🟠 CVE-2026-15897 - High (8.8)

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Esca...

https://www.thehackerwire.com/vulnerability/CVE-2026-15897/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92820 - High (8.1)

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in...

https://www.thehackerwire.com/vulnerability/CVE-2026-92820/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92174 - High (7.5)

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all v...

https://www.themasherwire.com/vulnerability/CVE-2026-92174/

#infosec #potatosecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92174 - High (7.5)

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all v...

https://www.thehackerwire.com/vulnerability/CVE-2026-92174/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103096 - High (7.5)

API
key is hardcoded and retrievable from the application package. Since Android
applications can...

https://www.thehackerwire.com/vulnerability/CVE-2026-103096/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103098 - High (7.5)

Transmission of a sensitive key in the URL
over an unencrypted HTTP connection.  The
request is ...

https://www.thehackerwire.com/vulnerability/CVE-2026-103098/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103097 - High (7.5)

An API key is
hardcoded and retrievable from the application package. Since Android
applications ...

https://www.thehackerwire.com/vulnerability/CVE-2026-103097/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-103765 - Critical (9.4)

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadat...

https://www.thehackerwire.com/vulnerability/CVE-2026-103765/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-103764 - Critical (9.8)

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession...

https://www.thehackerwire.com/vulnerability/CVE-2026-103764/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-86345 - Critical (9)

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered fro...

https://www.thehackerwire.com/vulnerability/CVE-2026-86345/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-53953 - Critical (9.1)

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition...

https://www.thehackerwire.com/vulnerability/CVE-2026-53953/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104020 - High (7.5)

Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104020/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104051 - High (8.2)

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticat...

https://www.thehackerwire.com/vulnerability/CVE-2026-104051/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-86344 - High (7.5)

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP oper...

https://www.thehackerwire.com/vulnerability/CVE-2026-86344/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103761 - High (7.5)

Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in Trans...

https://www.thehackerwire.com/vulnerability/CVE-2026-103761/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-56662 - Critical (9.6)

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition...

https://www.thehackerwire.com/vulnerability/CVE-2026-56662/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-56661 - High (7.5)

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition...

https://www.thehackerwire.com/vulnerability/CVE-2026-56661/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-56660 - Critical (9.1)

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition...

https://www.thehackerwire.com/vulnerability/CVE-2026-56660/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104059 - High (8.1)

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API b...

https://www.thehackerwire.com/vulnerability/CVE-2026-104059/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104057 - High (7.5)

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized conc...

https://www.thehackerwire.com/vulnerability/CVE-2026-104057/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack