Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 78 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-21052 |
6.8 (4.0)
|
Path traversal in SemClipboardService prior to SM… |
Samsung Mobile |
Samsung Mobile Devices |
2026-07-10T04:58:15.141Z | 2026-07-11T03:55:18.007Z |
| CVE-2026-21049 |
8.4 (4.0)
|
Out-of-bounds write in libpadm.so library prior t… |
Samsung Mobile |
Samsung Mobile Devices |
2026-07-10T04:58:11.656Z | 2026-07-11T03:55:18.770Z |
| CVE-2026-21046 |
8.4 (4.0)
|
Time-of-check time-of-use race condition in fabri… |
Samsung Mobile |
Samsung Mobile Devices |
2026-07-10T04:58:09.129Z | 2026-07-11T03:55:19.537Z |
| CVE-2026-21043 |
6.7 (4.0)
|
Path traversal in Wallpaper service prior to SMR … |
Samsung Mobile |
Samsung Mobile Devices |
2026-07-10T04:58:05.222Z | 2026-07-11T03:55:20.258Z |
| CVE-2026-21042 |
8.4 (4.0)
|
Out-of-bounds write in libsavsac.so prior to SMR … |
Samsung Mobile |
Samsung Mobile Devices |
2026-07-10T04:58:04.139Z | 2026-07-11T03:55:21.047Z |
| CVE-2026-1832 |
4.3 (3.1)
|
ThriveDesk <= 2.1.7 - Missing Authorization to Authent… |
thrivedesk |
Agentic Help Desk Plugin for WordPress – Live Chat, AI Chatbot & Ticketing – ThriveDesk |
2026-07-11T03:44:25.835Z | 2026-07-11T03:44:25.835Z |
| CVE-2026-15335 |
7.5 (3.1)
|
Booking Package <= 1.7.20 - Unauthenticated SQL Inject… |
masaakitanaka |
Booking Package |
2026-07-11T03:44:24.811Z | 2026-07-11T03:44:24.811Z |
| CVE-2026-15097 |
6.4 (3.1)
|
Themify Builder <= 7.7.6 - Authenticated (Contributor+… |
themifyme |
Themify Builder |
2026-07-11T03:44:20.706Z | 2026-07-11T03:44:20.706Z |
| CVE-2026-15096 |
6.4 (3.1)
|
Themify Builder <= 7.7.6 - Authenticated (Contributor+… |
themifyme |
Themify Builder |
2026-07-11T03:44:23.435Z | 2026-07-11T03:44:23.435Z |
| CVE-2026-15028 |
3.9 (3.1)
|
Libarchive: heap overflow oob read while parsing a tar… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-10T09:55:49.895Z | 2026-07-11T03:55:16.526Z |
| CVE-2026-14262 |
8.8 (3.1)
|
Simple JWT Login <= 3.6.6 - Authenticated (Subscriber+… |
nicu_m |
Simple JWT Login – Allows you to use JWT on REST endpoints. |
2026-07-11T03:44:25.497Z | 2026-07-11T03:44:25.497Z |
| CVE-2026-13250 |
5.3 (3.1)
|
Solace Extra <= 1.5.3 - Missing Authorization to Unaut… |
solacewp |
Solace Extra |
2026-07-11T03:44:24.117Z | 2026-07-11T03:44:24.117Z |
| CVE-2026-13116 |
4.3 (3.1)
|
PDF Invoices & Packing Slips for WooCommerce <= 5.14.0… |
wpovernight |
PDF Invoices & Packing Slips for WooCommerce |
2026-07-11T03:44:22.778Z | 2026-07-11T03:44:22.778Z |
| CVE-2026-12141 |
4.9 (3.1)
|
Premium Addons for Elementor <= 4.11.84 - Authenticate… |
leap13 |
Premium Addons for Elementor – Powerful Elementor Templates & Widgets |
2026-07-11T03:44:24.452Z | 2026-07-11T03:44:24.452Z |
| CVE-2026-0278 |
5.8 (4.0)
|
Prisma Access Agent: Multiple DLP Policy Bypass Vulner… |
Palo Alto Networks |
Prisma Access Agent |
2026-07-09T19:12:11.045Z | 2026-07-11T03:55:14.977Z |
| CVE-2026-0276 |
1.1 (4.0)
|
Cortex XDR Broker VM: Privilege Escalation (PE) Vulner… |
Palo Alto Networks |
Cortex XDR Broker VM |
2026-07-09T19:17:01.145Z | 2026-07-11T03:55:15.768Z |
| CVE-2025-13968 |
6.4 (3.1)
|
Starboard Suite Reservation Calendars <= 3.1.4 - Authe… |
starboardsuite |
Starboard Suite Reservation Calendars |
2026-07-11T03:44:23.106Z | 2026-07-11T03:44:23.106Z |
| CVE-2026-8678 |
4.3 (3.1)
|
MyParcel <= 4.25.1 - Missing Authorization to Authenti… |
richardperdaan |
MyParcel |
2026-07-11T02:31:15.950Z | 2026-07-11T02:31:15.950Z |
| CVE-2026-7544 |
4.3 (3.1)
|
Mux Video Uploader <= 1.1.4 - Authenticated (Subscribe… |
2coders |
Mux Video Uploader |
2026-07-11T02:31:19.224Z | 2026-07-11T02:31:19.224Z |
| CVE-2026-5743 |
6.4 (3.1)
|
Mixed Media Gallery Blocks <= 3.3.3.1 - Authenticated … |
gallerycreator |
SimpLy Gallery |
2026-07-11T02:31:16.457Z | 2026-07-11T02:31:16.457Z |
| CVE-2026-3367 |
4.4 (3.1)
|
Lockme OAuth2 calendars integration <= 2.11.0 - Authen… |
lustmored |
Lockme calendars integration |
2026-07-11T02:31:17.819Z | 2026-07-11T02:31:17.819Z |
| CVE-2026-15338 |
7.5 (3.1)
|
LA-Studio Element Kit for Elementor <= 1.6.1 - Authent… |
choijun |
LA-Studio Element Kit for Elementor |
2026-07-11T02:31:18.532Z | 2026-07-11T02:31:18.532Z |
| CVE-2026-15073 |
6.5 (3.1)
|
KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Inject… |
iqonicdesign |
KiviCare – Clinic & Patient Management System (EHR) |
2026-07-11T02:31:16.800Z | 2026-07-11T02:31:16.800Z |
| CVE-2026-15072 |
6.5 (3.1)
|
KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Inject… |
iqonicdesign |
KiviCare – Clinic & Patient Management System (EHR) |
2026-07-11T02:31:18.884Z | 2026-07-11T02:31:18.884Z |
| CVE-2026-13353 |
8.8 (3.1)
|
WP Ultimate CSV Importer <= 8.0.1 - Missing Authorizat… |
smackcoders |
WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel |
2026-07-11T02:31:19.579Z | 2026-07-11T02:31:19.579Z |
| CVE-2026-13262 |
6.5 (3.1)
|
Majestic Support <= 1.1.9 - Authenticated (Subscriber+… |
ahmadmj |
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin |
2026-07-11T02:31:17.133Z | 2026-07-11T02:31:17.133Z |
| CVE-2026-13114 |
7.2 (3.1)
|
Motors <= 1.4.112 - Unauthenticated Stored Cross-Site … |
stylemix |
Motors – Car Dealership & Classified Listings Plugin |
2026-07-11T02:31:19.945Z | 2026-07-11T02:31:19.945Z |
| CVE-2026-12426 |
5.3 (3.1)
|
Members <= 3.2.22 - Unauthenticated Sensitive Informat… |
supercleanse |
Members – Membership & User Role Editor Plugin |
2026-07-11T02:31:18.186Z | 2026-07-11T02:31:18.186Z |
| CVE-2026-10628 |
4.3 (3.1)
|
Points and Rewards for WooCommerce <= 2.10.1 - Missing… |
wpswings |
Points and Rewards for WooCommerce |
2026-07-11T02:31:17.468Z | 2026-07-11T02:31:17.468Z |
| CVE-2026-13756 |
8.8 (3.1)
|
WP Grid Builder <= 2.3.3 - Authenticated (Subscriber+)… |
WP Grid Builder |
WP Grid Builder |
2026-07-11T01:29:19.566Z | 2026-07-11T01:29:19.566Z |