCH Optimize Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-84934) |
| 532417 | WordPress Music Store Plugin: SQL Injection Vulnerability (CVE-2026-82304) |
| 532418 | WordPress W3 Total Cache Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-78438) |
| 532419 | WordPress Ninja Forms Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-19769) |
| 532420 | WordPress Abandoned Cart Pro for WooCommerce Plugin: Privilege Escalation Vulnerability (CVE-2026-81543) |
| 532421 | WordPress Kirki Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-84219) |
| 532422 | JetBrains YouTrack Authentication Bypass via Self-Asserted Email Vulnerability (CVE-2026-86478) |
| 532423 | JetBrains YouTrack Insecure Direct Object Reference (IDOR) Vulnerability (CVE-2026-86479) |
| 532424 | JetBrains YouTrack Signed URL Reuse Information Disclosure Vulnerability (CVE-2026-86481) |
| 532425 | JetBrains YouTrack Unchecked Group Membership Privilege Escalation Vulnerability (CVE-2026-86482) |
| 532426 | JetBrains YouTrack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2026-86483) |
| 532427 | JetBrains YouTrack AngularJS Template Injection Stored XSS Vulnerability (CVE-2026-86484) |
| 532428 | JetBrains YouTrack IP Spoofing via HTTP Headers Vulnerability (CVE-2026-86485) |
| 532429 | JetBrains YouTrack VCS Webhook Authentication Bypass Vulnerability (CVE-2026-86486) |
| 532430 | JetBrains YouTrack WebSocket Authorization Bypass Vulnerability (CVE-2026-86487) |
| 532431 | JetBrains YouTrack Insecure Direct Object Reference (IDOR) Vulnerability (CVE-2026-86488) |
| 532432 | JetBrains YouTrack Insecure Direct Object Reference (IDOR) Vulnerability (CVE-2026-86489) |
| 532433 | JetBrains YouTrack Improper Permission Checks Vulnerability (CVE-2026-86490) |
| 532434 | JetBrains YouTrack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2026-86491) |
| 532435 | JetBrains YouTrack Cross-Tenant Token Theft Vulnerability (CVE-2026-86492) |
| 532436 | JetBrains YouTrack Improper Permission Checks Vulnerability (CVE-2026-86493) |
| 532437 | JetBrains YouTrack Whiteboard Cloning Authorization Bypass Vulnerability (CVE-2026-86494) |
| 532438 | JetBrains YouTrack Missing Permission Checks Vulnerability (CVE-2026-86495) |
| 532439 | JetBrains YouTrack Missing Access Control Information Disclosure Vulnerability (CVE-2026-86496) |
| 532440 | JetBrains YouTrack Mailbox Credential Exfiltration via Authentication Bypass Vulnerability (CVE-2026-86497) |
| 532441 | JetBrains YouTrack Unauthorized Entity Modification via PUT Requests Vulnerability (CVE-2026-86498) |
| 532442 | JetBrains YouTrack Information Disclosure Through Search Fields Vulnerability (CVE-2026-86499) |
| 532443 | JetBrains YouTrack Missing Authorization Check Privilege Escalation Vulnerability (CVE-2026-86500) |
| 532444 | WordPress Automation Web Platform Plugin: Privilege Escalation Vulnerability (CVE-2026-14281) |
| 532445 | WordPress Frontend Admin Plugin: Authentication Bypass Vulnerability (CVE-2026-75816) |
| 532446 | WordPress JetFormBuilder Plugin: Sensitive Information Disclosure Vulnerability (CVE-2026-19858) |
| 532447 | Progress Telerik UI for ASP.NET AJAX Path Traversal Vulnerability (CVE-2026-18672) |
| 532448 | Progress Telerik UI for ASP.NET AJAX File Browser Path Manipulation Vulnerability (CVE-2026-19219) |
| 532449 | Progress Telerik UI for ASP.NET AJAX Sensitive Information Disclosure Vulnerability (CVE-2026-13182) |
| 532450 | Progress Telerik UI for ASP.NET AJAX Non-Constant-Time Comparison Information Disclosure Vulnerability (CVE-2026-13183) |
| 532451 | Progress Telerik UI for ASP.NET AJAX Default HMAC Key Fallback Vulnerability (CVE-2026-13184) |
| 532452 | Progress Telerik UI for ASP.NET AJAX Insecure Deserialization Vulnerability (CVE-2026-13185) |
| 532453 | Progress Telerik UI for ASP.NET AJAX Path Traversal Vulnerability (CVE-2026-13186) |
| 532454 | Progress Telerik UI for ASP.NET AJAX Insecure Deserialization Vulnerability (CVE-2026-13190) |
| 532455 | Adobe ColdFusion Authentication Bypass Leading to Privilege Escalation Vulnerability (CVE-2026-83961) |
| 532456 | Adobe ColdFusion SQL Injection (SQLi) Vulnerability (CVE-2026-75746) |
| 532457 | Adobe ColdFusion Reflected Cross-Site Scripting (XSS) Vulnerability (CVE-2026-75993) |
| 532458 | Adobe ColdFusion Improper Access Control File Read Vulnerability (CVE-2026-75998) |
| 532459 | Adobe ColdFusion Improper Input Validation Remote Code Execution (RCE) Vulnerability (CVE-2026-75999) |
| 532460 | Adobe ColdFusion Uncontrolled Resource Consumption Denial of Service (DoS) Vulnerability (CVE-2026-76000) |
| 532461 | Adobe ColdFusion Reflected Cross-Site Scripting (XSS) Vulnerability (CVE-2026-76002) |
| 532462 | Adobe ColdFusion Eval Injection Remote Code Execution (RCE) Vulnerability (CVE-2026-76190) |
| 532463 | Adobe ColdFusion Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2026-21269) |
| 532464 | WordPress JetFormBuilder Plugin: Cross-Site Scripting Vulnerability (CVE-2026-84817) |
| 532465 | WordPress Everest Forms Plugin: Missing Authorization Vulnerability (CVE-2026-4888) |
| 532466 | WordPress Easy Appointments Plugin: DOM-Based XSS Vulnerability (CVE-2026-81798) |
| 532468 | Craft CMS Multiple Security Vulnerabilities (CVE-2026-86730,CVE-2026-86731,CVE-2026-86732) |
| 532469 | WordPress Live Composer Plugin: PHP Object Injection Vulnerability (CVE-2026-16502) |
| 532470 | WordPress FireBox Plugin: Remote Code Execution (RCE) Vulnerability (CVE-2026-76801) |
| 532471 | WordPress Event Tickets and Registration Plugin: Missing Authorization Vulnerability (CVE-2026-3174) |
| 532472 | WordPress Eventin Plugin: Local File Inclusion (LFI) Vulnerabilities (CVE-2026-15406,CVE-2026-15667) |
| 532473 | WordPress Iubenda Cookie Law Solution Plugin: Cross-Site Scripting (XSS) Vulnerabilities (CVE-2026-77233,CVE-2026-77263) |
| 532474 | WordPress SureForms Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-18406) |
| 532475 | WordPress Gravity Forms Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-16649) |
| 532476 | WordPress Hummingbird Performance Plugin: Code Injection Vulnerability (CVE-2026-19224) |
| 532477 | WordPress WP EasyCart Plugin: Privilege Escalation Vulnerability (CVE-2026-17553) |
| 532478 | Microsoft SharePoint Remote Code Execution Vulnerabilities |
| 532479 | Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2026-69273) |
| 532480 | Microsoft SharePoint Cross-Site Scripting (XSS) Vulnerabilities |
| 532481 | Microsoft SharePoint Information Disclosure Vulnerability (CVE-2026-69409) |
| 532482 | Microsoft SharePoint Privilege Escalation Vulnerability (CVE-2026-69464) |
| 532483 | Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2026-69465) |
| 532484 | Microsoft SharePoint SQL Injection Vulnerability (CVE-2026-69636) |
| 532485 | Microsoft SharePoint Server-Side Request Forgery Vulnerabilities (CVE-2026-69683,CVE-2026-69904) |
| 532486 | Microsoft SharePoint SQL Injection Vulnerability (CVE-2026-69716) |
| 532487 | Microsoft SharePoint Race Condition Vulnerability (CVE-2026-69804) |
| 532488 | Ivanti Endpoint Manager Mobile (EPMM) Missing Authorization Vulnerability (CVE-2026-18851) |
| 532489 | Ivanti Sentry Authentication Bypass Vulnerability (CVE-2026-83527) |
| 532490 | WordPress Loops and Logic Plugin: Sensitive Information Disclosure Vulnerability (CVE-2026-16960) |
| 532491 | WordPress WPBot Plugin: Cross-Site Scripting Vulnerability (CVE-2026-83593) |
| 532492 | WordPress PublishPress Capabilities Plugin: Privilege Escalation Vulnerability (CVE-2026-75927) |
| 532493 | WordPress Elex Request Quote Plugin: SQL Injection Vulnerability (CVE-2026-14962) |
| 532494 | WordPress Contact Form to DB Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-13359) |
| 532495 | WordPress Sidebar Manager Light Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-76562) |
| 532496 | WordPress Bulk Password Reset Plugin: Arbitrary Password Reset Vulnerability (CVE-2026-14873) |
| 532497 | WordPress WPLP Cookie Consent Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-14989) |
| 532498 | WordPress YITH WooCommerce Waitlist Premium Plugin: Privilege Escalation Vulnerability (CVE-2026-14359) |
| 532499 | WordPress NextCart WooCommerce Migration Plugin: Authentication Bypass Vulnerability (CVE-2026-76009) |
| 532500 | CyberPanel Information Disclosure Vulnerability (CVE-2026-87820) |
| 532503 | Craft CMS Remote Code Execution (RCE) Vulnerability (CVE-2026-79987) |
| 532504 | WordPress Zipmoney Payments WooCommerce Plugin: Missing Authorization Vulnerability (CVE-2026-78361) |
| 532505 | WordPress Ultimate Gift Cards Plugin: Improper Access Control Vulnerability (CVE-2026-19436) |
| 532506 | WordPress Vigilant Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-81754) |
| 532507 | WordPress Sticky Chat Widget Plugin: SQL Injection Vulnerability (CVE-2026-15462) |
| 532508 | WordPress UsersWP Plugin: Arbitrary File Deletion Vulnerability (CVE-2026-19991) |
| 532509 | WordPress Unlimited Elements For Elementor Plugin: SQL Injection Vulnerability (CVE-2026-18561) |
| 532510 | WordPress Site Reviews Plugin: PHP Object Injection Vulnerability (CVE-2026-82925) |
| 532511 | WordPress AcyMailing Plugin: Arbitrary File Read Vulnerability (CVE-2026-77807) |
| 532512 | WordPress MiniOrange 2FA Plugin: Missing Authorization Vulnerability (CVE-2026-77770) |
| 532513 | Adobe Magento Arbitrary Code Execution Vulnerability (CVE-2026-75650) |
| 532514 | GitLab CE/EE Arbitrary File Read Vulnerability (CVE-2026-85706) |
| 532515 | WordPress Tutor LMS Plugin: PHP Object Injection Vulnerability (CVE-2026-78175) |
| 532516 | WordPress Really Simple Security Plugin: Authentication Bypass Vulnerability (CVE-2026-89080) |
| 532517 | WordPress wpStoreCart Plugin: PHP Object Injection Vulnerability (CVE-2026-84099) |
| 532518 | WordPress Events Calendar Plugin: PHP Object Injection Vulnerability (CVE-2026-78006) |
| 532519 | WordPress Events Calendar Plugin: Remote Code Execution (RCE) Vulnerability (CVE-2026-78159) |
| 532520 | WordPress Everest Forms Plugin: PHP Object Injection Vulnerability (CVE-2026-62103) |
| 532521 | WordPress Kirki Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-17037) |
| 532522 | WordPress Masteriyo LMS Plugin: PHP Object Injection Vulnerabilities (CVE-2026-82845,CVE-2026-62107) |
| 532523 | WordPress GenieWords Plugin: Missing Authorization Vulnerability (CVE-2026-74933) |
| 532524 | WordPress YayPricing Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-87888) |
| 532525 | WordPress User Registration Plugin: Privilege Escalation Vulnerability (CVE-2026-86406) |
| 532526 | WordPress User Registration Plugin: Privilege Escalation Vulnerability (CVE-2026-80071) |
| 532527 | WordPress Amelia Plugin: Multiple Security Vulnerabilities (CVE-2026-62112,CVE-2026-77705) |
| 532528 | Apache ActiveMQ Improper Input Validation Vulnerability (CVE-2026-74761) |
| 532529 | Apache Artemis Missing Authentication Vulnerability (CVE-2026-49362) |
| 532530 | Apache Artemis Information Disclosure Vulnerability (CVE-2026-49363) |
| 532531 | Apache Artemis Credential Exposure Vulnerability (CVE-2026-49364) |
| 532532 | Apache Artemis Insecure Deserialization Vulnerability (CVE-2026-57822) |
| 532533 | Apache Artemis Missing Authentication Vulnerability (CVE-2026-57967) |
| 532534 | Apache Artemis Queue Deletion Vulnerability (CVE-2026-67593) |
| 532535 | Apache Artemis Denial Of Service Vulnerability (CVE-2026-75880) |
| 532536 | Apache Artemis Missing Authentication Vulnerability (CVE-2026-27446) |
| 532537 | WordPress Bookly Plugin: Insecure Direct Object Reference Vulnerability (CVE-2026-89063) |
| 532538 | WordPress JetFormBuilder Plugin: Privilege Escalation Vulnerability (CVE-2026-12793) |
| 532539 | WordPress WP-Lister Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-18595) |
| 532540 | WordPress Contest Gallery Plugin: Arbitrary File Upload Vulnerability (CVE-2026-78088) |
| 532541 | WordPress TrueBooker Plugin: Missing Authorization Vulnerability (CVE-2026-14349) |
| 532542 | EOL/Obsolete Software: NGINX 1.16.x Detected. |
| 532543 | EOL/Obsolete Software: NGINX 1.17.x Detected |
| 532544 | EOL/Obsolete Software: NGINX 1.18.x Detected |
| 532545 | EOL/Obsolete Software: NGINX 1.19.x Detected |
| 532546 | EOL/Obsolete Software: NGINX 1.20.x Detected |
| 532547 | EOL/Obsolete Software: NGINX 1.21.x Detected |
| 532548 | EOL/Obsolete Software: NGINX 1.22.x Detected |
| 532549 | EOL/Obsolete Software: NGINX 1.23.x Detected |
| 532550 | EOL/Obsolete Software: NGINX 1.24.x Detected |
| 532551 | EOL/Obsolete Software: NGINX 1.25.x Detected |
| 532552 | EOL/Obsolete Software: NGINX 1.26.x Detected |
| 532553 | EOL/Obsolete Software: NGINX 1.27.x Detected |
| 532554 | EOL/Obsolete Software: NGINX 1.28.x Detected |
| 532555 | EOL/Obsolete Software: NGINX 1.29.x Detected |
| 532566 | WordPress Consulting Theme: Privilege Escalation Vulnerability (CVE-2026-14805) |
| 532567 | WordPress Design Scuole Italia Theme: Path Traversal Vulnerability (CVE-2026-87791) |
| 532568 | XWiki Authorization Bypass Vulnerability (CVE-2026-53966) |
| 532569 | LiteLLM Server-Side Request Forgery Vulnerability (CVE-2026-59823) |
| 532570 | WordPress MemberPress Corporate Plugin: Privilege Escalation Vulnerability (CVE-2026-15451) |
| 532571 | WordPress Elementor Pro Plugin: Arbitrary File Upload Vulnerability (CVE-2026-32475) |
| 532572 | WordPress Eventin Plugin: Privilege Escalation Vulnerability (CVE-2026-75983) |
| 532573 | WordPress MotoPress Hotel Booking Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-90650) |
| 532574 | WordPress Paid Downloads Plugin: Arbitrary File Upload Vulnerability (CVE-2026-87935) |
| 532575 | Craft CMS Multiple Security Vulnerabilities (CVE-2026-92589,CVE-2026-92591) |
| 532576 | Craft CMS Cross-Site Scripting (XSS) Vulnerability (CVE-2026-92590) |
| 532577 | Craft CMS Remote Code Execution (RCE) Vulnerability (CVE-2026-92592) |
| 532578 | Craft CMS Server Side Template Injection (SSTI) Vulnerability (CVE-2026-92593) |
| 532579 | Craft CMS Sensitive Information Exposure Vulnerability (CVE-2026-92594) |
| 532580 | Apache NiFi Improper Handling of Content-Encoding Vulnerability (CVE-2026-70469) |
| 532581 | Apache NiFi Missing Authorization Vulnerability (CVE-2026-81866) |
| 532582 | Apache NiFi Missing Authorization Vulnerability (CVE-2026-82561) |
| 532583 | Apache NiFi Missing Authorization Vulnerability (CVE-2026-86089) |
| 532584 | Apache NiFi Path Traversal Vulnerability (CVE-2026-87976) |
| 532585 | FlowiseAI Broken Access Control Vulnerability (CVE-2026-90533) |
| 532586 | FlowiseAI Improper Authorization Vulnerability (CVE-2026-90534) |
| 532587 | FlowiseAI Denial of Service Vulnerability (CVE-2026-90535) |
| 532588 | FlowiseAI Server-Side Request Forgery Vulnerability (CVE-2026-90580) |
| 532589 | FlowiseAI Missing Authorization Vulnerability (CVE-2026-91929) |
| 532590 | FlowiseAI Authorization Bypass Vulnerability (CVE-2026-91930) |
| 532591 | FlowiseAI Remote Code Execution Vulnerability (CVE-2026-91931) |
| 532592 | FlowiseAI Remote Code Execution Vulnerability (CVE-2026-91932) |
| 532593 | FlowiseAI Authorization Bypass Vulnerability (CVE-2026-91933) |
| 532594 | FlowiseAI Arbitrary File Write Vulnerability (CVE-2026-91934) |
| 532595 | FlowiseAI Server-Side Request Forgery Vulnerability (CVE-2026-91935) |
| 532596 | FlowiseAI OS Command Injection Vulnerability (CVE-2026-91936) |
| 532597 | FlowiseAI NoSQL Injection Vulnerability (CVE-2026-91937) |
| 532598 | FlowiseAI Server-Side Request Forgery Vulnerability (CVE-2026-91938) |
| 532599 | WordPress Product Feed Manager Plugin: SQL Injection Vulnerability (CVE-2026-66580) |
| 532600 | WordPress Newsletters Plugin: SQL Injection Vulnerability (CVE-2026-66619) |
| 532601 | WordPress WP Maps Plugin: SQL Injection Vulnerability (CVE-2026-66618) |
| 532602 | WordPress ShortPixel Image Optimizer Plugin: PHP Object Injection Vulnerability (CVE-2026-17086) |
| 532603 | WordPress WPLP Cookie Consent Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85130) |
| 532604 | WordPress Realtyna Organic IDX Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-91014) |
| 532605 | WordPress Organize Series Plugin: SQL Injection Vulnerability (CVE-2026-66630) |
| 532606 | WordPress WpShopGermany Plugin: Remote Code Execution (RCE) Vulnerability (CVE-2026-88795) |
| 532607 | WordPress Xagio SEO Plugin: Cross Site Request Forgery (CSRF) Vulnerability (CVE-2026-78295) |
| 532608 | WordPress Asset CleanUp Plugin: Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-66571) |
| 532609 | WordPress WC Vendors Plugin: SQL Injection Vulnerability (CVE-2026-66625) |
| 532610 | pgAdmin Arbitrary File Write via Symlink Race Condition (TOCTOU) Vulnerability (CVE-2026-86861) |
| 532611 | pgAdmin Connection String Injection Vulnerability (CVE-2026-86862) |
| 532612 | pgAdmin Authentication Bypass Vulnerability (CVE-2026-86863) |
| 532613 | pgAdmin Arbitrary File Write Vulnerability (CVE-2026-86864) |
| 532614 | AdonisJS BodyParser Multipart Path Traversal Arbitrary File Write (CVE-2026-21440) |
| 532615 | WordPress Forminator Forms Plugin: Arbitrary Code Injection Vulnerability (CVE-2026-92229) |
| 532616 | WordPress Forminator Forms Plugin: PHP Object Injection Vulnerability (CVE-2026-87067) |
| 532617 | WordPress ProfilePress Plugin: Arbitrary Code Injection Vulnerability (CVE-2026-85658) |
| 532618 | WordPress Ultimate Member Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85680) |
| 532619 | WordPress All-in-One WP Migration and Backup Plugin: Privilege Escalation Vulnerability (CVE-2026-81810) |
| 532620 | WordPress NextGEN Gallery Plugin: Arbitrary File Upload Vulnerability (CVE-2026-81650) |
| 532621 | WordPress AF Companion Plugin: Remote Code Execution (RCE) Vulnerability (CVE-2026-84738) |
| 532622 | WordPress WP Recipe Maker Plugin: Arbitrary Code Injection Vulnerability (CVE-2026-89274) |
| 532623 | WordPress Complianz GDPR Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-83561) |
| 532624 | WordPress Popup Maker Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-87915) |
| 532625 | WordPress SAML Single Sign On Plugin: Privilege Escalation Vulnerability (CVE-2026-82842) |
| 532626 | WordPress Gravity Forms Plugin: Arbitrary File Upload Vulnerability (CVE-2026-84434) |
| 532627 | WordPress Master Addons for Elementor Plugin: Missing Authorization Vulnerability (CVE-2026-85410) |
| 532628 | WordPress VikBooking Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85127) |
| 532629 | WordPress UsersWP Plugin: Account Takeover Vulnerability (CVE-2026-86814) |
| 532630 | WordPress Easy Form Builder Plugin: Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85122) |
| 532631 | Apache Airflow Authorization Bypass Vulnerability (CVE-2026-75157) |
| 532632 | Apache Airflow Information Disclosure Vulnerability (CVE-2026-75158) |
| 532633 | Apache Airflow Principal Confusion Vulnerability (CVE-2026-82355) |
| 532634 | Apache Airflow Session Management Vulnerability (CVE-2026-86473) |
| 532635 | Joomla! SP Page Builder Extension: Arbitrary File Upload Vulnerability (CVE-2026-48908) |
| 532636 | WordPress Unlimited Elements For Elementor Plugin: PHP Object Injection Vulnerability (CVE-2026-85017) |
| 532637 | WordPress Unbounce Plugin: Missing Authorization Vulnerability (CVE-2026-85574) |
| 532638 | WordPress Botiga Pro Plugin: Privilege Escalation Vulnerability (CVE-2026-86591) |
| 532639 | Delmia Apriso .NET Object Deserialization Vulnerability (CVE-2024-3300) |
| 532640 | Adobe Experience Manager Multiple Security Vulnerabilities (APSB26-98) |
| 532641 | Traefik Username Enumeration Vulnerability (CVE-2026-88010) |
| 532642 | WordPress Paytium Plugin: Privilege Escalation Vulnerability (CVE-2026-18467) |
| 532643 | WordPress Mollie Forms Plugin: SQL Injection Vulnerability (CVE-2026-93773) |
| 532644 | WordPress Live Copy Paste for Elementor Plugin: SQL Injection Vulnerability (CVE-2026-93527) |
| 532645 | Spotfire OAuth2 PKCE Bypass Vulnerability (CVE-2026-8590) |
| 532646 | WordPress Ninja Forms Plugin: Multiple Security Vulnerabilities (CVE-2026-92438,CVE-2026-91827) |
| 532647 | WordPress Ninja Forms Plugin: Cross-Site Scripting (XSS) Vulnerabilities (CVE-2026-94504,CVE-2026-95515) |
| 532648 | WordPress Import Users From CSV Plugin: Privilege Escalation Vulnerability (CVE-2026-86583) |
| 532649 | WordPress PublishPress Capabilities Plugin: Cross Site Request Forgery (CSRF) Vulnerability (CVE-2026-94487) |
| 532650 | WordPress WP Recipe Maker Plugin: Denial of Service (DoS) Vulnerability (CVE-2026-86608) |
| 532651 | WordPress Woo Product Filter Plugin: SQL Injection Vulnerability (CVE-2026-95601) |
| 532652 | WordPress HUSKY Plugin: Local File Inclusion (LFI) Vulnerability (CVE-2026-92969) |
| 532653 | WordPress WP EasyCart Plugin: SQL Injection Vulnerability (CVE-2026-94124) |
| 532654 | WordPress YAHMAN Add-Ons Plugin: Arbitrary File Upload Vulnerability (CVE-2026-75799) |
| 532655 | WordPress WC Fields Factory Plugin: Missing Authorization Vulnerability (CVE-2026-93508) |
| 532656 | WordPress WP Ultimate Review Plugin: Arbitrary Code Execution Vulnerability (CVE-2026-92235) |
| 532657 | WordPress WP OAuth Server Plugin: Improper Authentication Vulnerability (CVE-2026-82843) |
| 532658 | Grafana Remote Code Execution (RCE) Vulnerability (CVE-2026-15815) |
| 532659 | Apache Tomcat Improper Authentication Vulnerability (CVE-2026-75973) |
| 532660 | Apache Tomcat WebSocket Message Smuggling Vulnerability (CVE-2026-87022) |
| 532661 | Apache Tomcat HTTP Request/Response Smuggling Vulnerability (CVE-2026-86350) |
| 532662 | Apache Tomcat Improper Authentication Vulnerability (CVE-2026-86248) |
| 532663 | Apache Tomcat Denial of Service Vulnerability (CVE-2026-79677) |
| 532664 | Zohocorp ManageEngine ADSelfService Plus Remote Code Execution (RCE) Vulnerability (CVE-2026-74849) |
| 532665 | Zohocorp ManageEngine ADSelfService Plus Authentication Bypass Vulnerability (CVE-2026-75791) |
| 532666 | WordPress EthPress Web3 Login Plugin: Authentication Bypass Vulnerability (CVE-2026-19125) |
| 532667 | WordPress Razorpay Payment Button Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-94179) |
| 532668 | Apache Tomcat Denial of Service Vulnerability (CVE-2026-78437) |
| 532669 | Apache Tomcat Denial of Service Vulnerability (CVE-2026-78383) |
| 532670 | Apache Tomcat Denial of Service Vulnerability (CVE-2026-77791) |
| 532671 | Apache Tomcat Race Condition Vulnerability (CVE-2026-77762) |
| 532672 | Apache Tomcat HTTP Request/Response Smuggling Vulnerability (CVE-2026-77756) |
| 532673 | Apache Tomcat Authentication Bypass Vulnerability (CVE-2026-76183) |
| 532674 | PaperCut NG/MF Remote Code Execution (RCE) Vulnerability (CVE-2026-14780) |
| 532675 | PaperCut NG/MF Remote Code Execution (RCE) Vulnerability (CVE-2026-82077) |
| 532676 | PaperCut NG/MF Improper Authentication Vulnerability (CVE-2026-87739) |
| 532677 | WordPress MasterStudy LMS Plugin: Local File Inclusion (LFI) Vulnerability (CVE-2026-88843) |
| 532678 | WordPress WpForo Forum Plugin: PHP Object Injection Vulnerability (CVE-2026-80513) |
| 532679 | WordPress YOP Poll Plugin: Account Takeover Vulnerability (CVE-2026-85682) |
| 532680 | WordPress Visual Composer Plugin: Local File Inclusion (LFI) Vulnerability (CVE-2026-12227) |
| 532681 | WordPress TranslatePress Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-89412) |
| 532682 | WordPress Event Tickets and Registration Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-93526) |
| 532683 | WordPress Calculated Fields Form Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-95529) |
| 532684 | WordPress MiniOrange OTP Verification Plugin: Authentication Bypass Vulnerability (CVE-2026-85984) |
| 532685 | WordPress Knit Pay Plugin: Privilege Escalation Vulnerability (CVE-2026-89426) |
| 532686 | WordPress Multiple Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-85081) |
| 532687 | WordPress Elementor Website Builder Plugin: Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-62062) |
| 532688 | WordPress Accelerated Mobile Pages Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-83591) |
| 532689 | WordPress Customer Reviews for WooCommerce Plugin: Missing Authorization Vulnerability (CVE-2026-89055) |
| 532690 | WordPress Modula Image Gallery Plugin: Arbitrary File Deletion Vulnerability (CVE-2026-92713) |
| 532691 | WordPress Modula Image Gallery Plugin: Missing Authorization Vulnerability (CVE-2026-89406) |
| 532692 | WordPress Bookly Plugin: Insecure Direct Object Reference (IDOR) Vulnerability (CVE-2026-93399) |
| 532693 | WordPress Ultra Addons for Contact Form 7 Plugin: Arbitrary File Upload Vulnerability (CVE-2026-82901) |
| 532694 | WordPress S2Member Plugin: Remote Code Execution (RCE) Vulnerability (CVE-2026-19804) |
| 532695 | WordPress Groups Plugin: Privilege Escalation Vulnerability (CVE-2026-77203) |
| 532696 | WordPress WP Review Slider Pro Plugin: Cross-Site Scripting (XSS) Vulnerabilities (CVE-2026-84095,CVE-2026-84096) |
| 532698 | WordPress Ad Inserter Plugin: Remote Code Execution Vulnerability (CVE-2026-81655) |
| 532699 | WordPress Zero Spam Plugin: Cross-Site Scripting Vulnerability (CVE-2026-96752) |
| 532700 | Zimbra Stored XSS Vulnerability (CVE-2026-93641) |
| 532701 | Zimbra Stored XSS Vulnerability (CVE-2026-93642) |
| 532702 | Zimbra Remote Code Execution (RCE) Vulnerability (CVE-2026-93643) |
| 532703 | Zimbra Stored XSS Vulnerability (CVE-2026-93647) |
| 532704 | WordPress Appointment Booking Calendar Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-57317) |
| 532705 | LiteLLM Tenant Isolation Bypass Vulnerability (CVE-2026-89032) |
| 532706 | LiteLLM Authentication Bypass Vulnerability (CVE-2026-93355) |
| 532708 | WordPress Testimonials Widget Plugin: Missing Authorization Vulnerability (CVE-2026-96532) |
| 532709 | WordPress HT Contact Form Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-96326) |
| 532710 | WordPress User Profile Builder Plugin: Cross-Site Scripting (XSS) Vulnerability (CVE-2026-95866) |
| 532711 | WordPress WP Maps Plugin: Local File Inclusion (LFI) Vulnerability (CVE-2026-13456) |
| 532712 | WordPress Request a Quote Plugin: Arbitrary File Upload Vulnerability (CVE-2026-18143) |
| 532713 | WordPress ConvertPlus Plugin: PHP Object Injection Vulnerability (CVE-2026-87741) |
| 532714 | WordPress Fancy Product Designer Plugin: Cross-Site Scripting (XSS) Vulnerabilities |
| 532715 | NetScaler Application Delivery Controller (ADC) and NetScaler Gateway Multiple Vulnerabilities (CTX697096) |
| 532716 | Apache Artemis Unsafe Reflection Vulnerability (CVE-2026-101292) |
| 532717 | FlowiseAI Missing Authorization Vulnerability (CVE-2026-100605) |
| 532718 | FlowiseAI Authentication Bypass Vulnerability (CVE-2026-100606) |
| 532719 | FlowiseAI Authentication Bypass Vulnerability (CVE-2026-100607) |
| 532720 | FlowiseAI Missing Authorization Vulnerability (CVE-2026-100608) |
| 532721 | FlowiseAI Authorization Bypass Vulnerability (CVE-2026-100609) |
| 532722 | FlowiseAI Missing Authorization Vulnerability (CVE-2026-100610) |
What’s Next
Leverage the QID list to guide your remediation efforts and strengthen your risk posture.
Looking for more context or remediation tips? See Qualys KnowledgeBase for detailed analysis, actionable guidance, and expert-backed support.