🛡️ CVE Intelligence Center
Common Vulnerabilities & Exposures — Security Intelligence Database
| CVE ID | Severity | CVSS | Description | Status | Published |
|---|---|---|---|---|---|
| CVE-2026-22856 | High | 8.1 |
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP threa…
|
⚡ Exploit ✅ Patch | Jan 14, 2026 |
| CVE-2025-13455 | High | 7.8 |
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass T…
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-12166 | High | 7.5 |
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to bli…
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-14770 | High | 7.5 |
The Shipping Rate By Cities plugin for WordPress is vulnerable to SQL Injection via the 'city' parameter in all versions…
|
✅ Patch | Jan 14, 2026 |
| CVE-2026-21889 | High | 7.5 |
Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server…
|
✅ Patch | Jan 14, 2026 |
| CVE-2026-22240 | High | 7.5 |
The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unau…
|
✅ Patch | Jan 14, 2026 |
| CVE-2026-23498 | High | 7.2 |
Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array a…
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-14613 | High | 7.2 |
The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inclu…
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-15266 | High | 7.2 |
The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to Sto…
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-15283 | High | 7.2 |
The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_directory_name' and …
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-15378 | High | 7.2 |
The AJS Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note_list_class' and 'popup…
|
✅ Patch | Jan 14, 2026 |
| CVE-2025-14615 | High | 7.1 |
The DASHBOARD BUILDER – WordPress plugin for Charts and Graphs plugin for WordPress is vulnerable to Cross-Site Request …
|
✅ Patch | Jan 14, 2026 |
| CVE-2026-0500 | Critical | 9.6 |
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthe…
|
✅ Patch | Jan 13, 2026 |
| CVE-2026-0498 | Critical | 9.1 |
SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the fu…
|
✅ Patch | Jan 13, 2026 |
| CVE-2026-20805 | Critical | 9.0 |
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an informati…
|
⚡ Exploit ✅ Patch | Jan 13, 2026 |
| CVE-2026-20947 | High | 8.8 |
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allo…
|
✅ Patch | Jan 13, 2026 |
| CVE-2026-20963 | High | 8.8 |
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne…
|
✅ Patch | Jan 13, 2026 |
| CVE-2022-50909 | High | 8.8 |
Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows…
|
✅ Patch | Jan 13, 2026 |
| CVE-2022-50936 | High | 8.8 |
WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload mal…
|
⚡ Exploit ✅ Patch | Jan 13, 2026 |
| CVE-2025-40942 | High | 8.8 |
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains…
|
✅ Patch | Jan 13, 2026 |