UpHeron
All posts

Daily summary

Vulnerabilities of 29 October 2026: 172 new, 29 critical

172 vulnerabilities added on 29 October 2026, 29 critical and 54 high: Remote code execution in WordPress plugins, PHP object injection in WordPress themes, PHP object injection in WordPress plugins and more.

  • 29 critical
  • 54 high
  • 89 medium

Remote code execution in WordPress plugins

1 vulnerability

  1. 10.0AjaxLoadMore CacheUp to 3.1.1CVE-2026-61991

PHP object injection in WordPress themes

24 vulnerabilities

  1. 9.8GunslingerUp to 1.11CVE-2026-62018
  2. 9.8Good HomesUp to 1.3.13CVE-2026-62017
  3. 9.8GamicUp to 1.19CVE-2026-62016
  4. 9.8EmojiNationUp to 1.0.12CVE-2026-62014
  5. 9.8GamezoneUp to 1.1.11CVE-2026-62015
Show 19 more
  1. 9.8Edge DecorUp to 2.9CVE-2026-62013
  2. 9.8CoinpressUp to 1.0.15CVE-2026-62012
  3. 9.8AvventureUp to 1.1.12CVE-2026-62010
  4. 9.8BonbonUp to 1.11CVE-2026-62011
  5. 9.8FilmaxUp to 1.1.11CVE-2026-62009
  6. 9.8OrpheusUp to 1.8CVE-2026-62008
  7. 9.8MuziconUp to 1.15CVE-2026-62005
  8. 9.8NutsUp to 1.12CVE-2026-62006
  9. 9.8MotorixUp to 1.11CVE-2026-62004
  10. 9.8MissionUp to 1.22CVE-2026-62003
  11. 9.8MarcellUp to 1.2.14CVE-2026-62001
  12. 9.8Meals & WheelsUp to 1.1.13CVE-2026-62002
  13. 9.8Le TruffeUp to 1.1.7CVE-2026-61998
  14. 9.8Legal StoneUp to 1.2.11CVE-2026-61997
  15. 9.8OzistiUp to 1.1.10CVE-2026-54860
  16. 9.8PreservationUp to 1.15CVE-2026-54859
  17. 9.8PrintyUp to 1.13.0CVE-2026-54858
  18. 9.8RexCoinUp to 1.2.6CVE-2026-54856
  19. 9.8QuirkyUp to 1.23CVE-2026-54857

PHP object injection in WordPress plugins

18 vulnerabilities

  1. 9.8Zoho FlowUp to 2.14.5CVE-2026-62131
  2. 9.8GEO my WordPressUp to 4.5.5.3CVE-2026-61992
  3. 8.8Social SnapUp to 1.5.4CVE-2026-118080
  4. 8.810Web Social Photo FeedUp to 1.5.6CVE-2026-118081
  5. 8.8Frisbii PayUp to 1.8.19CVE-2026-118076
Show 13 more
  1. 8.8WP Media foldersUp to 1.1.10CVE-2026-118075
  2. 8.8News Kit Elementor AddonsUp to 1.5.0CVE-2026-118073
  3. 8.8BuddyPress Xprofile Custom Field TypesUp to 1.3.1CVE-2026-116868
  4. 8.8Dynamic QR Code – generatorUp to 1.0.1CVE-2026-116867
  5. 8.8Extra FeesUp to 4.4.0CVE-2026-116866
  6. 7.2FV Flowplayer Video PlayerUp to 8.3.4CVE-2026-118079
  7. 7.2Product Catalog Feed by PixelYourSiteUp to 3.1.4CVE-2026-118078
  8. 7.2Sastra Essential Addons for ElementorUp to 1.2.3CVE-2026-118077
  9. 7.2Finale LiteUp to 2.21.0CVE-2026-118074
  10. 7.2myPOS CheckoutUp to 1.4.5CVE-2026-116869
  11. 7.2ZippyUp to 1.7.0CVE-2026-116865
  12. 7.2WPCargo Track & TraceUp to 8.0.5CVE-2026-116864
  13. 7.2YayMailUp to 4.4.6CVE-2026-42701

Authentication bypass in WordPress plugins

4 vulnerabilities

  1. 9.8Bot for Telegram on WooCommerceUnauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login TokenUp to 1.3.0CVE-2026-109516
  2. 8.8Login with phone numberUp to 1.8.78CVE-2026-115967
  3. 8.1SSL Wireless SMS NotificationUnauthenticated Authentication Bypass to Account TakeoverUp to 3.8.1CVE-2026-96228
  4. 7.5Wild Apricot LoginAuthentication Bypass via SSO Email-Collision Account Binding on MultisiteUp to 1.0.18CVE-2026-93757

SQL injection in WordPress plugins

7 vulnerabilities

  1. 9.3MotorsUp to 1.4.126CVE-2026-115964
  2. 8.5MLS On The FlyUp to 1.8.1.5CVE-2026-61996
  3. 8.5JetEngineUp to 3.9.0.1CVE-2026-39736
  4. 8.5BuddyPressUp to 14.5.2CVE-2026-115965
  5. 7.5SendPress NewslettersUnauthenticated SQL Injection via 'subscriberid' ParameterUp to 1.26.1.20CVE-2026-93855
Show 2 more
  1. 7.5Social Web SuiteUnauthenticated SQL Injection via 'exclude_posts' ParameterUp to 4.1.12CVE-2026-93904
  2. 6.5JoomSportAuthenticated (Contributor+) SQL Injection via 'team_id' Shortcode AttributeUp to 5.7.11CVE-2026-118192

Cross-site request forgery in WordPress plugins

2 vulnerabilities

  1. 8.8InstaWP ConnectUp to 0.1.4.2CVE-2026-116399
  2. 4.3WPFunnelsUp to 3.13.5CVE-2026-27062

MySQL

14 vulnerabilities · Servers and applications

  1. 8.1Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…Up to 26.7.1CVE-2026-101772
  2. 7.1Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected…Up to 26.7.1CVE-2026-101773
  3. 6.5Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server:…Up to 26.7.1CVE-2026-101743
  4. 6.5Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…Up to 26.7.1CVE-2026-101747
  5. 6.5Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are MySQL…Up to 26.7.1CVE-2026-101748
Show 9 more
  1. 6.5Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…Up to 26.7.1CVE-2026-101733
  2. 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL…Up to 26.7.1CVE-2026-101750
  3. 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…Up to 26.7.1CVE-2026-101751
  4. 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…Up to 26.7.1CVE-2026-101749
  5. 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL…Up to 26.7.1CVE-2026-101732
  6. 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL…Up to 26.7.1CVE-2026-101731
  7. 4.4Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…Up to 26.7.1CVE-2026-101752
  8. 4.4Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server:…Up to 26.7.1CVE-2026-101753
  9. 4.4Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…Up to 26.7.1CVE-2026-101754

Broken access control in WordPress plugins

37 vulnerabilities

  1. 7.5GEO my WordPressUp to 4.5.5.5CVE-2026-114193
  2. 7.5LearnPressUp to 4.4.11CVE-2026-115599
  3. 7.1HANDMADE – Dropshipping for Etsy and WooCommerceUp to 1.0.10CVE-2026-112827
  4. 7.1Broadcast Live VideoUp to 7.3.9CVE-2026-115963
  5. 6.5Hotel BookingUp to 3.8CVE-2026-118084
Show 32 more
  1. 6.5Kali FormsUp to 2.4.27CVE-2026-42703
  2. 6.5JetEngineUp to 3.9.0.1CVE-2026-39735
  3. 6.4Happy Addons for ElementorUp to 3.50.1CVE-2026-109891
  4. 5.4LearnPressUp to 4.4.10CVE-2026-42690
  5. 5.4EventPrimeUp to 4.3.6.0CVE-2026-42691
  6. 5.3Page Restriction WordPress (WP)Up to 1.6.1CVE-2026-54852
  7. 5.3myCredUp to 4.0.2CVE-2026-97073
  8. 5.3Profile BuilderUp to 4.0.5CVE-2026-54853
  9. 5.3Kit (formerly ConvertKit)Up to 3.4.7CVE-2026-27063
  10. 5.3Custom Price for WooCommerceUp to 1.1.29CVE-2026-115601
  11. 5.3ShopBuilder – Elementor WooCommerce Builder AddonsUp to 3.4.2CVE-2026-54871
  12. 5.3User RegistrationUp to 5.3.0CVE-2026-25450
  13. 5.3Taxi Booking Manager for WooCommerceUp to 2.1.6CVE-2026-114181
  14. 5.3WPFunnelsUp to 3.13.5CVE-2026-118088
  15. 5.3Flexible Quantity Measurement Price Calculator For WoocommerceUp to 2.3.24CVE-2026-116856
  16. 5.3WPFunnelsUp to 3.13.5CVE-2026-118091
  17. 5.3SureFormsUp to 2.12.9CVE-2026-116387
  18. 5.3WP User ManagerUp to 2.9.26CVE-2026-116846
  19. 5.3WP User FrontendUp to 4.3.13CVE-2026-48884
  20. 5.3MasterStudy LMSMissing Authorization via stm_lms_send_test_email_ajaxFixed in 3.7.50CVE-2026-80069
  21. 5.3Kali FormsUp to 2.4.27CVE-2026-39782
  22. 5.3Simple Cloudflare TurnstileUp to 1.44.0CVE-2026-39741
  23. 5.3Product Feed ManagerUp to 7.14.1CVE-2026-118093
  24. 5.3YITH PayPal Express Checkout for WooCommerceUp to 1.62.0CVE-2026-27401
  25. 4.3WP ERPUp to 1.17.10CVE-2026-25448
  26. 4.3SureDashUp to 1.12.3CVE-2026-115605
  27. 4.3MasterStudy LMSUp to 3.7.55CVE-2026-118092
  28. 4.3Webba BookingUp to 6.5.4CVE-2026-116406
  29. 4.3WP User FrontendUp to 4.3.13CVE-2026-52708
  30. 4.3HivePress Claim ListingsUp to 1.1.4CVE-2026-42707
  31. 4.3WP Job PortalUp to 2.7.1CVE-2026-22386
  32. 4.3myCredUp to 4.0.1CVE-2026-115962

Sensitive data exposure in WordPress plugins

4 vulnerabilities

  1. 7.5WP CrowdfundingUp to 2.2.2CVE-2026-118083
  2. 5.3Document Library LiteUp to 1.3.0CVE-2026-48200
  3. 5.3MW WP FormUnauthenticated Sensitive Information Exposure in 'post_id' ParameterUp to 5.1.7CVE-2026-92086
  4. 5.3Everest FormsUnauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})Up to 3.6.2CVE-2026-91153

Cross-site scripting in WordPress plugins

51 vulnerabilities

  1. 7.2NewsmanAppUnauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' ParametersUp to 3.7.29CVE-2026-115821
  2. 7.2NEX-FormsUnauthenticated Stored Cross-Site Scripting via Content-Type HeaderUp to 9.3.2CVE-2026-96767
  3. 7.2Mapster WP MapsUnauthenticated Stored Cross-Site Scripting via 'config.loading.background' ParameterUp to 2.0.5CVE-2026-107743
  4. 7.2Schema App Structured DataUnauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output FilterUp to 2.3.2CVE-2026-96666
  5. 7.2Food StoreUnauthenticated Stored Cross-Site Scripting via 'service_type' CookieUp to 1.5.5CVE-2026-96669
Show 46 more
  1. 7.2DSGVO All in one for WPUnauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex CorruptionUp to 5.0CVE-2026-96741
  2. 7.1Chained QuizUp to 1.4.1CVE-2026-108494
  3. 7.1BlockonomicsUp to 3.11.0CVE-2026-61993
  4. 7.1YouTube ShowcaseUp to 4.1.0CVE-2026-61995
  5. 7.1Auction Nudge – Your eBay on Your SiteUp to 8.4.0CVE-2026-61988
  6. 7.1Easy Property ListingsUp to 3.5.25CVE-2026-61989
  7. 7.1Razorpay Payment Button ElementorUp to 1.2.8CVE-2026-54866
  8. 7.1Post Video PlayersUp to 1.165CVE-2026-54864
  9. 7.1WP CrowdfundingUp to 2.2.2CVE-2026-42692
  10. 7.1GlobalPayments WooCommerceUp to 1.23.3CVE-2026-118085
  11. 7.1EventerUp to 0.1.1CVE-2026-27394
  12. 7.1TableOnUp to 1.0.7CVE-2026-115611
  13. 7.1OceanWPUp to 4.2.7CVE-2026-115592
  14. 7.1Upsell Order Bump Offer for WooCommerceUp to 3.1.6CVE-2026-116409
  15. 6.5Podamibe Custom User GravatarUp to 1.0.8CVE-2026-54865
  16. 6.5The Plus Addons for Elementor Page Builder LiteUp to 6.5.3CVE-2026-116848
  17. 6.5Flash & HTML5 VideoUp to 2.14.0CVE-2026-118097
  18. 6.5Strong TestimonialsUp to 3.3.15CVE-2026-114706
  19. 6.5Media LIbrary AssistantUp to 3.42CVE-2026-118095
  20. 6.5Happy Addons for ElementorUp to 3.50.1CVE-2026-116850
  21. 6.5StreamCastUp to 2.4.6CVE-2026-116849
  22. 6.5SureDashUp to 1.12.3CVE-2026-110881
  23. 6.5JetElements For ElementorUp to 2.9.2.6CVE-2026-39737
  24. 6.5Gutenberg Blocks by Kadence BlocksUp to 3.8.0.2CVE-2026-39742
  25. 6.5PublishPress AuthorsUp to 4.17.0CVE-2026-115610
  26. 6.5JetSmartFiltersUp to 3.8.6.2CVE-2026-116857
  27. 6.5Import and export users and customersUp to 2.5.9CVE-2026-54862
  28. 6.5PDF PosterUp to 2.6.1CVE-2026-48195
  29. 6.5Kali FormsUp to 2.4.27CVE-2026-48196
  30. 6.5Video Gallery BlockUp to 1.6.0CVE-2026-52709
  31. 6.5Cozy BlocksUp to 2.2.27CVE-2026-24533
  32. 6.5Site ReviewsUp to 8.3.5CVE-2026-118087
  33. 6.5Ad InserterUp to 2.8.18CVE-2026-118094
  34. 6.5The Post GridUp to 7.9.7CVE-2026-56056
  35. 6.4Sequential Order Numbers for WooCommerceAuthenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array KeysUp to 3.6.5CVE-2026-104727
  36. 6.4LiteSpeed CacheVulnerability in LiteSpeed CacheFixed in 7.9.2CVE-2026-109215
  37. 6.1Everest FormsReflected Cross-Site Scripting via 'evf_toast_type' ParameterUp to 3.6.2CVE-2026-91152
  38. 5.4HT Mega Addons for ElementorUnauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM SinkUp to 3.2.7CVE-2026-111318
  39. 5.4GreenshiftUnauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments BlockUp to 13.2.1CVE-2026-107627
  40. 5.4GreenshiftUnauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerTextUp to 13.2.1CVE-2026-107629
  41. 5.4Extensions for Leaflet MapUnauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON PropertyUp to 5.4CVE-2026-103485
  42. 5.4LiteSpeed CacheVulnerability in LiteSpeed CacheFixed in 7.9.2CVE-2026-116763
  43. 5.1Multiple Pages Generator by ThemeisleStored XSS via Shortcode base-urlFixed in 4.2.5CVE-2026-119054
  44. 4.9Meta BoxAuthenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array KeysUp to 5.15.2CVE-2026-109216
  45. 4.7Media Library AssistantReflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination LinksUp to 3.42CVE-2026-103875
  46. 4.7RSS Aggregator by FeedzyUnauthenticated Stored Cross-Site Scripting via YouTube media:description Feed ElementUp to 5.2.12CVE-2026-110707

Content injection in WordPress plugins

4 vulnerabilities

  1. 5.3SureFormsUp to 2.12.9CVE-2026-116402
  2. 5.3BraveUp to 0.8.8CVE-2026-48202
  3. 5.3User RegistrationUp to 5.3.0CVE-2026-25467
  4. 4.3KirkiUp to 6.4.0CVE-2026-42694

Other vulnerabilities in WordPress plugins

3 vulnerabilities

  1. 8.8Buddyboss PlatformPrivilege EscalationUp to 3.5.0CVE-2026-118082
  2. 5.3MasterStudy LMSPath Traversal via stm_lms_step ParameterFixed in 3.7.50CVE-2026-80067
  3. 5.1WebToffee Product Import Export for WooCommerceSSRF via RedirectsFixed in 2.6.8CVE-2026-118989

Servers and applications

2 vulnerabilities

  1. 7.8.NETASP.NET Core Elevation of Privilege VulnerabilityFixed in 10.0.403-servicing.26523.112, 11.0.100-rc.3CVE-2026-114148
  2. 5.3Pythonsocket.getaddrinfo() accepts embedded null bytes in host and portFixed in 3.16.0CVE-2026-116566

Other vulnerabilities in WordPress themes

1 vulnerability

  1. 7.5NewsmaticUnauthenticated SQL Injection via 'slug' ParameterUp to 1.5.0CVE-2026-110184

From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.