# Vulnerabilities published in 2026


- [CVE-2026-15248](https://insights.sbomify.com/CVE-2026-15248/): Meta Box < 5.13.1 - Contributor+ Arbitrary Attachment Deletion via IDOR (medium 5.5)
- [CVE-2026-15247](https://insights.sbomify.com/CVE-2026-15247/): Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion (medium 5.4)
- [CVE-2026-15246](https://insights.sbomify.com/CVE-2026-15246/): RealHomes Memberships < 3.1.0 - Subscriber+ Membership Payment Bypass (medium 4.3)
- [CVE-2026-15245](https://insights.sbomify.com/CVE-2026-15245/): BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode (medium 5.4)
- [CVE-2026-15244](https://insights.sbomify.com/CVE-2026-15244/): Path traversal in HUSKY (high 7.2)
- [CVE-2026-15243](https://insights.sbomify.com/CVE-2026-15243/): Improper Validation of Certificate in CAS Client (high 7.4)
- [CVE-2026-15241](https://insights.sbomify.com/CVE-2026-15241/): ChatBot for eCommerce – WoowBot < 4.8.4 - Unauthenticated Gemini API Key Abuse via qcld_gemini_response (high 7.5)
- [CVE-2026-15240](https://insights.sbomify.com/CVE-2026-15240/): Privilege escalation in Customer Switching (high 7.5)
- [CVE-2026-1524](https://insights.sbomify.com/CVE-2026-1524/): Auth misconfiguration when multiple providers enabled (low 2.1)
- [CVE-2026-15239](https://insights.sbomify.com/CVE-2026-15239/): Security feature bypass in Simple CAPTCHA with Cloudflare Turnstile (medium 5.3)
- [CVE-2026-15238](https://insights.sbomify.com/CVE-2026-15238/): Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR (medium 5.4)
- [CVE-2026-15237](https://insights.sbomify.com/CVE-2026-15237/): Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint (medium 5.3)
- [CVE-2026-15236](https://insights.sbomify.com/CVE-2026-15236/): Gallery for Google Photos < 1.2.1 - Unauthenticated Google OAuth Token Disclosure (high 7.5)
- [CVE-2026-15235](https://insights.sbomify.com/CVE-2026-15235/): Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action (medium 4.3)
- [CVE-2026-15234](https://insights.sbomify.com/CVE-2026-15234/): Codeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode Attribute (medium 5.4)
- [CVE-2026-15233](https://insights.sbomify.com/CVE-2026-15233/): Nested Pages < 3.2.15 - Editor+ Stored XSS via Post Title (medium 4.8)
- [CVE-2026-15232](https://insights.sbomify.com/CVE-2026-15232/): Appointment Booking Lite < 2.4.8 - Unauthenticated Arbitrary Reservation Deletion (medium 5.3)
- [CVE-2026-15231](https://insights.sbomify.com/CVE-2026-15231/): TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR (low 2.7)
- [CVE-2026-15230](https://insights.sbomify.com/CVE-2026-15230/): YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure (high 8.1)
- [CVE-2026-1523](https://insights.sbomify.com/CVE-2026-1523/): Path Traversal in Digitek from Grupo Azkoyen (high 8.7)
- [CVE-2026-15229](https://insights.sbomify.com/CVE-2026-15229/): Pinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price Manipulation (medium 5.3)
- [CVE-2026-15228](https://insights.sbomify.com/CVE-2026-15228/): Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision (high 7.1)
- [CVE-2026-15227](https://insights.sbomify.com/CVE-2026-15227/): Missing Authorization Allows Editing of Foreign Reports (medium 5.3)
- [CVE-2026-15226](https://insights.sbomify.com/CVE-2026-15226/): snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates (high 8.4)
- [CVE-2026-15222](https://insights.sbomify.com/CVE-2026-15222/): User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name (medium 5.4)
- [CVE-2026-1522](https://insights.sbomify.com/CVE-2026-1522/): Open5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bearer_response denial of service (medium 6.9)
- [CVE-2026-15219](https://insights.sbomify.com/CVE-2026-15219/): IDOR in SFM Software's Costifier (medium 6.5)
- [CVE-2026-15218](https://insights.sbomify.com/CVE-2026-15218/): Misconfiguration in Red Hat OpenShift AI 3.4 (high 7.9)
- [CVE-2026-15217](https://insights.sbomify.com/CVE-2026-15217/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (high 8.7)
- [CVE-2026-15216](https://insights.sbomify.com/CVE-2026-15216/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (high 8.7)
- [CVE-2026-15215](https://insights.sbomify.com/CVE-2026-15215/): Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation (high 8.8)
- [CVE-2026-15214](https://insights.sbomify.com/CVE-2026-15214/): Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR (medium 4.3)
- [CVE-2026-15213](https://insights.sbomify.com/CVE-2026-15213/): Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callback (medium 5.3)
- [CVE-2026-15212](https://insights.sbomify.com/CVE-2026-15212/): Cross-site request forgery in WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) (high 8.8)
- [CVE-2026-15211](https://insights.sbomify.com/CVE-2026-15211/): Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token (medium 5.9)
- [CVE-2026-15210](https://insights.sbomify.com/CVE-2026-15210/): Login/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated Account Takeover via OTP Brute Force (critical 9.1)
- [CVE-2026-1521](https://insights.sbomify.com/CVE-2026-1521/): Open5GS SGWC s5c-handler.c denial of service (medium 6.9)
- [CVE-2026-15209](https://insights.sbomify.com/CVE-2026-15209/): Missing authorization in JS Help Desk (medium 6.5)
- [CVE-2026-15208](https://insights.sbomify.com/CVE-2026-15208/): RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification (medium 5.3)
- [CVE-2026-15206](https://insights.sbomify.com/CVE-2026-15206/): Auth bypass in SMS Alert (high 7.5)
- [CVE-2026-15205](https://insights.sbomify.com/CVE-2026-15205/): Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup (high 8.6)
- [CVE-2026-15204](https://insights.sbomify.com/CVE-2026-15204/): TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversal (medium 6.9)
- [CVE-2026-15203](https://insights.sbomify.com/CVE-2026-15203/): Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software (critical 9.3)
- [CVE-2026-15202](https://insights.sbomify.com/CVE-2026-15202/): YzmCMS Header yzmphp.php get_url cross site scripting (medium 5.3)
- [CVE-2026-1520](https://insights.sbomify.com/CVE-2026-1520/): rethinkdb Secondary Index cross site scripting (medium 4.8)
- [CVE-2026-15195](https://insights.sbomify.com/CVE-2026-15195/): apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution (medium 5.3)
- [CVE-2026-15194](https://insights.sbomify.com/CVE-2026-15194/): Open5GS AMF context.c amf_context_final use after free (medium 4.8)
- [CVE-2026-15193](https://insights.sbomify.com/CVE-2026-15193/): AidanPark openclaw-android Android WebView Bridge JsBridge.kt os command injection (medium 4.8)
- [CVE-2026-15192](https://insights.sbomify.com/CVE-2026-15192/): mettle sendportal APIv1 Webhooks mailjet missing authentication (medium 6.9)
- [CVE-2026-15191](https://insights.sbomify.com/CVE-2026-15191/): mettle sendportal Campaign Creation Endpoint CampaignStoreRequest.php authorization (medium 5.3)
- [CVE-2026-15190](https://insights.sbomify.com/CVE-2026-15190/): SourceCodester Simple and Nice Shopping Cart Script login.php sql injection (medium 6.9)
- [CVE-2026-1519](https://insights.sbomify.com/CVE-2026-1519/): Excessive NSEC3 iterations cause high CPU load during insecure delegation validation (high 7.5)
- [CVE-2026-15189](https://insights.sbomify.com/CVE-2026-15189/): aerostackdev aerostack-mcp mcp-whatsapp upload_media server-side request forgery (medium 5.3)
- [CVE-2026-15188](https://insights.sbomify.com/CVE-2026-15188/): manjurulhoque django-job-portal Employee Dashboard Endpoint views.py EditEmployeeProfileAPIView access control (medium 5.3)
- [CVE-2026-15187](https://insights.sbomify.com/CVE-2026-15187/): enquirer Public Package API Enquirer.set prototype pollution (medium 5.3)
- [CVE-2026-15186](https://insights.sbomify.com/CVE-2026-15186/): macrozheng mall Portal Endpoint create resource injection (medium 5.3)
- [CVE-2026-15185](https://insights.sbomify.com/CVE-2026-15185/): GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds (medium 4.8)
- [CVE-2026-15184](https://insights.sbomify.com/CVE-2026-15184/): GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference (medium 4.8)
- [CVE-2026-15183](https://insights.sbomify.com/CVE-2026-15183/): Input Validation Vulnerabilities in Snowflake Spark Connector (critical 9.2)
- [CVE-2026-15182](https://insights.sbomify.com/CVE-2026-15182/): GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow (medium 4.8)
- [CVE-2026-15180](https://insights.sbomify.com/CVE-2026-15180/): Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages' (medium 6.1)
- [CVE-2026-15178](https://insights.sbomify.com/CVE-2026-15178/): Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification (medium 5.4)
- [CVE-2026-15176](https://insights.sbomify.com/CVE-2026-15176/): NGINX ngx_http_core_module vulnerability (critical 9.2)
- [CVE-2026-15174](https://insights.sbomify.com/CVE-2026-15174/): Heap-based Buffer Overflow in Wireshark (medium 5.5)
- [CVE-2026-15173](https://insights.sbomify.com/CVE-2026-15173/): Heap-based Buffer Overflow in Wireshark (medium 4.7)
- [CVE-2026-15172](https://insights.sbomify.com/CVE-2026-15172/): Unchecked Input for Loop Condition in Wireshark (medium 5.5)
- [CVE-2026-15171](https://insights.sbomify.com/CVE-2026-15171/): NULL Pointer Dereference in Wireshark (medium 5.5)
- [CVE-2026-15170](https://insights.sbomify.com/CVE-2026-15170/): Heap-based Buffer Overflow in Wireshark (medium 5.5)
- [CVE-2026-1517](https://insights.sbomify.com/CVE-2026-1517/): iomad Company Admin Block sql injection (medium 5.1)
- [CVE-2026-15169](https://insights.sbomify.com/CVE-2026-15169/): Heap-based Buffer Overflow in Wireshark (medium 5.5)
- [CVE-2026-15168](https://insights.sbomify.com/CVE-2026-15168/): Use of Uninitialized Variable in Wireshark (low 2.5)
- [CVE-2026-15167](https://insights.sbomify.com/CVE-2026-15167/): Stack-based Buffer Overflow in Wireshark (high 7.5)
- [CVE-2026-15166](https://insights.sbomify.com/CVE-2026-15166/): Stack-based Buffer Overflow in Wireshark (medium 5.5)
- [CVE-2026-15165](https://insights.sbomify.com/CVE-2026-15165/): Heap-based Buffer Overflow in Wireshark (medium 5.5)
- [CVE-2026-15164](https://insights.sbomify.com/CVE-2026-15164/): Heap-based Buffer Overflow in ciscodump (medium 5.5)
- [CVE-2026-15163](https://insights.sbomify.com/CVE-2026-15163/): Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (medium 5.5)
- [CVE-2026-15162](https://insights.sbomify.com/CVE-2026-15162/): Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection (high 7.5)
- [CVE-2026-15161](https://insights.sbomify.com/CVE-2026-15161/): Ninja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' Parameter (medium 6.4)
- [CVE-2026-15160](https://insights.sbomify.com/CVE-2026-15160/): Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal (medium 4.3)
- [CVE-2026-1516](https://insights.sbomify.com/CVE-2026-1516/): Improper Control of Generation of Code ('Code Injection') in GitLab (medium 5.7)
- [CVE-2026-15159](https://insights.sbomify.com/CVE-2026-15159/): Missing authorization in Ninja Forms - Excel Export (medium 4.3)
- [CVE-2026-15158](https://insights.sbomify.com/CVE-2026-15158/): Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parameter (critical 9.8)
- [CVE-2026-15157](https://insights.sbomify.com/CVE-2026-15157/): undici vulnerable to CRLF Injection via blob-like body 'type' property (medium 4.2)
- [CVE-2026-15156](https://insights.sbomify.com/CVE-2026-15156/): Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets (medium 6.4)
- [CVE-2026-15155](https://insights.sbomify.com/CVE-2026-15155/): Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection (high 8.8)
- [CVE-2026-15154](https://insights.sbomify.com/CVE-2026-15154/): Denial of service in Red Hat OpenShift AI 2.25 (medium 6.5)
- [CVE-2026-15153](https://insights.sbomify.com/CVE-2026-15153/): WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search (medium 6.8)
- [CVE-2026-15152](https://insights.sbomify.com/CVE-2026-15152/): WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment Bypass (medium 5.3)
- [CVE-2026-15151](https://insights.sbomify.com/CVE-2026-15151/): Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications (high 7.5)
- [CVE-2026-15150](https://insights.sbomify.com/CVE-2026-15150/): myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED (medium 5.3)
- [CVE-2026-15149](https://insights.sbomify.com/CVE-2026-15149/): WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation (medium 5.3)
- [CVE-2026-15148](https://insights.sbomify.com/CVE-2026-15148/): WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR (medium 5.3)
- [CVE-2026-15147](https://insights.sbomify.com/CVE-2026-15147/): Five Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR (medium 5.3)
- [CVE-2026-15146](https://insights.sbomify.com/CVE-2026-15146/): CVE-2026-15146 (medium 5.9)
- [CVE-2026-15145](https://insights.sbomify.com/CVE-2026-15145/): Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets (medium 6.4)
- [CVE-2026-15144](https://insights.sbomify.com/CVE-2026-15144/): @fastify/rate-limit vulnerable to rate-limit bypass via IPv6 address rotation (high 7.3)
- [CVE-2026-15143](https://insights.sbomify.com/CVE-2026-15143/): Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) (critical 9.3)
- [CVE-2026-15142](https://insights.sbomify.com/CVE-2026-15142/): Privilege escalation in Real Estate Manager Pro (high 7.5)
- [CVE-2026-15141](https://insights.sbomify.com/CVE-2026-15141/): Referer Validation Bypass in TL-WR820N Web Management Interface (medium 5.3)
- [CVE-2026-15140](https://insights.sbomify.com/CVE-2026-15140/): Privilege escalation in Portworx Operator (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/860/