diff --git a/data/2025/15xxx/CVE-2025-15711.json b/data/2025/15xxx/CVE-2025-15711.json new file mode 100644 index 0000000000..ddea869510 --- /dev/null +++ b/data/2025/15xxx/CVE-2025-15711.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-15711", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-30T09:53:33.102Z", + "datePublished": "2026-11-11T06:00:04.589Z", + "dateUpdated": "2026-11-11T06:00:04.589Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:04.589Z" + }, + "title": "Live Composer < 2.1.24 - Admin+ Stored XSS via Social", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Live Composer", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.1.24" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before outputting them in an href attribute, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/3c296d09-122f-420e-9ab1-81ffdfff88c2/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Krugov Artyom", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2025/15xxx/CVE-2025-15712.json b/data/2025/15xxx/CVE-2025-15712.json new file mode 100644 index 0000000000..60d0f58a95 --- /dev/null +++ b/data/2025/15xxx/CVE-2025-15712.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-15712", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-30T09:53:52.519Z", + "datePublished": "2026-11-11T06:00:04.765Z", + "dateUpdated": "2026-11-11T06:00:04.765Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:04.765Z" + }, + "title": "Live Composer < 2.1.24 - Admin+ Stored XSS via Staff", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Live Composer", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.1.24" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before outputting them in pages, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/00d2c75d-7e8f-4f6c-8b72-c66b1bb6cc59/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Krugov Artyom", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2025/15xxx/CVE-2025-15713.json b/data/2025/15xxx/CVE-2025-15713.json new file mode 100644 index 0000000000..d8fd9e4240 --- /dev/null +++ b/data/2025/15xxx/CVE-2025-15713.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-15713", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-30T09:54:09.885Z", + "datePublished": "2026-11-11T06:00:04.940Z", + "dateUpdated": "2026-11-11T06:00:04.940Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:04.940Z" + }, + "title": "Live Composer < 2.1.24 - Admin+ Stored XSS via Icon", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Live Composer", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.1.24" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings before outputting them, allowing users with access to the builder (Administrator by default) to inject arbitrary JavaScript that executes when the affected page is viewed by any visitor; this has impact even on administrators where the unfiltered_html capability is disallowed, e.g. in multisite setups." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/eb5d2c5b-0035-4c84-876a-b4268e27e3cc/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Krugov Artyom", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2025/15xxx/CVE-2025-15714.json b/data/2025/15xxx/CVE-2025-15714.json new file mode 100644 index 0000000000..2afd8eb24f --- /dev/null +++ b/data/2025/15xxx/CVE-2025-15714.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-15714", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-30T09:54:27.553Z", + "datePublished": "2026-11-11T06:00:05.113Z", + "dateUpdated": "2026-11-11T06:00:05.113Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:05.113Z" + }, + "title": "Live Composer < 2.1.24 - Admin+ Stored XSS via Button", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Live Composer", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.1.24" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before outputting them on the front end, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/03a1c844-9a9f-4702-ba6c-3ada3e779014/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Krugov Artyom", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/104xxx/CVE-2026-104718.json b/data/2026/104xxx/CVE-2026-104718.json new file mode 100644 index 0000000000..3cd75aee76 --- /dev/null +++ b/data/2026/104xxx/CVE-2026-104718.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-104718", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-02T11:31:48.374Z", + "datePublished": "2026-11-11T06:00:05.302Z", + "dateUpdated": "2026-11-11T06:00:05.302Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:05.302Z" + }, + "title": "Elementor < 4.3.6 - Contributor+ Stored XSS via Element ID", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Elementor Website Builder", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "4.3.6" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Elementor Website Builder WordPress plugin before 4.3.6 does not validate or escape an element identifier before rendering it into a client-side framework attribute that is evaluated as JavaScript, allowing users with the Contributor role to store scripts that execute in the browser of anyone viewing the affected content, including an administrator reviewing the submission for publication." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/1a429b80-13ef-4cd3-a18a-eef834d7b865/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Hung Bach Ngoc (@tomchuoi)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/106xxx/CVE-2026-106468.json b/data/2026/106xxx/CVE-2026-106468.json new file mode 100644 index 0000000000..380117f44d --- /dev/null +++ b/data/2026/106xxx/CVE-2026-106468.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-106468", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-06T17:36:53.781Z", + "datePublished": "2026-11-11T06:00:05.477Z", + "dateUpdated": "2026-11-11T06:00:05.477Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:05.477Z" + }, + "title": "Code Snippets < 4.1.0 - Admin+ Network-Scoped Snippet Injection via Snippet Import", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Code Snippets", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "4.1.0" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Code Snippets WordPress plugin before 4.1.0 does not verify network-level capabilities before honouring a network-scope parameter on its snippet import routes on multisite, allowing an administrator of a single subsite without network-management rights to create, overwrite and deactivate network-wide snippets belonging to the whole network." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/1f3a3a59-9c84-4bfc-97ee-2f19518ca1a7/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Artus KG", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109870.json b/data/2026/109xxx/CVE-2026-109870.json new file mode 100644 index 0000000000..9a558b9063 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109870.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109870", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-13T08:52:42.755Z", + "datePublished": "2026-11-11T06:00:05.654Z", + "dateUpdated": "2026-11-11T06:00:05.654Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:05.654Z" + }, + "title": "User Registration & Membership 5.2.8 - 5.3.1 - Unauthenticated Privilege Escalation via Coupon-Based Payment Bypass", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-269 Improper Privilege Management", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "User Registration & Membership", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "5.2.8", + "lessThan": "5.3.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a paid membership plan is actually valid for that plan before treating a fully discounted order as paid, allowing unauthenticated users to be granted the role mapped to a paid plan without paying for it, which can lead to privilege escalation up to administrator where a plan is mapped to a privileged role." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/6cac7dd1-2ae5-4b5b-94c7-a8a4a63ef84b/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Maciek Komorowski", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109871.json b/data/2026/109xxx/CVE-2026-109871.json new file mode 100644 index 0000000000..1ccbad4097 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109871.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109871", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-13T08:53:14.795Z", + "datePublished": "2026-11-11T06:00:05.831Z", + "dateUpdated": "2026-11-11T06:00:05.831Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:05.831Z" + }, + "title": "User Registration & Membership < 5.3.2 - Subscriber+ Payment Bypass via Membership Renewal", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "User Registration & Membership", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "5.3.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a payment has actually been completed before extending a paid membership subscription, allowing authenticated users with an active paid subscription to renew it indefinitely without paying." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/444889b1-ae92-45b6-a13b-e76a5fa7ce58/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Wai Linn Oo", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109873.json b/data/2026/109xxx/CVE-2026-109873.json new file mode 100644 index 0000000000..a6451c35c0 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109873.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109873", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-13T08:53:58.617Z", + "datePublished": "2026-11-11T06:00:06.004Z", + "dateUpdated": "2026-11-11T06:00:06.004Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:06.004Z" + }, + "title": "User Registration & Membership < 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership Field", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-287 Improper Authentication", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "User Registration & Membership", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "5.3.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The User Registration & Membership WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction when a registration is submitted without a membership selection, allowing unauthenticated users to create an account on a payment-gated registration form and log in without completing payment." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/4cce0bb5-eb8e-4452-a6d1-6c408344bc7f/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Filip Kecman", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110016.json b/data/2026/110xxx/CVE-2026-110016.json new file mode 100644 index 0000000000..8b4f801ded --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110016.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110016", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-13T14:52:04.645Z", + "datePublished": "2026-11-11T06:00:06.177Z", + "dateUpdated": "2026-11-11T06:00:06.177Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:06.177Z" + }, + "title": "Data Tables Generator by Supsystic < 1.15.8 - Unauthenticated Table Content Disclosure via IDOR", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639 Authorization Bypass Through User-Controlled Key", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Data Tables Generator by Supsystic", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.15.8" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Data Tables Generator by Supsystic WordPress plugin before 1.15.8 does not perform any authorization or ownership check before returning the stored contents of a table, relying only on a nonce that is exposed to every anonymous visitor, allowing unauthenticated users to read the full contents of any table by its identifier, including tables that are never published anywhere on the site." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/3ff8c1cc-3975-4302-a69f-11a4538dd4e8/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "John Ryan Albon", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110948.json b/data/2026/110xxx/CVE-2026-110948.json new file mode 100644 index 0000000000..9483934365 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110948.json @@ -0,0 +1,96 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110948", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-15T08:41:05.034Z", + "datePublished": "2026-11-11T06:00:06.346Z", + "dateUpdated": "2026-11-11T06:00:06.346Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:06.346Z" + }, + "title": "Download Manager (Free & Pro) - Unauthenticated Protected File Download via Media Preview Download Key", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Download Manager", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "3.3.73" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Unknown", + "product": "Download Manager", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "4.0.0", + "lessThan": "7.6.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify that a visitor is allowed to access a package before its media-preview renderers issue a download key for it, allowing unauthenticated visitors to download password-locked and role-restricted files by reading the key from a public page." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/42a914ea-54fe-4a2b-b65b-8da152a37b43/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Humberto SPatz", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110949.json b/data/2026/110xxx/CVE-2026-110949.json new file mode 100644 index 0000000000..b7503c0074 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110949.json @@ -0,0 +1,96 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110949", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-15T08:41:27.129Z", + "datePublished": "2026-11-11T06:00:06.520Z", + "dateUpdated": "2026-11-11T06:00:06.520Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:06.520Z" + }, + "title": "Download Manager (Free & Pro) - Unauthenticated Missing Authorization via Password Validation", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Download Manager", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "3.3.73" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Unknown", + "product": "Download Manager", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "4.0.0", + "lessThan": "7.6.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify a package's configured role restriction when validating a package password, allowing an unauthenticated user who knows the password of a role-restricted package to obtain a download key and download the protected file." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/2ee629f0-d410-4272-991c-1eb6001fceb4/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Muni Nitish Kumar Yaddala", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111579.json b/data/2026/111xxx/CVE-2026-111579.json new file mode 100644 index 0000000000..4e0c42104a --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111579.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111579", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-16T12:56:00.921Z", + "datePublished": "2026-11-11T06:00:06.690Z", + "dateUpdated": "2026-11-11T06:00:06.690Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:06.690Z" + }, + "title": "Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-269 Improper Privilege Management", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Forminator Forms", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "1.58.0", + "lessThan": "1.58.4" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Forminator Forms WordPress plugin before 1.58.4 does not enforce payment on the server side when a form's configured payment gateway is unavailable, allowing unauthenticated visitors to complete a payment-gated User Registration form without paying and be assigned the form's configured role, up to administrator, after the gateway has been connected and later disconnected." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/c490b47f-4898-4323-8bec-e32bc7732d1d/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Charles Vosburgh", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111597.json b/data/2026/111xxx/CVE-2026-111597.json new file mode 100644 index 0000000000..3fffba86f6 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111597.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111597", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-16T13:48:15.895Z", + "datePublished": "2026-11-11T06:00:06.888Z", + "dateUpdated": "2026-11-11T06:00:06.888Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:06.888Z" + }, + "title": "Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message via Unpaid Stripe Checkout Session", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Forminator Forms", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "1.58.0", + "lessThan": "1.58.4" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Forminator Forms WordPress plugin before 1.58.4 does not verify that a Stripe Checkout payment has completed before returning a pending submission's after-payment response, allowing unauthenticated visitors to obtain the post-payment redirect URL and thank-you message of a payment-gated form without paying." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/10aa446f-3664-4deb-ace6-01d5c47d7103/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Naoki Kawahigashi", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114406.json b/data/2026/114xxx/CVE-2026-114406.json index ffc0deba61..f22eb2ae1e 100644 --- a/data/2026/114xxx/CVE-2026-114406.json +++ b/data/2026/114xxx/CVE-2026-114406.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-21T11:57:07.758Z", "datePublished": "2026-10-21T20:56:26.866Z", - "dateUpdated": "2026-11-11T01:48:44.517Z" + "dateUpdated": "2026-11-11T05:51:46.836Z" }, "containers": { "cna": { @@ -340,6 +340,24 @@ "cpe:/a:redhat:openshift:4.12::el8" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift/ose-rhel-coreos-9", + "defaultStatus": "affected", + "versions": [ + { + "version": "413.92.202611041925-0", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", @@ -5112,6 +5130,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95745", + "name": "RHSA-2026:95745", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:96282", "name": "RHSA-2026:96282", @@ -5179,7 +5205,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T01:48:44.517Z" + "dateUpdated": "2026-11-11T05:51:46.836Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/115xxx/CVE-2026-115733.json b/data/2026/115xxx/CVE-2026-115733.json new file mode 100644 index 0000000000..077c813af9 --- /dev/null +++ b/data/2026/115xxx/CVE-2026-115733.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-115733", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-23T11:51:04.978Z", + "datePublished": "2026-11-11T06:00:07.103Z", + "dateUpdated": "2026-11-11T06:00:07.103Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:07.103Z" + }, + "title": "PrintAura WooCommerce API <= 4.0.2 - Unauthenticated WooCommerce REST API Authentication Bypass", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-287 Improper Authentication", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Printaura-Woocommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "4.0.2" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and personal information, store and payment settings, and webhooks." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/dac80e74-ecfc-49e2-82a9-0c70285de1c1/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Naoki Kawahigashi", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115734.json b/data/2026/115xxx/CVE-2026-115734.json new file mode 100644 index 0000000000..633e6939d5 --- /dev/null +++ b/data/2026/115xxx/CVE-2026-115734.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-115734", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-23T11:51:11.900Z", + "datePublished": "2026-11-11T06:00:07.276Z", + "dateUpdated": "2026-11-11T06:00:07.276Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:07.276Z" + }, + "title": "Pay With a Tweet <= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-73 External Control of File Name or Path", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Pay with a tweet", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.5" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromise." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/73fea81f-2611-4230-a159-c182c3045f2d/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Naoki Kawahigashi", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115735.json b/data/2026/115xxx/CVE-2026-115735.json new file mode 100644 index 0000000000..7c46334c23 --- /dev/null +++ b/data/2026/115xxx/CVE-2026-115735.json @@ -0,0 +1,78 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-115735", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-23T11:51:13.338Z", + "datePublished": "2026-11-11T06:00:07.456Z", + "dateUpdated": "2026-11-11T06:00:07.456Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:07.456Z" + }, + "title": "Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File Deletion", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-73 External Control of File Name or Path", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Somatic Framework", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.8.14" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a full site takeover." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/0a43de6d-7b65-4cc6-b02a-479bb79293cc/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116081.json b/data/2026/116xxx/CVE-2026-116081.json new file mode 100644 index 0000000000..6a371a20b4 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116081.json @@ -0,0 +1,111 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116081", + "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", + "state": "PUBLISHED", + "assignerShortName": "jpcert", + "dateReserved": "2026-11-10T08:07:47.836Z", + "datePublished": "2026-11-11T05:19:16.842Z", + "dateUpdated": "2026-11-11T05:19:16.842Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Fenrir Inc.", + "product": "Sleipnir Mobile for iPhone / iPad", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "v4.15.1" + } + ] + }, + { + "vendor": "Fenrir Inc.", + "product": "Sleipnir Mobile for iPhone / iPad Black Edition", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "v4.15.1" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. are vulnerable to improper certificate verification. A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Improper certificate validation", + "lang": "en-US", + "cweId": "CWE-295", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://apps.apple.com/us/app/sleipnir-mobile/id404732112" + }, + { + "url": "https://apps.apple.com/jp/app/sleipnir-mobile-black-edition/id461181338" + }, + { + "url": "https://jvn.jp/en/vu/JVNVU93068550/" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.2, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseSeverity": "LOW", + "baseScore": 2.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" + } + } + ], + "providerMetadata": { + "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", + "shortName": "jpcert", + "dateUpdated": "2026-11-11T05:19:16.842Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/117xxx/CVE-2026-117521.json b/data/2026/117xxx/CVE-2026-117521.json new file mode 100644 index 0000000000..00d18adbaa --- /dev/null +++ b/data/2026/117xxx/CVE-2026-117521.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-117521", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-27T09:35:10.305Z", + "datePublished": "2026-11-11T06:00:07.628Z", + "dateUpdated": "2026-11-11T06:00:07.628Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:07.628Z" + }, + "title": "Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Dynific Addons for Elementor (formerly Anywhere Elementor)", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.3.1" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not escape a user-controlled profile value before outputting it in a quoted attribute in one of its Elementor widgets, allowing authenticated users with the Author role to store a payload that executes in the session of anyone, including an administrator, who views a post the attacker authored, resulting in Stored Cross-Site Scripting." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/783c1465-9e57-41ca-a6ec-14348d7ee9ad/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Raphael P. Cigana", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/117xxx/CVE-2026-117522.json b/data/2026/117xxx/CVE-2026-117522.json new file mode 100644 index 0000000000..1ec5f5f76e --- /dev/null +++ b/data/2026/117xxx/CVE-2026-117522.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-117522", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-27T09:35:11.979Z", + "datePublished": "2026-11-11T06:00:07.799Z", + "dateUpdated": "2026-11-11T06:00:07.799Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:07.799Z" + }, + "title": "Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Dynific Addons for Elementor (formerly Anywhere Elementor)", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.3.1" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not escape the post title before outputting it in a quoted HTML attribute in one of its Elementor widgets, allowing authenticated users with the Author role to publish a post whose title executes as script in the session of anyone, including an administrator, who views it, resulting in Stored Cross-Site Scripting." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/405f11c6-7d5f-48f8-a38c-c8b35870a22d/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Raphael P. Cigana", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/117xxx/CVE-2026-117523.json b/data/2026/117xxx/CVE-2026-117523.json new file mode 100644 index 0000000000..b3e89bbed8 --- /dev/null +++ b/data/2026/117xxx/CVE-2026-117523.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-117523", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-27T09:35:14.124Z", + "datePublished": "2026-11-11T06:00:07.977Z", + "dateUpdated": "2026-11-11T06:00:07.977Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:07.977Z" + }, + "title": "Dynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX Action", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Dynific Addons for Elementor (formerly Anywhere Elementor)", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.3.1" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a capability or nonce check on an AJAX action that saves its module configuration, allowing any authenticated user, including Subscribers, to enable or disable the Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1's modules site-wide." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/689cf390-e7fa-4202-b418-9ec0066f778a/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Raphael P. Cigana", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/117xxx/CVE-2026-117524.json b/data/2026/117xxx/CVE-2026-117524.json new file mode 100644 index 0000000000..689c66d02e --- /dev/null +++ b/data/2026/117xxx/CVE-2026-117524.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-117524", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-27T09:35:15.868Z", + "datePublished": "2026-11-11T06:00:08.151Z", + "dateUpdated": "2026-11-11T06:00:08.151Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:08.151Z" + }, + "title": "Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific_template Shortcode", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Dynific Addons for Elementor (formerly Anywhere Elementor)", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "1.3.0", + "lessThan": "1.3.1" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users' draft, private and password-protected posts. An Author can republish that content to anonymous visitors." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/dc064f7f-4be6-4602-a0b2-99c15f8b8fc5/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Raphael P. Cigana", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118041.json b/data/2026/118xxx/CVE-2026-118041.json new file mode 100644 index 0000000000..0991ebe7e5 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118041.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118041", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-27T15:05:31.497Z", + "datePublished": "2026-11-11T06:00:08.321Z", + "dateUpdated": "2026-11-11T06:00:08.321Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:08.321Z" + }, + "title": "Contest Gallery < 34.0.3 - Author+ Arbitrary File Upload via Ecommerce Sale File Replacement", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Contest Gallery", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "34.0.3" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Contest Gallery WordPress plugin before 34.0.3 does not sanitise the name of files uploaded through its e-commerce sale file-replacement feature, allowing authenticated users with Author-level access and above to write files with an arbitrary name and extension to a web-accessible directory and, by overwriting the directory's protection file through the same flow, achieve Remote Code Execution." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/d202d856-1eb5-47c8-b3cd-571e2073f3bf/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Izzny", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118241.json b/data/2026/118xxx/CVE-2026-118241.json new file mode 100644 index 0000000000..acf81661d3 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118241.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118241", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-27T19:56:49.961Z", + "datePublished": "2026-11-11T06:00:08.494Z", + "dateUpdated": "2026-11-11T06:00:08.494Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:08.494Z" + }, + "title": "Smush < 4.3.6 - Author+ Optimization and Restoration of Others' Attachments via IDOR", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639 Authorization Bypass Through User-Controlled Key", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Smush", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "4.3.6" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Smush WordPress plugin before 4.3.6 does not verify that a user is authorised to act on the targeted media attachment, only checking a broad upload-files capability, which allows users with the Author role and above to optimise and restore attachments owned by other users, altering their files on disk and consuming the stored backup." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/150305f1-4cfc-46d2-9b90-b2f84e2e1d7e/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Jashid Sany", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118418.json b/data/2026/118xxx/CVE-2026-118418.json new file mode 100644 index 0000000000..ea981fbca2 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118418.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118418", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-28T04:41:37.167Z", + "datePublished": "2026-11-11T06:00:08.671Z", + "dateUpdated": "2026-11-11T06:00:08.671Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:08.671Z" + }, + "title": "WP Directory Kit < 1.6.3 - Unauthenticated User Data and Contact Message Disclosure", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "WP Directory Kit", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.6.3" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The WP Directory Kit WordPress plugin before 1.6.3 does not restrict which database models and columns its public directory-search action may return, nor verify authorisation on it, allowing unauthenticated attackers to read other users' personal data, including email addresses and logins, and private contact-form submissions." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/faef9089-6d62-42f4-b507-3c6cc804296a/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Rangga Ardhi Saputra", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118420.json b/data/2026/118xxx/CVE-2026-118420.json new file mode 100644 index 0000000000..db9b7c8d8b --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118420.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118420", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-28T04:42:18.932Z", + "datePublished": "2026-11-11T06:00:08.847Z", + "dateUpdated": "2026-11-11T06:00:08.847Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:08.847Z" + }, + "title": "WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' Parameter", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89 SQL Injection", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "WP Directory Kit", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.6.3" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The WP Directory Kit WordPress plugin before 1.6.3 does not sanitise and escape a parameter before using it in a SQL statement, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/32ef59c1-624c-4a66-9b02-64e730022fc2/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "anhdung1329", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118439.json b/data/2026/118xxx/CVE-2026-118439.json new file mode 100644 index 0000000000..48da4637d7 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118439.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118439", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-28T08:07:47.870Z", + "datePublished": "2026-11-11T06:00:09.024Z", + "dateUpdated": "2026-11-11T06:00:09.024Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:09.024Z" + }, + "title": "Limit Login Attempts Reloaded < 3.4.2 - Admin+ SSRF via App Setup Code", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918 Server-Side Request Forgery (SSRF)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Limit Login Attempts Security", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "3.4.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Limit Login Attempts Security WordPress plugin before 3.4.2 does not validate the destination of a server-side request built from a user-supplied setup value, allowing users with administrator privileges to make the site issue requests to arbitrary hosts, including internal ones (SSRF)." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/9f7a9969-354c-4b9e-b56f-d832d89741b5/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Viktor Heiduck", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119032.json b/data/2026/119xxx/CVE-2026-119032.json new file mode 100644 index 0000000000..514abf13e5 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119032.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119032", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-29T11:35:30.601Z", + "datePublished": "2026-11-11T06:00:09.200Z", + "dateUpdated": "2026-11-11T06:00:09.200Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:09.200Z" + }, + "title": "Schema & Structured Data for WP & AMP < 1.70 - Authenticated Arbitrary Post Modification via Backup Import", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Schema & Structured Data for WP & AMP", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.70" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not check that the importing user may edit the posts named in a settings backup, nor restrict the import to its own post types, allowing users whose role an administrator has granted access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70's settings to modify, re-author, unpublish or trash any post or page on the site and write arbitrary post meta." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/e8a5285d-5d03-4b50-8028-6c71d02e1c18/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Raphael P. Cigana", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119033.json b/data/2026/119xxx/CVE-2026-119033.json new file mode 100644 index 0000000000..91c2ce9a1c --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119033.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119033", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-29T11:35:34.384Z", + "datePublished": "2026-11-11T06:00:09.369Z", + "dateUpdated": "2026-11-11T06:00:09.369Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:09.369Z" + }, + "title": "Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDOR", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639 Authorization Bypass Through User-Controlled Key", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Schema & Structured Data for WP & AMP", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.70" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a user may edit a post before letting them change that post's structured data settings, allowing users with the Contributor role and above, when an administrator has granted them access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70, to disable, alter or reset the structured data of posts they do not own." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/0156d20c-90a0-4567-bee4-cbab31bf4c71/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Muni Nitish Kumar Yaddala", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119034.json b/data/2026/119xxx/CVE-2026-119034.json new file mode 100644 index 0000000000..9e81c465bb --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119034.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119034", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-29T11:35:37.594Z", + "datePublished": "2026-11-11T06:00:09.544Z", + "dateUpdated": "2026-11-11T06:00:09.544Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:09.544Z" + }, + "title": "Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Schema & Structured Data for WP & AMP", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.70" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a post is publicly viewable before returning its approved comments through the review feature, allowing unauthenticated attackers to read approved comments on private, draft and password-protected posts, and to retrieve approved comments site-wide." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/fc30c9de-6c32-4235-abef-625ebf4cc1b0/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Karthik Ramakrishnan", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119035.json b/data/2026/119xxx/CVE-2026-119035.json new file mode 100644 index 0000000000..586248a345 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119035.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119035", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-29T11:35:40.444Z", + "datePublished": "2026-11-11T06:00:09.716Z", + "dateUpdated": "2026-11-11T06:00:09.716Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:09.716Z" + }, + "title": "Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Stored XSS via JSON-LD Pretty Print", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Schema & Structured Data for WP & AMP", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.70" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not safely encode its structured data output when the Pretty Print option is enabled, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks when the site maps a schema property to a custom field." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/f8fb358e-e0aa-4a4d-a4d0-b6f383b115a2/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "vuxvinh", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119303.json b/data/2026/119xxx/CVE-2026-119303.json new file mode 100644 index 0000000000..08c9880645 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119303.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119303", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-29T19:01:21.624Z", + "datePublished": "2026-11-11T06:00:10.373Z", + "dateUpdated": "2026-11-11T06:00:10.373Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:10.373Z" + }, + "title": "NotificationX < 3.3.7 - Unauthenticated Settings Update and Email Sending via send-rating REST Route", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "NotificationX", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "3.3.7" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The NotificationX WordPress plugin before 3.3.7 does not perform any capability or nonce check on one of its REST routes, allowing unauthenticated users to update a NotificationX WordPress plugin before 3.3.7 option and to repeatedly trigger emails sent through the site's own mail server." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/0280952e-f388-44a3-a891-5855580a5f5b/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Kevin Whelan", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119529.json b/data/2026/119xxx/CVE-2026-119529.json new file mode 100644 index 0000000000..e7d328462b --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119529.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119529", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-30T09:45:42.360Z", + "datePublished": "2026-11-11T06:00:10.545Z", + "dateUpdated": "2026-11-11T06:00:10.545Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:10.545Z" + }, + "title": "Gravity Forms < 3.2.2 - Unauthenticated LFI via Chunked File Upload", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Gravity Forms", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "3.2.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Gravity Forms WordPress plugin before 3.2.2 does not properly restrict the file types that unauthenticated users can upload through its chunked file upload feature, allowing them to read server environment variables and the contents of files within the web root on servers configured to parse Server-Side Include documents, such as Apache with SSI enabled." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/f0fd3993-fdce-454b-92d3-6264cf23dc68/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "endangcamon", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119531.json b/data/2026/119xxx/CVE-2026-119531.json new file mode 100644 index 0000000000..e770956652 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119531.json @@ -0,0 +1,93 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119531", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-10-30T09:53:14.649Z", + "datePublished": "2026-11-11T06:00:10.726Z", + "dateUpdated": "2026-11-11T06:00:10.726Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:10.726Z" + }, + "title": "Live Composer < 2.1.24 - Contributor+ Stored XSS via Module Area Shortcode", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Live Composer", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.1.24" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Live Composer WordPress plugin before 2.1.24 does not escape several attributes of one of its page-builder shortcodes before outputting them inside HTML tag attributes, allowing users with the Contributor role and above to store a payload that executes in the browser of anyone who views the post, including an administrator reviewing the pending submission." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/493ae475-0595-4421-812e-304315457329/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Enrico Marcolini", + "type": "finder" + }, + { + "lang": "en", + "value": "Claudio Marchesini", + "type": "finder" + }, + { + "lang": "en", + "value": "Dottor Marc", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121472.json b/data/2026/121xxx/CVE-2026-121472.json new file mode 100644 index 0000000000..c412e323eb --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121472.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121472", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-03T13:14:31.676Z", + "datePublished": "2026-11-11T06:00:10.898Z", + "dateUpdated": "2026-11-11T06:00:10.898Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:10.898Z" + }, + "title": "AutomatorWP < 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRF", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-352 Cross-Site Request Forgery (CSRF)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "AutomatorWP", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "6.0.8" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a CSRF attack, diverting the data the site sends to those services into an account the attacker controls. Exploitation requires the integration to already be connected and knowledge of the site's OAuth client identifier." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/b1746ba7-11a6-4946-8ed3-be19e570ad26/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "kta1kri", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121497.json b/data/2026/121xxx/CVE-2026-121497.json new file mode 100644 index 0000000000..6d04e908b8 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121497.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121497", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-03T14:12:57.143Z", + "datePublished": "2026-11-11T06:00:11.121Z", + "dateUpdated": "2026-11-11T06:00:11.121Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:11.121Z" + }, + "title": "Askany < 2.2.0 - Unauthenticated Arbitrary File Upload", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "AskAny", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.2.0" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The AskAny WordPress plugin before 2.2.0 does not validate the extension or content of files attached to chat messages, trusting the browser-supplied file type instead, which allows unauthenticated users to upload PHP files and execute arbitrary code when visitor attachments are enabled." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/e6aed436-10c6-403b-8d1a-0cf42f3e5aeb/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Ryan Fabella", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121862.json b/data/2026/121xxx/CVE-2026-121862.json new file mode 100644 index 0000000000..2280d69582 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121862.json @@ -0,0 +1,93 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121862", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T09:44:43.979Z", + "datePublished": "2026-11-11T06:00:11.309Z", + "dateUpdated": "2026-11-11T06:00:11.309Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:11.309Z" + }, + "title": "Knowledge Building < 0.7.3 - Unauthenticated Stored XSS via knbu_new_reply AJAX Action", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Knowledge Building", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "0.7.3" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without moderation, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against any visitor of the affected posts, including administrators." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/2656cb05-7d95-4e82-acb4-ee62a31715f8/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Enrico Marcolini", + "type": "finder" + }, + { + "lang": "en", + "value": "Claudio Marchesini", + "type": "finder" + }, + { + "lang": "en", + "value": "Dottor Marc", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121863.json b/data/2026/121xxx/CVE-2026-121863.json new file mode 100644 index 0000000000..98db7db5dc --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121863.json @@ -0,0 +1,78 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121863", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T09:44:46.555Z", + "datePublished": "2026-11-11T06:00:11.485Z", + "dateUpdated": "2026-11-11T06:00:11.485Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:11.485Z" + }, + "title": "Knowledge Building < 0.7.3 - Reflected XSS via Comment Reply Response", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Knowledge Building", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "0.7.3" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, and serves that response as HTML, leading to a Reflected Cross-Site Scripting." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/80b4b9d0-e48b-4f24-b4bd-71dc37ac1602/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121870.json b/data/2026/121xxx/CVE-2026-121870.json new file mode 100644 index 0000000000..4f99dc04ea --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121870.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121870", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T10:08:33.253Z", + "datePublished": "2026-11-11T06:00:11.661Z", + "dateUpdated": "2026-11-11T06:00:11.661Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:11.661Z" + }, + "title": "Simpler Checkout < 1.5.4 - Subscriber+ Privilege Escalation via Forged Auto-Login Token", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-269 Improper Privilege Management", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Simpler Checkout", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "1.5.4" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Simpler Checkout WordPress plugin before 1.5.4 does not properly restrict who can create orders and checks its automatic login link with a key that stays empty until the store owner configures the Simpler Checkout WordPress plugin before 1.5.4, allowing subscribers on stores that have not completed setup to log in as an administrator." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/a07c97a1-0faf-43fa-a4c7-0f09937790eb/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Naoki Kawahigashi", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121873.json b/data/2026/121xxx/CVE-2026-121873.json new file mode 100644 index 0000000000..1aed815697 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121873.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121873", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T10:21:12.681Z", + "datePublished": "2026-11-11T06:00:11.842Z", + "dateUpdated": "2026-11-11T06:00:11.842Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:11.842Z" + }, + "title": "Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request Creation", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Redirection for Contact Form 7", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "2.6.0", + "lessThan": "3.2.16" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Redirection for Contact Form 7 WordPress plugin before 3.2.16 does not verify ownership of the email address supplied through its data request form action and by default records the resulting request as already confirmed, allowing unauthenticated visitors to create verified WordPress personal data erasure or export requests for addresses they do not control." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/543fa273-943b-40f6-bcdf-84ca800fa46b/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Akshat Parikh (SN1PER)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121998.json b/data/2026/121xxx/CVE-2026-121998.json new file mode 100644 index 0000000000..7a9fe41085 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121998.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121998", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T13:30:26.084Z", + "datePublished": "2026-11-11T06:00:12.022Z", + "dateUpdated": "2026-11-11T06:00:12.022Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:12.022Z" + }, + "title": "iChart < 2.2.4 - Subscriber+ Arbitrary Post Read, Update and Deletion via IDOR", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639 Authorization Bypass Through User-Controlled Key", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "iChart", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "2.2.4" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The iChart WordPress plugin before 2.2.4 does not perform capability or ownership checks in several of its AJAX actions, relying only on a nonce that any logged-in user can obtain, allowing users with a role as low as Subscriber to read, modify and permanently delete arbitrary posts and to overwrite a site-wide option." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/5e24fb30-d902-4195-b387-50a6411c2008/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Hariom Singh", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122061.json b/data/2026/122xxx/CVE-2026-122061.json new file mode 100644 index 0000000000..c7bdf0a486 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122061.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122061", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T16:44:16.540Z", + "datePublished": "2026-11-11T06:00:12.196Z", + "dateUpdated": "2026-11-11T06:00:12.196Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:12.196Z" + }, + "title": "Event Tickets < 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST Endpoint", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Event Tickets and Registration", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "5.30.3.1" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Event Tickets and Registration WordPress plugin before 5.30.3.1 does not correctly check whether an event displays a public attendee list before returning one of its attendees over the REST API, allowing unauthenticated users to retrieve the names of attendees of events that do not show a public attendee list." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/a3546a21-e420-4482-8bbd-7d8f9b9c9b56/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aaron - WellKnown", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122087.json b/data/2026/122xxx/CVE-2026-122087.json new file mode 100644 index 0000000000..6241d73fd6 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122087.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122087", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-04T17:00:08.400Z", + "datePublished": "2026-11-11T06:00:12.367Z", + "dateUpdated": "2026-11-11T06:00:12.367Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:12.367Z" + }, + "title": "Event Tickets < 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post_status Filter Bypass in Attendees REST API", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Event Tickets and Registration", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "5.30.3.1" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Event Tickets and Registration WordPress plugin before 5.30.3.1 does not restrict attendee data to events the requester is allowed to view, allowing unauthenticated users to retrieve the attendees of private and other non-public events." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/773e0e78-9ba2-4d51-9f0e-f8449fd4125b/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aaron - WellKnown", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123134.json b/data/2026/123xxx/CVE-2026-123134.json new file mode 100644 index 0000000000..0a477cbce4 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123134.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123134", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-05T13:38:52.411Z", + "datePublished": "2026-11-11T06:00:12.541Z", + "dateUpdated": "2026-11-11T06:00:12.541Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:12.541Z" + }, + "title": "Smoove Abandoned Cart Trigger for WooCommerce 4.0.0 - 4.3.5 - Unauthenticated Stored XSS", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Smoove abandoned cart trigger for WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "4.0.0", + "lessThan": "4.3.6" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Smoove abandoned cart trigger for WooCommerce WordPress plugin before 4.3.6 does not sanitise and escape abandoned-cart data submitted by visitors before outputting it in the admin dashboard, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/ad3a49ed-4740-4503-9c08-8c0fac5fc270/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Naoki Kawahigashi", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123656.json b/data/2026/123xxx/CVE-2026-123656.json new file mode 100644 index 0000000000..09916be5df --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123656.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123656", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T08:52:41.287Z", + "datePublished": "2026-11-11T06:00:12.711Z", + "dateUpdated": "2026-11-11T06:00:12.711Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:12.711Z" + }, + "title": "ProfilePress < 4.17.6 - Unauthenticated Restricted Content Disclosure via REST API", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "ProfilePress", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "4.17.6" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content protection rule conditions when content is rendered outside the main query, allowing unauthenticated users to read the content of pages protected by such rules via the REST API." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/5a670095-e8c7-4317-a929-a896d01ee648/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "an7ln", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123657.json b/data/2026/123xxx/CVE-2026-123657.json new file mode 100644 index 0000000000..0f0afbb851 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123657.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123657", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T08:53:32.784Z", + "datePublished": "2026-11-11T06:00:12.882Z", + "dateUpdated": "2026-11-11T06:00:12.882Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:12.882Z" + }, + "title": "ProfilePress < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan ID", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "ProfilePress", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "4.17.6" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The ProfilePress WordPress plugin before 4.17.6 does not reject negative membership plan identifiers before checking whether a plan is active, allowing unauthenticated visitors to sign up for membership plans an administrator has deactivated and receive the role attached to them." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/9ddc7296-26be-46ca-9752-d48c88754f55/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Charles Vosburgh", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123661.json b/data/2026/123xxx/CVE-2026-123661.json new file mode 100644 index 0000000000..9fd7d4bea9 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123661.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123661", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:01:42.099Z", + "datePublished": "2026-11-11T06:00:13.295Z", + "dateUpdated": "2026-11-11T06:00:13.295Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:13.295Z" + }, + "title": "ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "ProfilePress", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "4.16.13", + "lessThan": "4.17.4" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/e70de446-003c-4198-9951-e0fb336978f8/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Karthik Ramakrishnan", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123666.json b/data/2026/123xxx/CVE-2026-123666.json new file mode 100644 index 0000000000..321746f2ba --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123666.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123666", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:26:04.742Z", + "datePublished": "2026-11-11T06:00:13.465Z", + "dateUpdated": "2026-11-11T06:00:13.465Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:13.465Z" + }, + "title": "Photo Engine < 6.6.2 - Author+ Media Deletion via Collection Deletion", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639 Authorization Bypass Through User-Controlled Key", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Photo Engine (Media Organizer & Lightroom)", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "6.6.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not check that a user may delete the media in a collection before deleting it along with the collection, allowing users with the Author role and above to permanently delete other users' synced media, including administrators'." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/2d65ab42-36cd-4ba1-8c2d-08eae7cd7214/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aabideen Bangash", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123667.json b/data/2026/123xxx/CVE-2026-123667.json new file mode 100644 index 0000000000..fba7dfe22f --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123667.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123667", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:26:06.694Z", + "datePublished": "2026-11-11T06:00:13.638Z", + "dateUpdated": "2026-11-11T06:00:13.638Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:13.638Z" + }, + "title": "Photo Engine < 6.6.2 - Author+ Stored XSS via Keyword Names", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Photo Engine (Media Organizer & Lightroom)", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "6.6.2" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not sanitise and escape keyword names before storing them and outputting them on its debugging page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks against administrators who have enabled that page." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/4dc2a8c5-9f1d-4bec-86fd-6d9b4aae5444/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aabideen Bangash", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123695.json b/data/2026/123xxx/CVE-2026-123695.json new file mode 100644 index 0000000000..c2cc076ba6 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123695.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123695", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:49:55.751Z", + "datePublished": "2026-11-11T06:00:14.040Z", + "dateUpdated": "2026-11-11T06:00:14.040Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:14.040Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Privilege Escalation via REST API Options Update and User Token Disclosure", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-269 Improper Privilege Management", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to several of its REST API routes, allowing unauthenticated users to generate login tokens for every user and then retrieve them, and so log in as any user, including administrators." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/ad945f05-fc7e-4dad-8a37-b9a6a7acf7e0/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aabideen Bangash", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123696.json b/data/2026/123xxx/CVE-2026-123696.json new file mode 100644 index 0000000000..76677ffccf --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123696.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123696", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:49:57.599Z", + "datePublished": "2026-11-11T06:00:14.221Z", + "dateUpdated": "2026-11-11T06:00:14.221Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:14.221Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Authentication Reset", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before resetting two-factor authentication enrolment, allowing unauthenticated users to remove the second factor from any account, or from every account at once." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/60efadce-ae1b-448c-9e9c-aa65ee5e028d/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123697.json b/data/2026/123xxx/CVE-2026-123697.json new file mode 100644 index 0000000000..d5d45b432c --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123697.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123697", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:49:59.342Z", + "datePublished": "2026-11-11T06:00:14.396Z", + "dateUpdated": "2026-11-11T06:00:14.396Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:14.396Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Code and Secret Disclosure", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict who can request a user's current two-factor code or two-factor secret, allowing unauthenticated users to obtain them for any account and bypass the second factor on sites where its one-time password library is available." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/58f2562b-e108-46ab-92bb-3430109dab1f/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123698.json b/data/2026/123xxx/CVE-2026-123698.json new file mode 100644 index 0000000000..46a69cea8c --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123698.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123698", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:00.856Z", + "datePublished": "2026-11-11T06:00:14.576Z", + "dateUpdated": "2026-11-11T06:00:14.576Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:14.576Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings Disclosure via REST API", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve its full settings, including configured secret keys and the hidden login URL." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/f13ecbe7-8abb-4736-be5c-fd38f402181c/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123699.json b/data/2026/123xxx/CVE-2026-123699.json new file mode 100644 index 0000000000..08672b9a63 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123699.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123699", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:02.645Z", + "datePublished": "2026-11-11T06:00:14.748Z", + "dateUpdated": "2026-11-11T06:00:14.748Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:14.748Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core Updates", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running bulk Security For WooCommerce WordPress plugin through 1.0.16, and WordPress core updates, allowing unauthenticated users to force every pending update to be installed on the site." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/344ca520-dc28-4d52-a400-559d23359d23/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123700.json b/data/2026/123xxx/CVE-2026-123700.json new file mode 100644 index 0000000000..5ab7f2d029 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123700.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123700", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:04.587Z", + "datePublished": "2026-11-11T06:00:14.930Z", + "dateUpdated": "2026-11-11T06:00:14.930Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:14.930Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Mass Comment Deletion", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running several of its comment cleanup actions, allowing unauthenticated users to permanently delete all comments on the site, including approved ones and WooCommerce order notes." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/3facdee3-eb7e-458c-b496-9946f8e2d1f0/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123701.json b/data/2026/123xxx/CVE-2026-123701.json new file mode 100644 index 0000000000..12dc1a47be --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123701.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123701", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:06.653Z", + "datePublished": "2026-11-11T06:00:15.102Z", + "dateUpdated": "2026-11-11T06:00:15.102Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:15.102Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings Reset", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not have proper authorization checks when resetting its settings, allowing unauthenticated users to reset any section of its configuration to the defaults and so disable security features such as a custom login URL, two-factor authentication, reCAPTCHA, password policies and the firewall." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/9d65f64f-b9d5-488d-a81d-4013a1b1fc9e/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123702.json b/data/2026/123xxx/CVE-2026-123702.json new file mode 100644 index 0000000000..ce93031a04 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123702.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123702", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:08.175Z", + "datePublished": "2026-11-11T06:00:15.281Z", + "dateUpdated": "2026-11-11T06:00:15.281Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:15.281Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated wp-config Keys and Salts Reset and Denial of Service", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before regenerating the secret keys and salts in the site's configuration file, allowing unauthenticated users to log out every user and, on servers that cannot reach the WordPress.org API, corrupt the configuration file and take the whole site offline." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/28de2af4-74aa-497d-9f1a-69d40c72fea5/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123703.json b/data/2026/123xxx/CVE-2026-123703.json new file mode 100644 index 0000000000..3c1726cc40 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123703.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123703", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:10.099Z", + "datePublished": "2026-11-11T06:00:15.455Z", + "dateUpdated": "2026-11-11T06:00:15.455Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:15.455Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Arbitrary User Logout via usfw_user_force_logout", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862 Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before ending a user's login sessions, allowing unauthenticated visitors to log out any user, including administrators, and to keep them logged out by repeating the request." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/6b255385-26ae-416c-8c2d-a673508aa212/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123704.json b/data/2026/123xxx/CVE-2026-123704.json new file mode 100644 index 0000000000..21543a5647 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123704.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123704", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:11.720Z", + "datePublished": "2026-11-11T06:00:15.626Z", + "dateUpdated": "2026-11-11T06:00:15.626Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:15.626Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Administrator Email Address Disclosure", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve the email address of every administrator on the site." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/b7e8fa76-32c0-48ea-a685-2a75ffe94cd1/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123705.json b/data/2026/123xxx/CVE-2026-123705.json new file mode 100644 index 0000000000..e9040defc6 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123705.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123705", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-11-06T09:50:13.583Z", + "datePublished": "2026-11-11T06:00:15.801Z", + "dateUpdated": "2026-11-11T06:00:15.801Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:15.801Z" + }, + "title": "Security For WooCommerce <= 1.0.16 - Unauthenticated Server Configuration Information Disclosure", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200 Information Exposure", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "Security For WooCommerce", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "1.0.16" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve a detailed report of the server, PHP and WordPress configuration, including installed Security For WooCommerce WordPress plugin through 1.0.16 and versions and the site administrator's email address." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/cb9bbd7a-c13a-4129-a910-45746af203ce/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Benjamin Kincses (Dextheking1)", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16313.json b/data/2026/16xxx/CVE-2026-16313.json index bf56692459..080ffda468 100644 --- a/data/2026/16xxx/CVE-2026-16313.json +++ b/data/2026/16xxx/CVE-2026-16313.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-07-20T15:35:41.936Z", "datePublished": "2026-07-28T16:47:06.471Z", - "dateUpdated": "2026-11-09T17:12:59.336Z" + "dateUpdated": "2026-11-11T05:50:04.038Z" }, "containers": { "cna": { @@ -327,6 +327,24 @@ "cpe:/a:redhat:openshift:4.12::el8" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift/ose-rhel-coreos-9", + "defaultStatus": "affected", + "versions": [ + { + "version": "413.92.202611041925-0", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", @@ -653,6 +671,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95745", + "name": "RHSA-2026:95745", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-16313", "tags": [ @@ -713,7 +739,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-09T17:12:59.336Z" + "dateUpdated": "2026-11-11T05:50:04.038Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/33xxx/CVE-2026-33818.json b/data/2026/33xxx/CVE-2026-33818.json index b704d92624..1f7ce1a81e 100644 --- a/data/2026/33xxx/CVE-2026-33818.json +++ b/data/2026/33xxx/CVE-2026-33818.json @@ -8,14 +8,14 @@ "assignerShortName": "Go", "dateReserved": "2026-03-23T20:35:32.815Z", "datePublished": "2026-08-13T21:58:52.821Z", - "dateUpdated": "2026-11-11T03:13:09.554Z" + "dateUpdated": "2026-11-11T05:20:01.865Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", - "dateUpdated": "2026-11-11T03:13:09.554Z" + "dateUpdated": "2026-11-11T05:20:01.865Z" }, "title": "Enforce maximum recursion depth in encoding/asn1", "descriptions": [ diff --git a/data/2026/42xxx/CVE-2026-42504.json b/data/2026/42xxx/CVE-2026-42504.json index b83d7223a1..c8673b1e13 100644 --- a/data/2026/42xxx/CVE-2026-42504.json +++ b/data/2026/42xxx/CVE-2026-42504.json @@ -8,14 +8,14 @@ "assignerShortName": "Go", "dateReserved": "2026-04-28T00:21:12.792Z", "datePublished": "2026-06-02T22:01:37.219Z", - "dateUpdated": "2026-11-11T03:13:08.033Z" + "dateUpdated": "2026-11-11T05:20:00.355Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", - "dateUpdated": "2026-11-11T03:13:08.033Z" + "dateUpdated": "2026-11-11T05:20:00.355Z" }, "title": "Quadratic complexity in WordDecoder.DecodeHeader in mime", "descriptions": [ diff --git a/data/2026/42xxx/CVE-2026-42784.json b/data/2026/42xxx/CVE-2026-42784.json index dee7d8ddf9..6bda14d0fc 100644 --- a/data/2026/42xxx/CVE-2026-42784.json +++ b/data/2026/42xxx/CVE-2026-42784.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-04-29T15:09:53.696Z", "datePublished": "2026-09-16T16:56:11.638Z", - "dateUpdated": "2026-11-10T14:08:22.309Z" + "dateUpdated": "2026-11-11T05:55:47.781Z" }, "containers": { "cna": { @@ -121,6 +121,24 @@ "cpe:/o:redhat:enterprise_linux:10.2" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.0 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "rust-rpm-sequoia", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.6.0-6.el10_0.7", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.0" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", @@ -428,6 +446,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:98248", + "name": "RHSA-2026:98248", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42784", "tags": [ @@ -479,7 +505,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-10T14:08:22.309Z" + "dateUpdated": "2026-11-11T05:55:47.781Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/43xxx/CVE-2026-43961.json b/data/2026/43xxx/CVE-2026-43961.json index 4b907cf413..34274b251f 100644 --- a/data/2026/43xxx/CVE-2026-43961.json +++ b/data/2026/43xxx/CVE-2026-43961.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-05-04T18:07:21.843Z", "datePublished": "2026-08-19T14:06:09.120Z", - "dateUpdated": "2026-11-06T05:58:15.601Z" + "dateUpdated": "2026-11-11T05:55:43.046Z" }, "containers": { "cna": { @@ -62,6 +62,44 @@ ], "defaultStatus": "unaffected" }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "vim", + "defaultStatus": "affected", + "versions": [ + { + "version": "2:8.0.1763-34.el8_10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux:8::appstream", + "cpe:/o:redhat:enterprise_linux:8::baseos" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "vim", + "defaultStatus": "affected", + "versions": [ + { + "version": "2:8.0.1763-34.el8_10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux:8::appstream", + "cpe:/o:redhat:enterprise_linux:8::baseos" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -110,16 +148,6 @@ "cpe:/o:redhat:rhel_els:7" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 8", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "vim", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:8" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", @@ -180,6 +208,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:98119", + "name": "RHSA-2026:98119", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-43961", "tags": [ @@ -240,7 +276,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T05:58:15.601Z" + "dateUpdated": "2026-11-11T05:55:43.046Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/88xxx/CVE-2026-88813.json b/data/2026/88xxx/CVE-2026-88813.json new file mode 100644 index 0000000000..368616b982 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88813.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88813", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2026-09-10T08:40:18.600Z", + "datePublished": "2026-11-11T06:00:15.978Z", + "dateUpdated": "2026-11-11T06:00:15.978Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2026-11-11T06:00:15.978Z" + }, + "title": "YITH WooCommerce Gift Cards <= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted Purchase", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284 Improper Access Control", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "YITH WooCommerce Gift Cards", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThanOrEqual": "4.39.0" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The YITH WooCommerce Gift Cards WordPress plugin through 4.39.0 does not reconcile the value of a gift card it issues against the amount actually paid for it, instead crediting the new card with the item's pre-discount price, which allows customers to apply an ordinary store coupon at checkout and receive a gift card worth more than they paid." + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/fc7e0837-640d-461d-aac3-cd58c8137c14/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Guillermo Álvarez Fernández", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 54cde79fb3..a3d95bd731 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,566 +1,368 @@ { - "fetchTime": "2026-11-11T05:02:21.760Z", - "numberOfChanges": 93, - "new": [], - "updated": [ + "fetchTime": "2026-11-11T06:04:25.788Z", + "numberOfChanges": 60, + "new": [ { - "cveId": "CVE-2025-61625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-61625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/61xxx/CVE-2025-61625.json", - "dateUpdated": "2026-11-11T04:57:59.837Z" + "cveId": "CVE-2025-15711", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15711", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15711.json", + "dateUpdated": "2026-11-11T06:00:04.589Z" }, { - "cveId": "CVE-2026-104352", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104352", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104352.json", - "dateUpdated": "2026-11-11T04:56:23.115Z" + "cveId": "CVE-2025-15712", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15712", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15712.json", + "dateUpdated": "2026-11-11T06:00:04.765Z" }, { - "cveId": "CVE-2026-110086", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110086", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110086.json", - "dateUpdated": "2026-11-11T04:56:21.867Z" + "cveId": "CVE-2025-15713", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15713", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15713.json", + "dateUpdated": "2026-11-11T06:00:04.940Z" }, { - "cveId": "CVE-2026-110087", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110087", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110087.json", - "dateUpdated": "2026-11-11T04:56:28.048Z" + "cveId": "CVE-2025-15714", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15714", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15714.json", + "dateUpdated": "2026-11-11T06:00:05.113Z" }, { - "cveId": "CVE-2026-110088", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110088", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110088.json", - "dateUpdated": "2026-11-11T04:56:25.668Z" + "cveId": "CVE-2026-104718", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104718", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104718.json", + "dateUpdated": "2026-11-11T06:00:05.302Z" }, { - "cveId": "CVE-2026-110089", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110089", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110089.json", - "dateUpdated": "2026-11-11T04:56:26.816Z" + "cveId": "CVE-2026-106468", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106468", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106468.json", + "dateUpdated": "2026-11-11T06:00:05.477Z" }, { - "cveId": "CVE-2026-113512", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113512", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113512.json", - "dateUpdated": "2026-11-11T04:57:11.760Z" + "cveId": "CVE-2026-109870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109870.json", + "dateUpdated": "2026-11-11T06:00:05.654Z" }, { - "cveId": "CVE-2026-113516", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113516", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113516.json", - "dateUpdated": "2026-11-11T04:57:10.593Z" + "cveId": "CVE-2026-109871", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109871", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109871.json", + "dateUpdated": "2026-11-11T06:00:05.831Z" }, { - "cveId": "CVE-2026-113517", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113517", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113517.json", - "dateUpdated": "2026-11-11T04:57:09.281Z" + "cveId": "CVE-2026-109873", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109873", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109873.json", + "dateUpdated": "2026-11-11T06:00:06.004Z" }, { - "cveId": "CVE-2026-113523", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113523", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113523.json", - "dateUpdated": "2026-11-11T04:57:08.091Z" + "cveId": "CVE-2026-110016", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110016", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110016.json", + "dateUpdated": "2026-11-11T06:00:06.177Z" }, { - "cveId": "CVE-2026-113525", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113525", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113525.json", - "dateUpdated": "2026-11-11T04:57:06.837Z" + "cveId": "CVE-2026-110948", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110948", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110948.json", + "dateUpdated": "2026-11-11T06:00:06.346Z" }, { - "cveId": "CVE-2026-113526", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113526", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113526.json", - "dateUpdated": "2026-11-11T04:56:59.751Z" + "cveId": "CVE-2026-110949", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110949", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110949.json", + "dateUpdated": "2026-11-11T06:00:06.520Z" }, { - "cveId": "CVE-2026-113528", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113528", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113528.json", - "dateUpdated": "2026-11-11T04:57:05.616Z" + "cveId": "CVE-2026-111579", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111579", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111579.json", + "dateUpdated": "2026-11-11T06:00:06.690Z" }, { - "cveId": "CVE-2026-113530", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113530", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113530.json", - "dateUpdated": "2026-11-11T04:57:04.256Z" + "cveId": "CVE-2026-111597", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111597", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111597.json", + "dateUpdated": "2026-11-11T06:00:06.888Z" }, { - "cveId": "CVE-2026-113532", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113532", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113532.json", - "dateUpdated": "2026-11-11T04:56:58.507Z" + "cveId": "CVE-2026-115733", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115733", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115733.json", + "dateUpdated": "2026-11-11T06:00:07.103Z" }, { - "cveId": "CVE-2026-113534", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113534", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113534.json", - "dateUpdated": "2026-11-11T04:56:57.252Z" + "cveId": "CVE-2026-115734", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115734", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115734.json", + "dateUpdated": "2026-11-11T06:00:07.276Z" }, { - "cveId": "CVE-2026-113536", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113536", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113536.json", - "dateUpdated": "2026-11-11T04:57:02.789Z" + "cveId": "CVE-2026-115735", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115735", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115735.json", + "dateUpdated": "2026-11-11T06:00:07.456Z" }, { - "cveId": "CVE-2026-113538", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113538", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113538.json", - "dateUpdated": "2026-11-11T04:57:00.970Z" + "cveId": "CVE-2026-117521", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117521", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117521.json", + "dateUpdated": "2026-11-11T06:00:07.628Z" }, { - "cveId": "CVE-2026-113541", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113541", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113541.json", - "dateUpdated": "2026-11-11T04:56:40.795Z" + "cveId": "CVE-2026-117522", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117522", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117522.json", + "dateUpdated": "2026-11-11T06:00:07.799Z" }, { - "cveId": "CVE-2026-113543", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113543", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113543.json", - "dateUpdated": "2026-11-11T04:56:39.606Z" + "cveId": "CVE-2026-117523", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117523", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117523.json", + "dateUpdated": "2026-11-11T06:00:07.977Z" }, { - "cveId": "CVE-2026-113545", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113545", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113545.json", - "dateUpdated": "2026-11-11T04:56:38.390Z" + "cveId": "CVE-2026-117524", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117524", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117524.json", + "dateUpdated": "2026-11-11T06:00:08.151Z" }, { - "cveId": "CVE-2026-113547", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113547", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113547.json", - "dateUpdated": "2026-11-11T04:56:37.139Z" + "cveId": "CVE-2026-118041", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118041", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118041.json", + "dateUpdated": "2026-11-11T06:00:08.321Z" }, { - "cveId": "CVE-2026-113549", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113549", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113549.json", - "dateUpdated": "2026-11-11T04:56:54.810Z" + "cveId": "CVE-2026-118241", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118241", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118241.json", + "dateUpdated": "2026-11-11T06:00:08.494Z" }, { - "cveId": "CVE-2026-113553", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113553", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113553.json", - "dateUpdated": "2026-11-11T04:56:53.646Z" + "cveId": "CVE-2026-118418", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118418", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118418.json", + "dateUpdated": "2026-11-11T06:00:08.671Z" }, { - "cveId": "CVE-2026-113555", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113555", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113555.json", - "dateUpdated": "2026-11-11T04:56:52.408Z" + "cveId": "CVE-2026-118420", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118420", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118420.json", + "dateUpdated": "2026-11-11T06:00:08.847Z" }, { - "cveId": "CVE-2026-113558", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113558", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113558.json", - "dateUpdated": "2026-11-11T04:56:47.117Z" + "cveId": "CVE-2026-118439", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118439", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118439.json", + "dateUpdated": "2026-11-11T06:00:09.024Z" }, { - "cveId": "CVE-2026-113562", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113562", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113562.json", - "dateUpdated": "2026-11-11T04:56:48.325Z" + "cveId": "CVE-2026-119032", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119032", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119032.json", + "dateUpdated": "2026-11-11T06:00:09.200Z" }, { - "cveId": "CVE-2026-113563", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113563", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113563.json", - "dateUpdated": "2026-11-11T04:56:45.861Z" + "cveId": "CVE-2026-119033", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119033", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119033.json", + "dateUpdated": "2026-11-11T06:00:09.369Z" }, { - "cveId": "CVE-2026-113565", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113565", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113565.json", - "dateUpdated": "2026-11-11T04:56:51.155Z" + "cveId": "CVE-2026-119034", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119034", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119034.json", + "dateUpdated": "2026-11-11T06:00:09.544Z" }, { - "cveId": "CVE-2026-113567", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113567", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113567.json", - "dateUpdated": "2026-11-11T04:56:49.470Z" + "cveId": "CVE-2026-119035", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119035", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119035.json", + "dateUpdated": "2026-11-11T06:00:09.716Z" }, { - "cveId": "CVE-2026-113575", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113575", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113575.json", - "dateUpdated": "2026-11-11T04:56:33.251Z" + "cveId": "CVE-2026-119303", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119303", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119303.json", + "dateUpdated": "2026-11-11T06:00:10.373Z" }, { - "cveId": "CVE-2026-113579", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113579", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113579.json", - "dateUpdated": "2026-11-11T04:57:48.611Z" + "cveId": "CVE-2026-119529", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119529", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119529.json", + "dateUpdated": "2026-11-11T06:00:10.545Z" }, { - "cveId": "CVE-2026-113580", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113580", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113580.json", - "dateUpdated": "2026-11-11T04:57:47.416Z" + "cveId": "CVE-2026-119531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119531.json", + "dateUpdated": "2026-11-11T06:00:10.726Z" }, { - "cveId": "CVE-2026-114371", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114371", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114371.json", - "dateUpdated": "2026-11-11T04:57:46.242Z" + "cveId": "CVE-2026-121472", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121472", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121472.json", + "dateUpdated": "2026-11-11T06:00:10.898Z" }, { - "cveId": "CVE-2026-116003", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116003", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116003.json", - "dateUpdated": "2026-11-11T04:56:32.042Z" + "cveId": "CVE-2026-121497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121497.json", + "dateUpdated": "2026-11-11T06:00:11.121Z" }, { - "cveId": "CVE-2026-116480", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116480", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116480.json", - "dateUpdated": "2026-11-11T04:56:34.579Z" + "cveId": "CVE-2026-121862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121862.json", + "dateUpdated": "2026-11-11T06:00:11.309Z" }, { - "cveId": "CVE-2026-117546", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117546", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117546.json", - "dateUpdated": "2026-11-11T04:56:35.843Z" + "cveId": "CVE-2026-121863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121863.json", + "dateUpdated": "2026-11-11T06:00:11.485Z" }, { - "cveId": "CVE-2026-117547", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117547", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117547.json", - "dateUpdated": "2026-11-11T04:56:30.563Z" + "cveId": "CVE-2026-121870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121870.json", + "dateUpdated": "2026-11-11T06:00:11.661Z" }, { - "cveId": "CVE-2026-118483", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118483", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118483.json", - "dateUpdated": "2026-11-11T04:56:44.531Z" + "cveId": "CVE-2026-121873", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121873", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121873.json", + "dateUpdated": "2026-11-11T06:00:11.842Z" }, { - "cveId": "CVE-2026-119017", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119017", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119017.json", - "dateUpdated": "2026-11-11T04:57:49.781Z" + "cveId": "CVE-2026-121998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121998.json", + "dateUpdated": "2026-11-11T06:00:12.022Z" }, { - "cveId": "CVE-2026-121349", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121349", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121349.json", - "dateUpdated": "2026-11-11T04:57:37.267Z" + "cveId": "CVE-2026-122061", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122061", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122061.json", + "dateUpdated": "2026-11-11T06:00:12.196Z" }, { - "cveId": "CVE-2026-121351", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121351", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121351.json", - "dateUpdated": "2026-11-11T04:57:20.081Z" + "cveId": "CVE-2026-122087", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122087", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122087.json", + "dateUpdated": "2026-11-11T06:00:12.367Z" }, { - "cveId": "CVE-2026-121352", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121352", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121352.json", - "dateUpdated": "2026-11-11T04:57:25.069Z" + "cveId": "CVE-2026-123134", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123134", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123134.json", + "dateUpdated": "2026-11-11T06:00:12.541Z" }, { - "cveId": "CVE-2026-121353", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121353", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121353.json", - "dateUpdated": "2026-11-11T04:57:26.301Z" + "cveId": "CVE-2026-123656", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123656", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123656.json", + "dateUpdated": "2026-11-11T06:00:12.711Z" }, { - "cveId": "CVE-2026-121354", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121354", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121354.json", - "dateUpdated": "2026-11-11T04:57:27.563Z" + "cveId": "CVE-2026-123657", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123657", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123657.json", + "dateUpdated": "2026-11-11T06:00:12.882Z" }, { - "cveId": "CVE-2026-121356", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121356", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121356.json", - "dateUpdated": "2026-11-11T04:57:16.425Z" + "cveId": "CVE-2026-123661", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123661", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123661.json", + "dateUpdated": "2026-11-11T06:00:13.295Z" }, { - "cveId": "CVE-2026-121530", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121530", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121530.json", - "dateUpdated": "2026-11-11T04:58:04.327Z" + "cveId": "CVE-2026-123666", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123666", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123666.json", + "dateUpdated": "2026-11-11T06:00:13.465Z" }, { - "cveId": "CVE-2026-121887", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121887", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121887.json", - "dateUpdated": "2026-11-11T04:57:28.729Z" + "cveId": "CVE-2026-123667", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123667", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123667.json", + "dateUpdated": "2026-11-11T06:00:13.638Z" }, { - "cveId": "CVE-2026-121889", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121889", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121889.json", - "dateUpdated": "2026-11-11T04:57:18.896Z" + "cveId": "CVE-2026-123695", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123695", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123695.json", + "dateUpdated": "2026-11-11T06:00:14.040Z" }, { - "cveId": "CVE-2026-121892", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121892", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121892.json", - "dateUpdated": "2026-11-11T04:57:29.917Z" + "cveId": "CVE-2026-123696", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123696", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123696.json", + "dateUpdated": "2026-11-11T06:00:14.221Z" }, { - "cveId": "CVE-2026-121894", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121894", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121894.json", - "dateUpdated": "2026-11-11T04:57:31.128Z" + "cveId": "CVE-2026-123697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123697.json", + "dateUpdated": "2026-11-11T06:00:14.396Z" }, { - "cveId": "CVE-2026-121896", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121896", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121896.json", - "dateUpdated": "2026-11-11T04:57:32.324Z" + "cveId": "CVE-2026-123698", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123698", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123698.json", + "dateUpdated": "2026-11-11T06:00:14.576Z" }, { - "cveId": "CVE-2026-121898", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121898", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121898.json", - "dateUpdated": "2026-11-11T04:57:33.589Z" + "cveId": "CVE-2026-123699", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123699", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123699.json", + "dateUpdated": "2026-11-11T06:00:14.748Z" }, { - "cveId": "CVE-2026-121900", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121900", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121900.json", - "dateUpdated": "2026-11-11T04:57:38.849Z" + "cveId": "CVE-2026-123700", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123700", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123700.json", + "dateUpdated": "2026-11-11T06:00:14.930Z" }, { - "cveId": "CVE-2026-121902", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121902", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121902.json", - "dateUpdated": "2026-11-11T04:57:39.985Z" + "cveId": "CVE-2026-123701", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123701", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123701.json", + "dateUpdated": "2026-11-11T06:00:15.102Z" }, { - "cveId": "CVE-2026-121906", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121906", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121906.json", - "dateUpdated": "2026-11-11T04:57:36.103Z" + "cveId": "CVE-2026-123702", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123702", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123702.json", + "dateUpdated": "2026-11-11T06:00:15.281Z" }, { - "cveId": "CVE-2026-121908", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121908", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121908.json", - "dateUpdated": "2026-11-11T04:57:34.908Z" + "cveId": "CVE-2026-123703", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123703", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123703.json", + "dateUpdated": "2026-11-11T06:00:15.455Z" }, { - "cveId": "CVE-2026-121913", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121913", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121913.json", - "dateUpdated": "2026-11-11T04:57:43.978Z" + "cveId": "CVE-2026-123704", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123704", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123704.json", + "dateUpdated": "2026-11-11T06:00:15.626Z" }, { - "cveId": "CVE-2026-123263", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123263", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123263.json", - "dateUpdated": "2026-11-11T04:57:12.932Z" + "cveId": "CVE-2026-123705", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123705", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123705.json", + "dateUpdated": "2026-11-11T06:00:15.801Z" }, { - "cveId": "CVE-2026-125343", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125343", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125343.json", - "dateUpdated": "2026-11-11T04:57:54.949Z" - }, - { - "cveId": "CVE-2026-125344", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125344", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125344.json", - "dateUpdated": "2026-11-11T04:57:52.161Z" - }, - { - "cveId": "CVE-2026-125346", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125346", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125346.json", - "dateUpdated": "2026-11-11T04:57:50.948Z" - }, - { - "cveId": "CVE-2026-125347", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125347", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125347.json", - "dateUpdated": "2026-11-11T04:57:56.180Z" - }, - { - "cveId": "CVE-2026-125348", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125348", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125348.json", - "dateUpdated": "2026-11-11T04:57:53.368Z" - }, - { - "cveId": "CVE-2026-20880", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-20880", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20880.json", - "dateUpdated": "2026-11-11T04:56:56.041Z" - }, - { - "cveId": "CVE-2026-26052", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26052", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26052.json", - "dateUpdated": "2026-11-11T04:57:14.114Z" - }, - { - "cveId": "CVE-2026-28702", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-28702", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28702.json", - "dateUpdated": "2026-11-11T04:57:15.287Z" - }, - { - "cveId": "CVE-2026-32667", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-32667", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32667.json", - "dateUpdated": "2026-11-11T04:57:17.673Z" - }, - { - "cveId": "CVE-2026-32670", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-32670", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32670.json", - "dateUpdated": "2026-11-11T04:57:21.387Z" - }, - { - "cveId": "CVE-2026-33567", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33567", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33567.json", - "dateUpdated": "2026-11-11T04:57:22.619Z" - }, - { - "cveId": "CVE-2026-34016", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-34016", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34016.json", - "dateUpdated": "2026-11-11T04:57:23.889Z" - }, - { - "cveId": "CVE-2026-42067", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42067", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42067.json", - "dateUpdated": "2026-11-11T04:57:41.152Z" - }, - { - "cveId": "CVE-2026-46632", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-46632", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/46xxx/CVE-2026-46632.json", - "dateUpdated": "2026-11-11T04:57:58.647Z" - }, - { - "cveId": "CVE-2026-48402", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-48402", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48402.json", - "dateUpdated": "2026-11-11T04:56:29.207Z" - }, - { - "cveId": "CVE-2026-55297", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55297", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55297.json", - "dateUpdated": "2026-11-11T04:58:06.989Z" - }, - { - "cveId": "CVE-2026-55346", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55346", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55346.json", - "dateUpdated": "2026-11-11T04:58:16.850Z" - }, - { - "cveId": "CVE-2026-56438", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56438", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56438.json", - "dateUpdated": "2026-11-11T04:57:57.486Z" - }, - { - "cveId": "CVE-2026-56884", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56884", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56884.json", - "dateUpdated": "2026-11-11T04:58:10.729Z" - }, - { - "cveId": "CVE-2026-56911", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56911", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56911.json", - "dateUpdated": "2026-11-11T04:58:15.670Z" - }, - { - "cveId": "CVE-2026-56949", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56949", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56949.json", - "dateUpdated": "2026-11-11T04:58:09.507Z" - }, - { - "cveId": "CVE-2026-57013", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57013", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57013.json", - "dateUpdated": "2026-11-11T04:58:20.591Z" - }, - { - "cveId": "CVE-2026-57884", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57884", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57884.json", - "dateUpdated": "2026-11-11T04:58:01.060Z" - }, - { - "cveId": "CVE-2026-58696", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58696", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58696.json", - "dateUpdated": "2026-11-11T04:58:22.909Z" - }, - { - "cveId": "CVE-2026-58729", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58729", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58729.json", - "dateUpdated": "2026-11-11T04:58:14.347Z" - }, - { - "cveId": "CVE-2026-58778", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58778", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58778.json", - "dateUpdated": "2026-11-11T04:58:08.250Z" - }, - { - "cveId": "CVE-2026-58781", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58781", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58781.json", - "dateUpdated": "2026-11-11T04:58:13.163Z" - }, - { - "cveId": "CVE-2026-58785", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58785", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58785.json", - "dateUpdated": "2026-11-11T04:58:18.105Z" - }, - { - "cveId": "CVE-2026-58809", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58809", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58809.json", - "dateUpdated": "2026-11-11T04:58:11.986Z" - }, - { - "cveId": "CVE-2026-58813", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58813", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58813.json", - "dateUpdated": "2026-11-11T04:58:21.749Z" - }, - { - "cveId": "CVE-2026-82002", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82002", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82002.json", - "dateUpdated": "2026-11-11T04:56:42.249Z" - }, - { - "cveId": "CVE-2026-82012", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82012", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82012.json", - "dateUpdated": "2026-11-11T04:56:24.371Z" - }, - { - "cveId": "CVE-2026-95399", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95399", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95399.json", - "dateUpdated": "2026-11-11T04:58:05.761Z" - }, - { - "cveId": "CVE-2026-95404", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95404", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95404.json", - "dateUpdated": "2026-11-11T04:58:19.269Z" + "cveId": "CVE-2026-88813", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88813", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88813.json", + "dateUpdated": "2026-11-11T06:00:15.978Z" } ], + "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 64fc4fa3f7..aaf5c4dc47 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,439 @@ [ + { + "fetchTime": "2026-11-11T06:04:25.788Z", + "numberOfChanges": 60, + "new": [ + { + "cveId": "CVE-2025-15711", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15711", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15711.json", + "dateUpdated": "2026-11-11T06:00:04.589Z" + }, + { + "cveId": "CVE-2025-15712", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15712", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15712.json", + "dateUpdated": "2026-11-11T06:00:04.765Z" + }, + { + "cveId": "CVE-2025-15713", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15713", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15713.json", + "dateUpdated": "2026-11-11T06:00:04.940Z" + }, + { + "cveId": "CVE-2025-15714", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15714", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15714.json", + "dateUpdated": "2026-11-11T06:00:05.113Z" + }, + { + "cveId": "CVE-2026-104718", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104718", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104718.json", + "dateUpdated": "2026-11-11T06:00:05.302Z" + }, + { + "cveId": "CVE-2026-106468", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106468", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106468.json", + "dateUpdated": "2026-11-11T06:00:05.477Z" + }, + { + "cveId": "CVE-2026-109870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109870.json", + "dateUpdated": "2026-11-11T06:00:05.654Z" + }, + { + "cveId": "CVE-2026-109871", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109871", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109871.json", + "dateUpdated": "2026-11-11T06:00:05.831Z" + }, + { + "cveId": "CVE-2026-109873", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109873", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109873.json", + "dateUpdated": "2026-11-11T06:00:06.004Z" + }, + { + "cveId": "CVE-2026-110016", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110016", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110016.json", + "dateUpdated": "2026-11-11T06:00:06.177Z" + }, + { + "cveId": "CVE-2026-110948", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110948", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110948.json", + "dateUpdated": "2026-11-11T06:00:06.346Z" + }, + { + "cveId": "CVE-2026-110949", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110949", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110949.json", + "dateUpdated": "2026-11-11T06:00:06.520Z" + }, + { + "cveId": "CVE-2026-111579", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111579", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111579.json", + "dateUpdated": "2026-11-11T06:00:06.690Z" + }, + { + "cveId": "CVE-2026-111597", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111597", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111597.json", + "dateUpdated": "2026-11-11T06:00:06.888Z" + }, + { + "cveId": "CVE-2026-115733", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115733", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115733.json", + "dateUpdated": "2026-11-11T06:00:07.103Z" + }, + { + "cveId": "CVE-2026-115734", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115734", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115734.json", + "dateUpdated": "2026-11-11T06:00:07.276Z" + }, + { + "cveId": "CVE-2026-115735", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115735", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115735.json", + "dateUpdated": "2026-11-11T06:00:07.456Z" + }, + { + "cveId": "CVE-2026-117521", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117521", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117521.json", + "dateUpdated": "2026-11-11T06:00:07.628Z" + }, + { + "cveId": "CVE-2026-117522", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117522", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117522.json", + "dateUpdated": "2026-11-11T06:00:07.799Z" + }, + { + "cveId": "CVE-2026-117523", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117523", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117523.json", + "dateUpdated": "2026-11-11T06:00:07.977Z" + }, + { + "cveId": "CVE-2026-117524", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117524", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117524.json", + "dateUpdated": "2026-11-11T06:00:08.151Z" + }, + { + "cveId": "CVE-2026-118041", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118041", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118041.json", + "dateUpdated": "2026-11-11T06:00:08.321Z" + }, + { + "cveId": "CVE-2026-118241", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118241", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118241.json", + "dateUpdated": "2026-11-11T06:00:08.494Z" + }, + { + "cveId": "CVE-2026-118418", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118418", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118418.json", + "dateUpdated": "2026-11-11T06:00:08.671Z" + }, + { + "cveId": "CVE-2026-118420", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118420", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118420.json", + "dateUpdated": "2026-11-11T06:00:08.847Z" + }, + { + "cveId": "CVE-2026-118439", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118439", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118439.json", + "dateUpdated": "2026-11-11T06:00:09.024Z" + }, + { + "cveId": "CVE-2026-119032", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119032", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119032.json", + "dateUpdated": "2026-11-11T06:00:09.200Z" + }, + { + "cveId": "CVE-2026-119033", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119033", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119033.json", + "dateUpdated": "2026-11-11T06:00:09.369Z" + }, + { + "cveId": "CVE-2026-119034", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119034", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119034.json", + "dateUpdated": "2026-11-11T06:00:09.544Z" + }, + { + "cveId": "CVE-2026-119035", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119035", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119035.json", + "dateUpdated": "2026-11-11T06:00:09.716Z" + }, + { + "cveId": "CVE-2026-119303", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119303", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119303.json", + "dateUpdated": "2026-11-11T06:00:10.373Z" + }, + { + "cveId": "CVE-2026-119529", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119529", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119529.json", + "dateUpdated": "2026-11-11T06:00:10.545Z" + }, + { + "cveId": "CVE-2026-119531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119531.json", + "dateUpdated": "2026-11-11T06:00:10.726Z" + }, + { + "cveId": "CVE-2026-121472", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121472", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121472.json", + "dateUpdated": "2026-11-11T06:00:10.898Z" + }, + { + "cveId": "CVE-2026-121497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121497.json", + "dateUpdated": "2026-11-11T06:00:11.121Z" + }, + { + "cveId": "CVE-2026-121862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121862.json", + "dateUpdated": "2026-11-11T06:00:11.309Z" + }, + { + "cveId": "CVE-2026-121863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121863.json", + "dateUpdated": "2026-11-11T06:00:11.485Z" + }, + { + "cveId": "CVE-2026-121870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121870.json", + "dateUpdated": "2026-11-11T06:00:11.661Z" + }, + { + "cveId": "CVE-2026-121873", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121873", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121873.json", + "dateUpdated": "2026-11-11T06:00:11.842Z" + }, + { + "cveId": "CVE-2026-121998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121998.json", + "dateUpdated": "2026-11-11T06:00:12.022Z" + }, + { + "cveId": "CVE-2026-122061", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122061", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122061.json", + "dateUpdated": "2026-11-11T06:00:12.196Z" + }, + { + "cveId": "CVE-2026-122087", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122087", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122087.json", + "dateUpdated": "2026-11-11T06:00:12.367Z" + }, + { + "cveId": "CVE-2026-123134", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123134", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123134.json", + "dateUpdated": "2026-11-11T06:00:12.541Z" + }, + { + "cveId": "CVE-2026-123656", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123656", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123656.json", + "dateUpdated": "2026-11-11T06:00:12.711Z" + }, + { + "cveId": "CVE-2026-123657", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123657", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123657.json", + "dateUpdated": "2026-11-11T06:00:12.882Z" + }, + { + "cveId": "CVE-2026-123661", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123661", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123661.json", + "dateUpdated": "2026-11-11T06:00:13.295Z" + }, + { + "cveId": "CVE-2026-123666", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123666", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123666.json", + "dateUpdated": "2026-11-11T06:00:13.465Z" + }, + { + "cveId": "CVE-2026-123667", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123667", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123667.json", + "dateUpdated": "2026-11-11T06:00:13.638Z" + }, + { + "cveId": "CVE-2026-123695", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123695", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123695.json", + "dateUpdated": "2026-11-11T06:00:14.040Z" + }, + { + "cveId": "CVE-2026-123696", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123696", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123696.json", + "dateUpdated": "2026-11-11T06:00:14.221Z" + }, + { + "cveId": "CVE-2026-123697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123697.json", + "dateUpdated": "2026-11-11T06:00:14.396Z" + }, + { + "cveId": "CVE-2026-123698", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123698", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123698.json", + "dateUpdated": "2026-11-11T06:00:14.576Z" + }, + { + "cveId": "CVE-2026-123699", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123699", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123699.json", + "dateUpdated": "2026-11-11T06:00:14.748Z" + }, + { + "cveId": "CVE-2026-123700", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123700", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123700.json", + "dateUpdated": "2026-11-11T06:00:14.930Z" + }, + { + "cveId": "CVE-2026-123701", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123701", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123701.json", + "dateUpdated": "2026-11-11T06:00:15.102Z" + }, + { + "cveId": "CVE-2026-123702", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123702", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123702.json", + "dateUpdated": "2026-11-11T06:00:15.281Z" + }, + { + "cveId": "CVE-2026-123703", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123703", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123703.json", + "dateUpdated": "2026-11-11T06:00:15.455Z" + }, + { + "cveId": "CVE-2026-123704", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123704", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123704.json", + "dateUpdated": "2026-11-11T06:00:15.626Z" + }, + { + "cveId": "CVE-2026-123705", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123705", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123705.json", + "dateUpdated": "2026-11-11T06:00:15.801Z" + }, + { + "cveId": "CVE-2026-88813", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88813", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88813.json", + "dateUpdated": "2026-11-11T06:00:15.978Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-11T05:56:49.621Z", + "numberOfChanges": 3, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-114406", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114406", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114406.json", + "dateUpdated": "2026-11-11T05:51:46.836Z" + }, + { + "cveId": "CVE-2026-42784", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42784", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42784.json", + "dateUpdated": "2026-11-11T05:55:47.781Z" + }, + { + "cveId": "CVE-2026-43961", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-43961", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/43xxx/CVE-2026-43961.json", + "dateUpdated": "2026-11-11T05:55:43.046Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T05:50:54.054Z", + "numberOfChanges": 1, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-16313", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16313", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16313.json", + "dateUpdated": "2026-11-11T05:50:04.038Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T05:20:52.247Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-116081", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116081", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116081.json", + "dateUpdated": "2026-11-11T05:19:16.842Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-33818", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json", + "dateUpdated": "2026-11-11T05:20:01.865Z" + }, + { + "cveId": "CVE-2026-42504", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json", + "dateUpdated": "2026-11-11T05:20:00.355Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-11T05:02:21.760Z", "numberOfChanges": 93, @@ -832611,107 +833046,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-12T06:01:46.721Z", - "numberOfChanges": 6, - "new": [ - { - "cveId": "CVE-2025-15703", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-15703", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/15xxx/CVE-2025-15703.json", - "dateUpdated": "2026-10-12T06:00:08.603Z" - }, - { - "cveId": "CVE-2026-107791", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107791", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107791.json", - "dateUpdated": "2026-10-12T06:00:08.827Z" - }, - { - "cveId": "CVE-2026-108806", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108806", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108806.json", - "dateUpdated": "2026-10-12T06:00:16.016Z" - }, - { - "cveId": "CVE-2026-84166", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84166", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84166.json", - "dateUpdated": "2026-10-12T06:00:08.427Z" - }, - { - "cveId": "CVE-2026-84167", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84167", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84167.json", - "dateUpdated": "2026-10-12T06:00:08.260Z" - }, - { - "cveId": "CVE-2026-98385", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98385", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98385.json", - "dateUpdated": "2026-10-12T05:48:52.248Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-12T05:46:04.673Z", - "numberOfChanges": 3, - "new": [ - { - "cveId": "CVE-2026-108804", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108804", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108804.json", - "dateUpdated": "2026-10-12T05:30:17.425Z" - }, - { - "cveId": "CVE-2026-108805", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108805", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108805.json", - "dateUpdated": "2026-10-12T05:45:20.515Z" - }, - { - "cveId": "CVE-2026-109080", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109080", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109080.json", - "dateUpdated": "2026-10-12T05:36:47.169Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-12T05:26:45.096Z", - "numberOfChanges": 4, - "new": [ - { - "cveId": "CVE-2026-107193", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107193", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107193.json", - "dateUpdated": "2026-10-12T05:10:27.265Z" - }, - { - "cveId": "CVE-2026-107203", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107203", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107203.json", - "dateUpdated": "2026-10-12T05:10:29.965Z" - }, - { - "cveId": "CVE-2026-108802", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108802", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108802.json", - "dateUpdated": "2026-10-12T05:00:21.941Z" - }, - { - "cveId": "CVE-2026-108803", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108803", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108803.json", - "dateUpdated": "2026-10-12T05:15:11.721Z" - } - ], - "updated": [], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 5d5187f159..cc6e7f7e50 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "b1bdaae2ae7bb130bd1f630778ae95d862ac88c8", + "upstream_commit": "28734d56776a0bb376f328ab4f01bea1b673932d", "since_year": 2017, - "records": 330779, - "synced_at_utc": "2026-11-11T05:29:20.346610+00:00" + "records": 330840, + "synced_at_utc": "2026-11-11T06:25:23.275430+00:00" }