# Vulnerabilities published in 2026


- [CVE-2026-110537](https://insights.sbomify.com/CVE-2026-110537/): Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action (low 3.8)
- [CVE-2026-110536](https://insights.sbomify.com/CVE-2026-110536/): D-Link DIR-868L HNAP CGI cgibin system os command injection (critical 10.0)
- [CVE-2026-110527](https://insights.sbomify.com/CVE-2026-110527/): WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass (medium 5.3)
- [CVE-2026-110524](https://insights.sbomify.com/CVE-2026-110524/): Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute (medium 6.8)
- [CVE-2026-110523](https://insights.sbomify.com/CVE-2026-110523/): Business logic in WP User Manager (high 8.1)
- [CVE-2026-11052](https://insights.sbomify.com/CVE-2026-11052/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-110514](https://insights.sbomify.com/CVE-2026-110514/): WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR (medium 4.9)
- [CVE-2026-110510](https://insights.sbomify.com/CVE-2026-110510/): Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag (low 3.5)
- [CVE-2026-11051](https://insights.sbomify.com/CVE-2026-11051/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-110509](https://insights.sbomify.com/CVE-2026-110509/): Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler (medium 5.3)
- [CVE-2026-110508](https://insights.sbomify.com/CVE-2026-110508/): Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification (medium 5.3)
- [CVE-2026-110507](https://insights.sbomify.com/CVE-2026-110507/): Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query Arguments (low 2.7)
- [CVE-2026-110506](https://insights.sbomify.com/CVE-2026-110506/): Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class (medium 6.8)
- [CVE-2026-110505](https://insights.sbomify.com/CVE-2026-110505/): Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass (medium 6.8)
- [CVE-2026-110504](https://insights.sbomify.com/CVE-2026-110504/): Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass (medium 6.8)
- [CVE-2026-11050](https://insights.sbomify.com/CVE-2026-11050/): Use after free in Chrome (high 8.8)
- [CVE-2026-1105](https://insights.sbomify.com/CVE-2026-1105/): EasyCMS UserAction.class.php sql injection (medium 6.9)
- [CVE-2026-110499](https://insights.sbomify.com/CVE-2026-110499/): Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit (high 8.7)
- [CVE-2026-110494](https://insights.sbomify.com/CVE-2026-110494/): Gitea release attachment re-linking of issue attachments (medium 6.3)
- [CVE-2026-110491](https://insights.sbomify.com/CVE-2026-110491/): Kiloview E3 NDI Encoder NULL Pointer Dereference (medium 6.9)
- [CVE-2026-11049](https://insights.sbomify.com/CVE-2026-11049/): Use after free in Chrome (high 8.8)
- [CVE-2026-11048](https://insights.sbomify.com/CVE-2026-11048/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-110475](https://insights.sbomify.com/CVE-2026-110475/): Improper Authentication Vulnerability in CreditNirvana Collections Platform (critical 9.3)
- [CVE-2026-110474](https://insights.sbomify.com/CVE-2026-110474/): Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application (high 8.7)
- [CVE-2026-11047](https://insights.sbomify.com/CVE-2026-11047/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-110467](https://insights.sbomify.com/CVE-2026-110467/): WisdomGarden｜Tronclass - Insecure Direct Object Reference (medium 5.3)
- [CVE-2026-110466](https://insights.sbomify.com/CVE-2026-110466/): WisdomGarden｜Tronclass - Sensitive Data Exposure (medium 5.3)
- [CVE-2026-110465](https://insights.sbomify.com/CVE-2026-110465/): WisdomGarden｜Tronclass - Insecure Direct Object Reference (medium 5.3)
- [CVE-2026-11046](https://insights.sbomify.com/CVE-2026-11046/): Code injection in Chrome (high 8.8)
- [CVE-2026-110459](https://insights.sbomify.com/CVE-2026-110459/): Missing authorization in UniFi Protect AI Key (high 8.6)
- [CVE-2026-110458](https://insights.sbomify.com/CVE-2026-110458/): Path traversal in UniFi Protect AI Key (low 3.7)
- [CVE-2026-110457](https://insights.sbomify.com/CVE-2026-110457/): Path traversal in UniFi Protect AI Key (low 3.7)
- [CVE-2026-110456](https://insights.sbomify.com/CVE-2026-110456/): Missing authorization in UniFi Protect AI Key (medium 5.3)
- [CVE-2026-110455](https://insights.sbomify.com/CVE-2026-110455/): Command injection in UniFi Protect AI Key (high 8.1)
- [CVE-2026-110454](https://insights.sbomify.com/CVE-2026-110454/): Missing authorization in UniFi Protect AI Key (medium 5.3)
- [CVE-2026-110453](https://insights.sbomify.com/CVE-2026-110453/): Missing authorization in Nix (medium 4.3)
- [CVE-2026-110452](https://insights.sbomify.com/CVE-2026-110452/): Misconfiguration in Nix (medium 4.0)
- [CVE-2026-110451](https://insights.sbomify.com/CVE-2026-110451/): Security feature bypass in Nix (medium 4.3)
- [CVE-2026-110450](https://insights.sbomify.com/CVE-2026-110450/): Privilege escalation in Nix (high 8.0)
- [CVE-2026-11045](https://insights.sbomify.com/CVE-2026-11045/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110449](https://insights.sbomify.com/CVE-2026-110449/): Integer overflow in Nix (high 7.5)
- [CVE-2026-110447](https://insights.sbomify.com/CVE-2026-110447/): Collabora Online – Built-in CODE Server OS Command Injection (critical 9.2, exploited in the wild)
- [CVE-2026-110445](https://insights.sbomify.com/CVE-2026-110445/): TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection (high 8.6)
- [CVE-2026-110444](https://insights.sbomify.com/CVE-2026-110444/): TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection (high 8.6)
- [CVE-2026-11044](https://insights.sbomify.com/CVE-2026-11044/): Integer overflow in Chrome (medium 6.5)
- [CVE-2026-11043](https://insights.sbomify.com/CVE-2026-11043/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-11042](https://insights.sbomify.com/CVE-2026-11042/): Use after free in Chrome (high 8.8)
- [CVE-2026-11041](https://insights.sbomify.com/CVE-2026-11041/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-11040](https://insights.sbomify.com/CVE-2026-11040/): Use after free in Chrome (high 8.3)
- [CVE-2026-1104](https://insights.sbomify.com/CVE-2026-1104/): Missing authorization in FastDup – Fastest WordPress Migration & Duplicator (high 8.8)
- [CVE-2026-110392](https://insights.sbomify.com/CVE-2026-110392/): Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning (critical 9.8)
- [CVE-2026-11039](https://insights.sbomify.com/CVE-2026-11039/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110385](https://insights.sbomify.com/CVE-2026-110385/): Code injection in Document Server (high 8.7)
- [CVE-2026-110384](https://insights.sbomify.com/CVE-2026-110384/): WordPress Fancy Comments WordPress plugin <= 1.2.21 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-110383](https://insights.sbomify.com/CVE-2026-110383/): Missing authorization in Electronic Signature Add-on for Fluent Forms (high 7.5)
- [CVE-2026-110382](https://insights.sbomify.com/CVE-2026-110382/): WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-110381](https://insights.sbomify.com/CVE-2026-110381/): WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability (medium 6.3)
- [CVE-2026-110380](https://insights.sbomify.com/CVE-2026-110380/): WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-11038](https://insights.sbomify.com/CVE-2026-11038/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-110379](https://insights.sbomify.com/CVE-2026-110379/): WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-110378](https://insights.sbomify.com/CVE-2026-110378/): WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110377](https://insights.sbomify.com/CVE-2026-110377/): WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110376](https://insights.sbomify.com/CVE-2026-110376/): WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-110375](https://insights.sbomify.com/CVE-2026-110375/): WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-110374](https://insights.sbomify.com/CVE-2026-110374/): WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-110373](https://insights.sbomify.com/CVE-2026-110373/): WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability (high 8.1)
- [CVE-2026-110372](https://insights.sbomify.com/CVE-2026-110372/): WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability (critical 9.8)
- [CVE-2026-110371](https://insights.sbomify.com/CVE-2026-110371/): WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-110370](https://insights.sbomify.com/CVE-2026-110370/): WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability (high 8.8)
- [CVE-2026-11037](https://insights.sbomify.com/CVE-2026-11037/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-110369](https://insights.sbomify.com/CVE-2026-110369/): WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability (high 8.8)
- [CVE-2026-110367](https://insights.sbomify.com/CVE-2026-110367/): WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110366](https://insights.sbomify.com/CVE-2026-110366/): WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110365](https://insights.sbomify.com/CVE-2026-110365/): WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-110364](https://insights.sbomify.com/CVE-2026-110364/): Missing authorization in Flexible Quantity – Measurement Price Calculator for WooCommerce (medium 5.3)
- [CVE-2026-110363](https://insights.sbomify.com/CVE-2026-110363/): WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2026-110362](https://insights.sbomify.com/CVE-2026-110362/): WordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110361](https://insights.sbomify.com/CVE-2026-110361/): WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability (medium 6.5)
- [CVE-2026-110360](https://insights.sbomify.com/CVE-2026-110360/): WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-11036](https://insights.sbomify.com/CVE-2026-11036/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-110359](https://insights.sbomify.com/CVE-2026-110359/): Privilege escalation in Desktop Host (high 7.8)
- [CVE-2026-110354](https://insights.sbomify.com/CVE-2026-110354/): Denial of service in HAProxy (high 7.5)
- [CVE-2026-110353](https://insights.sbomify.com/CVE-2026-110353/): Denial of service in HAProxy (high 7.5)
- [CVE-2026-11035](https://insights.sbomify.com/CVE-2026-11035/): Privilege escalation in Chrome (high 7.3)
- [CVE-2026-11034](https://insights.sbomify.com/CVE-2026-11034/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-11033](https://insights.sbomify.com/CVE-2026-11033/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110324](https://insights.sbomify.com/CVE-2026-110324/): Gitea private profile information disclosure through POST request (medium 6.5)
- [CVE-2026-110322](https://insights.sbomify.com/CVE-2026-110322/): HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference (medium 6.8)
- [CVE-2026-11032](https://insights.sbomify.com/CVE-2026-11032/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110314](https://insights.sbomify.com/CVE-2026-110314/): WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit (medium 6.3)
- [CVE-2026-110311](https://insights.sbomify.com/CVE-2026-110311/): Gitea draft release creation disclosing attachment metadata (medium 4.3)
- [CVE-2026-110310](https://insights.sbomify.com/CVE-2026-110310/): RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET (medium 6.0)
- [CVE-2026-11031](https://insights.sbomify.com/CVE-2026-11031/): Other in Chrome (medium 4.3)
- [CVE-2026-110309](https://insights.sbomify.com/CVE-2026-110309/): Langflow OSS is affected by multiple vulnerabilities (high 8.8)
- [CVE-2026-110306](https://insights.sbomify.com/CVE-2026-110306/): fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding (medium 6.1)
- [CVE-2026-11030](https://insights.sbomify.com/CVE-2026-11030/): Use after free in Chrome (high 8.8)
- [CVE-2026-1103](https://insights.sbomify.com/CVE-2026-1103/): AIKTP <= 5.0.04 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions (medium 5.4)
- [CVE-2026-110292](https://insights.sbomify.com/CVE-2026-110292/): Missing authorization in PayPlug for WooCommerce (Official) (medium 6.5)
- [CVE-2026-110290](https://insights.sbomify.com/CVE-2026-110290/): Cross-site scripting in WebberZone Top 10 — Popular Posts (medium 6.4)
- [CVE-2026-11029](https://insights.sbomify.com/CVE-2026-11029/): Security feature bypass in Chrome (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/936/