Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-66483
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
|
9.8 Critical | — | 0,31% | 10 Okt 2026 |
|
CVE-2026-66482
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
|
9.8 Critical | — | 0,31% | 10 Okt 2026 |
|
CVE-2026-66481
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
|
6.8 Medium | — | 0,33% | 10 Okt 2026 |
|
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data....
|
5.3 Medium | — | 0,20% | 10 Okt 2026 |
|
CVE-2026-65459
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
|
7.5 High | — | 0,24% | 10 Okt 2026 |
|
CVE-2026-62130
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
|
7.2 High | — | 0,30% | 10 Okt 2026 |
|
CVE-2026-62129
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
|
9.9 Critical | — | 0,27% | 10 Okt 2026 |
|
CVE-2026-62125
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
|
9.8 Critical | — | 0,31% | 10 Okt 2026 |
|
CVE-2026-62124
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
|
9.8 Critical | — | 0,31% | 10 Okt 2026 |
|
CVE-2026-62123
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
|
9.8 Critical | — | 0,31% | 10 Okt 2026 |
|
CVE-2026-62120
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
|
9.8 Critical | — | 0,31% | 10 Okt 2026 |
|
CVE-2026-62118
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
|
7.3 High | — | 0,22% | 10 Okt 2026 |
|
CVE-2026-62117
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
|
8.5 High | — | 0,28% | 10 Okt 2026 |
|
CVE-2026-62116
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62115
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
|
8.1 High | — | 0,28% | 10 Okt 2026 |
|
CVE-2026-62100
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62099
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
|
8.1 High | — | 0,28% | 10 Okt 2026 |
|
CVE-2026-62098
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
|
6.5 Medium | — | 0,21% | 10 Okt 2026 |
|
CVE-2026-62096
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
|
8.1 High | — | 0,28% | 10 Okt 2026 |
|
CVE-2026-62095
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62094
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
|
8.1 High | — | 0,28% | 10 Okt 2026 |
|
CVE-2026-62093
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62092
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
|
8.1 High | — | 0,28% | 10 Okt 2026 |
|
CVE-2026-62091
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62090
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62087
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62086
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62082
Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62077
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62076
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62075
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62074
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62070
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62069
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62068
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62067
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62066
Unauthenticated Local File Inclusion in Volos <= 1.2 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62065
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
|
8.1 High | — | 0,35% | 10 Okt 2026 |
|
CVE-2026-62064
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62054
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62053
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62052
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62051
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62050
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
|
9.8 Critical | — | 0,39% | 10 Okt 2026 |
|
CVE-2026-62043
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
|
7.5 High | — | 0,30% | 10 Okt 2026 |
|
CVE-2026-62038
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
|
7.3 High | — | 0,27% | 10 Okt 2026 |
|
CVE-2026-62037
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62035
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
|
6.3 Medium | — | 0,25% | 10 Okt 2026 |
|
CVE-2026-62034
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
|
7.1 High | — | 0,18% | 10 Okt 2026 |
|
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions.
|
7.6 High | — | 0,30% | 10 Okt 2026 |