Known Vulnerabilities for WP Module Data by Newfold
Listed below are 10 of the newest known vulnerabilities associated with "WP Module Data" by "Newfold".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-108712 json | SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allo... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-108692 json | 1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /f... | Not Provided | 2026-10-11 | 2026-10-14 |
| CVE-2026-108568 json | A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-107851 json | Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Secur... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-105107 json | Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate)... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-104849 json | Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename from a caller-suppli... | Not Provided | 2026-10-02 | 2026-10-06 |
| CVE-2026-103365 json | The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information E... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-102781 json | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper:... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-102510 json | Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-101019 json | Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsis... | Not Provided | 2026-10-14 | 2026-10-15 |