[vulnfeed] 3 critical CVEs — 2026-10-10 04:00 UTC
vulnfeed
Critical alert — 2026-10-10 06:13 UTC
3 new critical CVEs
in the last 5 hours — 3 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-104732CRITICAL
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no s
CVSS 9.8
CVE-2026-94589CRITICAL
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is v
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the ext
CVSS 9.8
CVE-2026-107645CRITICAL
The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and includ
The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disab
CVSS 9.1
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: