Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 32 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-57741
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing all...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57740
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security L...
|
7.1 High | — | 0,32% | 13 Jul 2026 |
|
CVE-2026-57739
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing all...
|
9.3 Critical | — | 0,40% | 13 Jul 2026 |
|
CVE-2026-57738
Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0.
|
9.8 Critical | — | 0,56% | 13 Jul 2026 |
|
CVE-2026-57734
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue a...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57733
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.Th...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57732
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.Th...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57729
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: fr...
|
7.5 High | — | 0,39% | 13 Jul 2026 |
|
CVE-2026-57728
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57727
Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a thro...
|
7.5 High | — | 0,39% | 13 Jul 2026 |
|
CVE-2026-57726
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Ki...
|
9.3 Critical | — | 0,40% | 13 Jul 2026 |
|
CVE-2026-57725
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57724
Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12.
|
9.8 Critical | — | 0,56% | 13 Jul 2026 |
|
CVE-2026-57719
Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from...
|
10.0 Critical | — | 0,52% | 13 Jul 2026 |
|
CVE-2026-57718
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, A...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57715
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Reflected XSS.This issue...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57714
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue...
|
9.3 Critical | — | 0,40% | 13 Jul 2026 |
|
CVE-2026-57713
Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a...
|
8.8 High | — | 0,46% | 13 Jul 2026 |
|
CVE-2026-57712
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Portfolio wpzoom-portfolio allows Reflected XSS.This i...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57711
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored XSS.This issue a...
|
6.5 Medium | — | 0,22% | 13 Jul 2026 |
|
CVE-2026-57710
Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects WoowBot Pro...
|
9.9 Critical | — | 0,48% | 13 Jul 2026 |
|
CVE-2026-57709
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Pat...
|
8.6 High | — | 0,53% | 13 Jul 2026 |
|
CVE-2026-57708
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57707
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory...
|
9.3 Critical | — | 0,40% | 13 Jul 2026 |
|
CVE-2026-57706
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57705
Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Even...
|
7.5 High | — | 0,35% | 13 Jul 2026 |
|
CVE-2026-57702
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injec...
|
9.3 Critical | — | 0,45% | 13 Jul 2026 |
|
CVE-2026-57698
Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentica...
|
6.5 Medium | — | 0,36% | 13 Jul 2026 |
|
CVE-2026-57697
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery...
|
7.5 High | — | 0,48% | 13 Jul 2026 |
|
CVE-2026-57695
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS....
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57694
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This iss...
|
6.5 Medium | — | 0,34% | 13 Jul 2026 |
|
CVE-2026-57693
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Conf...
|
6.5 Medium | — | 0,22% | 13 Jul 2026 |
|
CVE-2026-57691
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firewall gotmls allows Ref...
|
5.8 Medium | — | 0,20% | 13 Jul 2026 |
|
CVE-2026-57668
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS....
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57424
Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Lev...
|
6.5 Medium | — | 0,33% | 13 Jul 2026 |
|
CVE-2026-57423
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter all...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57422
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-produc...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57421
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57420
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netrr Author Box WP Lens author-box-for-divi allows Stored XSS.This...
|
6.5 Medium | — | 0,22% | 13 Jul 2026 |
|
CVE-2026-57419
Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Contr...
|
6.5 Medium | — | 0,30% | 13 Jul 2026 |
|
CVE-2026-57418
Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Level...
|
6.5 Medium | — | 0,34% | 13 Jul 2026 |
|
CVE-2026-57417
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Ca...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57416
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing all...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57415
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57414
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot woowbot-woocommer...
|
6.5 Medium | — | 0,22% | 13 Jul 2026 |
|
CVE-2026-57413
Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects Instant Image Generato...
|
6.4 Medium | — | 0,23% | 13 Jul 2026 |
|
CVE-2026-57412
Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects...
|
6.5 Medium | — | 0,33% | 13 Jul 2026 |
|
CVE-2026-57411
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
|
CVE-2026-57410
Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a through <= 2...
|
8.8 High | — | 0,42% | 13 Jul 2026 |
|
CVE-2026-57409
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-ta...
|
7.1 High | — | 0,25% | 13 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.