https://127.0.0.1:10001 Latest vulnerabilities published by the CNAs operating under the mitre root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:09:16 +0000 https://127.0.0.1:10001/vuln/cve-2026-96451 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability https://127.0.0.1:10001/vuln/cve-2026-96451 Sat, 03 Oct 2026 15:08:13 +0000 https://127.0.0.1:10001/vuln/cve-2026-103342 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability https://127.0.0.1:10001/vuln/cve-2026-103342 Sat, 03 Oct 2026 14:00:11 +0000 https://127.0.0.1:10001/vuln/cve-2026-103065 WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability https://127.0.0.1:10001/vuln/cve-2026-103065 Sat, 03 Oct 2026 14:00:11 +0000 https://127.0.0.1:10001/vuln/cve-2026-105122 OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri https://127.0.0.1:10001/vuln/cve-2026-105122 Sat, 03 Oct 2026 12:14:45 +0000 https://127.0.0.1:10001/vuln/cve-2026-105121 OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping https://127.0.0.1:10001/vuln/cve-2026-105121 Sat, 03 Oct 2026 12:14:44 +0000 https://127.0.0.1:10001/vuln/cve-2026-105120 OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint https://127.0.0.1:10001/vuln/cve-2026-105120 Sat, 03 Oct 2026 12:14:44 +0000 https://127.0.0.1:10001/vuln/cve-2026-105119 OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows https://127.0.0.1:10001/vuln/cve-2026-105119 Sat, 03 Oct 2026 12:14:43 +0000 https://127.0.0.1:10001/vuln/cve-2026-105118 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession https://127.0.0.1:10001/vuln/cve-2026-105118 Sat, 03 Oct 2026 12:14:43 +0000 https://127.0.0.1:10001/vuln/cve-2026-105117 OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions https://127.0.0.1:10001/vuln/cve-2026-105117 Sat, 03 Oct 2026 12:14:42 +0000 https://127.0.0.1:10001/vuln/cve-2026-105116 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page https://127.0.0.1:10001/vuln/cve-2026-105116 Sat, 03 Oct 2026 12:14:41 +0000