Katalog CVE (hal. 785)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.187 (Critical 36.636 · High 106.360 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 39.201–39.250 dari 266.187 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-16067 The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non-WooCommerce) checkou...	5.3 Medium	—	0,32%	6 Agt 2026
CVE-2026-15734 A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.	9.8 Critical	—	0,77%	6 Agt 2026
CVE-2026-15733 A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitr...	9.8 Critical	—	10,0%	6 Agt 2026
CVE-2026-15732 A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitr...	9.8 Critical	—	0,56%	6 Agt 2026
CVE-2026-15256 The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field's default value, from being processed...	4.8 Medium	—	0,24%	6 Agt 2026
CVE-2026-15208 The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the registration it is...	5.3 Medium	—	0,16%	6 Agt 2026
CVE-2026-15152 The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site's own merchant account, nor that...	5.3 Medium	—	0,16%	6 Agt 2026
CVE-2026-15149 The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, and relies...	5.3 Medium	—	0,32%	6 Agt 2026
CVE-2026-15147 The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment r...	5.3 Medium	—	0,16%	6 Agt 2026
CVE-2026-14936 The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activ...	5.3 Medium	—	0,16%	6 Agt 2026
CVE-2026-14842 The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauthenticated attackers t...	5.3 Medium	—	0,30%	6 Agt 2026
CVE-2026-14831 The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and cal...	5.3 Medium	—	0,32%	6 Agt 2026
CVE-2026-14812 The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote c...	10.0 Critical	—	0,83%	6 Agt 2026
CVE-2026-14306 The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected course content, allowing authenticated users with su...	4.3 Medium	—	0,27%	6 Agt 2026
CVE-2026-14225 The Easy Appointments WordPress plugin before 3.12.28 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of th...	2.7 Low	—	0,32%	6 Agt 2026
CVE-2026-13399 The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticated users to...	7.5 High	—	0,40%	6 Agt 2026
CVE-2026-13342 The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restrict...	5.3 Medium	—	0,35%	6 Agt 2026
CVE-2026-12901 The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a noti...	5.9 Medium	—	0,16%	6 Agt 2026
CVE-2026-12584 The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming payment-provider notifications for one of its...	7.5 High	—	0,19%	6 Agt 2026
CVE-2026-12501 The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent to the site's configured merchant account, nor th...	5.3 Medium	—	0,16%	6 Agt 2026
CVE-2026-11976 The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current release (10.2.2) and the version Monst...	10.0 Critical	—	0,52%	6 Agt 2026
CVE-2026-11803 autodesk revit A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to ca...	7.8 High	—	0,19%	6 Agt 2026
CVE-2026-11361 The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it complete, allowing unauthenti...	5.9 Medium	—	0,18%	6 Agt 2026
CVE-2026-10599 The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor...	7.5 High	—	0,21%	6 Agt 2026
CVE-2026-10524 The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price value against the actual product price when items are added to the cart through one of it...	7.5 High	—	0,38%	6 Agt 2026
CVE-2025-6508 The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions...	4.3 Medium	—	0,28%	6 Agt 2026
CVE-2025-15674 The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from reading globally password-protected content throug...	2.7 Low	—	0,30%	6 Agt 2026
CVE-2025-14561 In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to inv...	9.0 Critical	—	0,41%	6 Agt 2026
CVE-2025-12317 When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with that user....	5.0 Medium	—	0,25%	6 Agt 2026
CVE-2024-6541 The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated users to p...	6.8 Medium	—	0,34%	6 Agt 2026
CVE-2024-39024 In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.	8.8 High	—	0,79%	6 Agt 2026
CVE-2026-68750 rrrene htmlsanitizeex Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU and me...	7.5 High	—	0,80%	6 Agt 2026
CVE-2026-68749 rrrene htmlsanitizeex Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU via...	7.5 High	—	0,80%	6 Agt 2026
CVE-2026-68747 rrrene htmlsanitizeex Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an...	6.1 Medium	—	0,45%	6 Agt 2026
CVE-2026-66843 rrrene htmlsanitizeex Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to load a document of the...	6.1 Medium	—	0,51%	6 Agt 2026
CVE-2026-66829 rrrene htmlsanitizeex URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to...	6.1 Medium	—	0,57%	6 Agt 2026
CVE-2026-66370 rrrene htmlsanitizeex URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a...	6.1 Medium	—	0,40%	6 Agt 2026
CVE-2026-5423 Advisory @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connection...	8.2 High	—	0,59%	6 Agt 2026
CVE-2026-53985 Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthen...	7.5 High	—	0,71%	6 Agt 2026
CVE-2026-53977 OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request...	7.5 High	—	0,97%	6 Agt 2026
CVE-2026-43622 ggml llama.cpp llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1b...	7.8 High	—	0,23%	6 Agt 2026
CVE-2026-3430 The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL inject...	8.6 High	—	0,41%	6 Agt 2026
CVE-2026-19047 A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper....	5.3 Medium	—	1,1%	6 Agt 2026
CVE-2026-19046 A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuide...	3.3 Low	—	0,20%	6 Agt 2026
CVE-2026-18427 fastify-static @fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected only parent directory segments, but i...	7.5 High	—	0,66%	6 Agt 2026
CVE-2026-18359 escriptorium Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue a...	8.5 High	—	0,35%	6 Agt 2026
CVE-2026-18277 escriptorium Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access t...	7.1 High	—	0,41%	6 Agt 2026
CVE-2026-18276 escriptorium Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event stream and...	4.3 Medium	—	0,36%	6 Agt 2026
CVE-2026-18275 escriptorium Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and...	6.5 Medium	—	0,39%	6 Agt 2026
CVE-2026-18258 escriptorium Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticate...	8.8 High	—	0,53%	6 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.