CVE History
18
CVE records
7
High severity
2026
Sep 2026
- CVE-2026-76552 Authenticated Arbitrary File Upload via Remote Image Import in WP Import Export Lite Sep 2026 CVSS 3.1 8.8
- CVE-2026-70469 Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests in Apache NiFi Sep 2026 CVSS 3.1 7.5
- CVE-2026-76554 Authenticated Privilege Escalation via User Import in WP Import Export Lite Sep 2026 CVSS 3.1 7.2
- CVE-2026-76550 Authenticated RCE via Export Template Path Traversal in WP Import Export Lite Sep 2026 CVSS 3.1 7.2
- CVE-2026-76558 Stored DOM XSS via Custom Field Names in WP Import Export Lite Sep 2026 CVSS 3.1 6.8
- CVE-2026-76557 Authenticated SQL Injection via Import Options in WP Import Export Lite Sep 2026 CVSS 3.1 6.8
- CVE-2026-76556 Authenticated SQL Injection via Export Filter Rules in WP Import Export Lite Sep 2026 CVSS 3.1 6.8
- CVE-2026-76553 Authenticated Arbitrary Directory Deletion via Template Path Traversal in WP Import Export Lite Sep 2026 CVSS 3.1 6.5
- CVE-2026-76579 Reflected XSS via ESI Parameter in LiteSpeed Cache Sep 2026 CVSS 3.1 4.7
2025