Katalog CVE (hal. 814)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.209 (Critical 36.641 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 40.651–40.700 dari 266.209 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-16090 The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'hea...	6.4 Medium	—	0,33%	1 Agt 2026
CVE-2026-16087 The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messages[][id]' Parameter in all version...	6.5 Medium	—	0,45%	1 Agt 2026
CVE-2026-15964 The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up to, and including, 2.0.0. Thi...	9.8 Critical	—	0,89%	1 Agt 2026
CVE-2026-15951 The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and including, 1.0.12. This is due to insufficient es...	4.9 Medium	—	0,44%	1 Agt 2026
CVE-2026-15950 The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...	6.4 Medium	—	0,33%	1 Agt 2026
CVE-2026-15662 The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bg_color' parameter in all ve...	6.4 Medium	—	0,41%	1 Agt 2026
CVE-2026-15649 The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and inclu...	6.4 Medium	—	0,35%	1 Agt 2026
CVE-2026-15645 The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and...	6.4 Medium	—	0,36%	1 Agt 2026
CVE-2026-15644 The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, an...	6.4 Medium	—	0,36%	1 Agt 2026
CVE-2026-15601 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal (Zip Slip) in all versions up to, and including, 6.0....	4.9 Medium	—	1,1%	1 Agt 2026
CVE-2026-15450 The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3. Thi...	8.1 High	—	0,58%	1 Agt 2026
CVE-2026-15052 The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all ve...	7.2 High	—	0,42%	1 Agt 2026
CVE-2026-15018 The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and includi...	5.3 Medium	—	0,42%	1 Agt 2026
CVE-2026-13458 The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2....	6.4 Medium	—	0,42%	1 Agt 2026
CVE-2026-11995 The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versi...	5.3 Medium	—	0,56%	1 Agt 2026
CVE-2026-10782 The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.9. This is due to the plugin not properly v...	4.3 Medium	—	0,40%	1 Agt 2026
CVE-2025-14073 The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an Insecure Direct Object Reference in all versions up to, a...	5.3 Medium	—	0,47%	1 Agt 2026
CVE-2026-2916 The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the `enqueue_scripts()` met...	4.3 Medium	—	0,37%	1 Agt 2026
CVE-2026-15988 The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5...	8.8 High	—	0,30%	1 Agt 2026
CVE-2025-14469 The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1. This is due to missing nonce validation on th...	4.3 Medium	—	0,19%	1 Agt 2026
CVE-2026-15932 The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read...	5.3 Medium	—	0,71%	1 Agt 2026
CVE-2026-15368 The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allow...	8.1 High	—	0,38%	1 Agt 2026
CVE-2026-15262 The Admin Columns for ACF Fields WordPress plugin through 0.3.2 does not escape Advanced Custom Fields values before outputting them in the WordPress admin list-table col...	5.4 Medium	—	0,23%	1 Agt 2026
CVE-2026-15244 The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing...	7.2 High	—	1,1%	1 Agt 2026
CVE-2026-15234 The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, a...	5.4 Medium	—	0,23%	1 Agt 2026
CVE-2026-14840 The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its...	5.3 Medium	—	0,35%	1 Agt 2026
CVE-2026-14839 The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to re...	7.5 High	—	0,43%	1 Agt 2026
CVE-2026-14836 The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset verification-code flow, keying both the verificat...	8.1 High	—	0,38%	1 Agt 2026
CVE-2026-14823 The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor...	2.2 Low	—	0,23%	1 Agt 2026
CVE-2026-14822 The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unaut...	5.3 Medium	—	0,30%	1 Agt 2026
CVE-2026-14596 The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowi...	8.8 High	—	0,41%	1 Agt 2026
CVE-2026-14561 The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification...	6.5 Medium	—	0,28%	1 Agt 2026
CVE-2026-14315 The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to...	6.5 Medium	—	0,28%	1 Agt 2026
CVE-2026-14309 The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been validated before processing a password-reset reque...	8.1 High	—	0,38%	1 Agt 2026
CVE-2026-14292 The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in the front-end package templates, allowing users wit...	5.4 Medium	—	0,27%	1 Agt 2026
CVE-2026-14214 The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user...	2.7 Low	—	0,28%	1 Agt 2026
CVE-2026-14197 The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent t...	3.8 Low	—	0,26%	1 Agt 2026
CVE-2026-14195 The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor r...	2.7 Low	—	0,30%	1 Agt 2026
CVE-2026-13729 The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers...	4.3 Medium	—	0,14%	1 Agt 2026
CVE-2026-13725 The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflec...	7.1 High	—	0,28%	1 Agt 2026
CVE-2026-13604 The Pixelavo WordPress plugin before 1.5.4 registers an unauthenticated AJAX action, gated only by a nonce that it emits publicly on every front-end page, that forwards...	5.3 Medium	—	0,29%	1 Agt 2026
CVE-2026-13596 The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthe...	9.1 Critical	—	0,46%	1 Agt 2026
CVE-2026-13329 The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment...	6.5 Medium	—	0,30%	1 Agt 2026
CVE-2026-13158 The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), all...	7.2 High	—	0,50%	1 Agt 2026
CVE-2026-13157 The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowi...	7.2 High	—	0,50%	1 Agt 2026
CVE-2026-12966 The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several unauthenticated AJAX...	5.3 Medium	—	0,30%	1 Agt 2026
CVE-2026-12696 The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant p...	5.4 Medium	—	0,23%	1 Agt 2026
CVE-2026-11882 The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthen...	3.7 Low	—	0,30%	1 Agt 2026
CVE-2026-10827 The Spectra Legacy WordPress plugin before 2.20.0 does not validate or escape several block style attributes before using them to build the CSS it outputs on the front e...	3.5 Low	—	0,15%	1 Agt 2026
CVE-2025-15669 The Bit Form WordPress plugin before 3.1.4 does not sanitise one of its conversational-form display settings before rendering it on the public-facing form, allowing high...	4.8 Medium	—	0,24%	1 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.