CVE-2026-118xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
359 records · Page 4 of 4
- CVE-2026-118094: WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18.
Updated Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed Manager: from n/a through 7.14.1.
Updated- CVE-2026-118092: WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability 4.3 Medium
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through 3.7.55.
Updated - CVE-2026-118091: WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability 5.3 Medium
Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through 3.13.5.
Updated - CVE-2026-118090: WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability 8.8 High
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
Updated Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.
Updated- CVE-2026-118088: WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability 5.3 Medium
Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through 3.13.5.
Updated - CVE-2026-118087: WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.3.5.
Updated - CVE-2026-118086: WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability 8.8 High
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
Updated Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.
UpdatedSubscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.
Updated- CVE-2026-118083: WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability 7.5 High
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.
Updated - CVE-2026-118082: WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability 8.8 High
Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.
Updated Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Updated- CVE-2026-118080: WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability 8.8 High
Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
Updated Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
UpdatedShop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
UpdatedAuthor PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
Updated- CVE-2026-118076: WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability 8.8 High
Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
Updated - CVE-2026-118075: WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability 8.8 High
Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.
Updated - CVE-2026-118074: WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability 7.2 High
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
Updated Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
UpdatedThe Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to manage orders before letting them add an order's customer details to the store's fraud blacklist, which could allow users with the Subscriber role and above to prevent arbitrary legitimate customers from placing orders.
Updated- CVE-2026-118071: Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message Attribute 6.8 Medium
The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting it in an HTML attribute on the front end, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor of the post, including administrators.
Updated In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.
UpdatedIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is processed or exported to PDF.
UpdatedIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process
UpdatedIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular expression vulnerabilities in RadSpreadProcessing and RadSpreadStreamProcessing allow an unauthenticated attacker to terminate or hang the host process via a crafted XLSX or XLS workbook or formula.
UpdatedIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated attacker to terminate or hang the host process via a crafted PDF document or document text submitted for s
UpdatedIn Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in RadWordsProcessing allow an unauthenticated attacker to terminate or hang the host process via a crafted DOCX, DOC, RTF or HTML document.
UpdatedA flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and access management services. The issue occurs because the system validates a one-time password and updates its internal counter in two separate steps without proper locking. An attacker with a users password could exploit this timing gap to use a single one-time code to log in multi
UpdatedUnverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users should upgrade to version 3.16.1 or later. Users should also verify that the default Athena result bu
UpdatedFrame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
UpdatedInvalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedOther issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedSandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Updated- CVE-2026-118022: Sandbox escape due to use-after-free in the Disability Access APIs component Unscored
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Updated Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedRace condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedSpoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.
UpdatedUse-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedFrame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedInteger overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedPrivilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
UpdatedUse-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Updated- CVE-2026-118006: Privilege escalation due to use-after-free in the WebRTC: Signaling component Unscored
Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Updated Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Updated- CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component Unscored
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Updated Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
UpdatedInformation disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
UpdatedInformation disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Updated