Katalog CVE (hal. 983)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 49.101–49.150 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-61955 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hannan گرویتی فرم فارسی persian-gravity-forms allows Blind SQL Injec...	7.6 High	—	0,38%	13 Jul 2026
CVE-2026-61952 Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access C...	4.9 Medium	—	0,33%	13 Jul 2026
CVE-2026-59523 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security...	6.5 Medium	—	0,27%	13 Jul 2026
CVE-2026-59521 Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from...	7.2 High	—	0,54%	13 Jul 2026
CVE-2026-59518 Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <= 8.8.2.	9.8 Critical	—	0,56%	13 Jul 2026
CVE-2026-59516 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Refl...	7.1 High	—	0,25%	13 Jul 2026
CVE-2026-59515 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sergey AIWU ai-copilot-content-generator allows Blind SQL Injection....	9.3 Critical	—	0,40%	13 Jul 2026
CVE-2026-57816 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflecte...	7.1 High	—	0,25%	13 Jul 2026
CVE-2026-57815 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows...	7.5 High	—	0,50%	13 Jul 2026
CVE-2026-57814 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator...	7.1 High	—	0,25%	13 Jul 2026
CVE-2026-57813 Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3.	9.8 Critical	—	0,48%	13 Jul 2026
CVE-2026-57812 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security...	6.5 Medium	—	0,33%	13 Jul 2026
CVE-2026-57811 Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclus...	10.0 Critical	—	0,56%	13 Jul 2026
CVE-2026-57810 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind...	8.5 High	—	0,36%	13 Jul 2026
CVE-2026-57805 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File I...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57804 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor)...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57803 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core allows PHP Local File...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57802 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Local File Incl...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57801 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local Fi...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57800 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57799 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.T...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57798 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SaurabhSharma NewsPlus Shortcodes newsplus-shortc...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57797 Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from...	4.3 Medium	—	0,33%	13 Jul 2026
CVE-2026-57796 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows PHP Local File Inclus...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57795 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor allows PHP Local File...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57794 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Lo...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57793 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inc...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57792 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclu...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57791 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows PHP Local File Inclu...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57790 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Local File Inc...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57789 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusi...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57788 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inc...	7.5 High	—	0,51%	13 Jul 2026
CVE-2026-57787 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This...	8.5 High	—	0,36%	13 Jul 2026
CVE-2026-57786 Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout-Core: from n/a throu...	8.8 High	—	0,23%	13 Jul 2026
CVE-2026-57783 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speak...	6.5 Medium	—	0,22%	13 Jul 2026
CVE-2026-57782 Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af...	5.3 Medium	—	0,29%	13 Jul 2026
CVE-2026-57781 Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MeetingHub:...	5.3 Medium	—	0,29%	13 Jul 2026
CVE-2026-57780 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-page-builder allows D...	6.5 Medium	—	0,22%	13 Jul 2026
CVE-2026-57779 Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fascinate:...	5.3 Medium	—	0,29%	13 Jul 2026
CVE-2026-57778 Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Secu...	5.3 Medium	—	0,29%	13 Jul 2026
CVE-2026-57776 Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Weddin...	5.3 Medium	—	0,42%	13 Jul 2026
CVE-2026-57774 Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects V...	5.3 Medium	—	0,42%	13 Jul 2026
CVE-2026-57773 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-advanced-shipme...	7.6 High	—	0,38%	13 Jul 2026
CVE-2026-57772 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Blind...	8.5 High	—	0,36%	13 Jul 2026
CVE-2026-57771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL In...	8.5 High	—	0,36%	13 Jul 2026
CVE-2026-57770 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a th...	9.8 Critical	—	0,56%	13 Jul 2026
CVE-2026-57768 Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Registe...	8.2 High	—	0,32%	13 Jul 2026
CVE-2026-57745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Reflected XSS...	7.1 High	—	0,25%	13 Jul 2026
CVE-2026-57744 Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 \| Extensions: fr...	9.8 Critical	—	0,56%	13 Jul 2026
CVE-2026-57743 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions a...	8.1 High	—	0,56%	13 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.