Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
9.1 CRITICAL
CVE-2026-85632 — Unauthenticated Payment Status Manipulation in Sipay Electronic Money's WordPress (WooCom…

Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows A…

Remote | Authentication
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
0.0 NA
CVE-2026-49236 — Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource sa…

Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics…

xml_graphics_batik | Server-Side Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
6.9 MEDIUM
CVE-2026-48479 — AMD Graphics Driver Out-of-Bounds Write Vulnerability

Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.

Remote | Memory Corruption
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
0.0 NA
CVE-2026-40853 — Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Bat…

A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which f…

xml_graphics_batik | Cross-Site Scripting
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125850 — WordPress Appointment Dark theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerabili…

Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4.

appointment_dark | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125849 — WordPress Shk Corporate theme <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request Forgery.This issue affects Shk Corporate: from n/a through 2.4.3.

shk_corporate | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125848 — WordPress Leo theme <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects Leo: from n/a through 1.7.4.

leo | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125847 — WordPress vdperanto theme <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This issue affects vdperanto: from n/a through 2.2.

vdperanto | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125846 — WordPress Mazino theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue affects Mazino: from n/a through 1.1.

mazino | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125845 — WordPress vdequator theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This issue affects vdequator: from n/a through 1.2.7.

vdequator | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125844 — WordPress vice theme <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue affects vice: from n/a through 1.4.

vice | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125843 — WordPress Spasalon theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This issue affects Spasalon: from n/a through 3.0.

spasalon | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125842 — WordPress Wallstreet Agency theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerabil…

Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site Request Forgery.This issue affects Wallstreet Agency: from n/a through 1.3.4.

wallstreet_agency | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125841 — WordPress Heroic theme <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue affects Heroic: from n/a through 1.4.2.

heroic | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125840 — WordPress Rambo theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue affects Rambo: from n/a through 3.0.

rambo | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125839 — WordPress ElitePress theme <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This issue affects ElitePress: from n/a through 3.2.1.

elitepress | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.8 HIGH
CVE-2026-125838 — WordPress Quality theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3.

quality | Remote | Cross-Site Request Forgery
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.5 HIGH
CVE-2026-123040 — TrueConf Server Linux Privilege Escalation Vulnerability

An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not including, 5.5.6 installed, running as the user trueconf (by ex…

server trueconf_server | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
6.8 MEDIUM
CVE-2026-0470 — AMD Embedded SPI Flash Driver Null Pointer Dereference

Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.

| Memory Corruption
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
0.0 NA
CVE-2026-94125 — Apache Storm: Supervisor page discloses worker placement of other users' topologies

Nimbus returns the worker placement of every topology running on a supervisor, including the host, port, owner and resource assignment of topologies the caller is not authorized to read. In a multi-t…

storm | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
Showing 20 of 18965 Results