Known Vulnerabilities for CF7 Apps by WPExperts
Listed below are 10 of the newest known vulnerabilities associated with "CF7 Apps" by "WPExperts".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105761 json | Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoin... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105637 json | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/as... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105636 json | Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104973 json | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses on... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104970 json | Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-104968 json | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_me... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104967 json | Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/p... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-101052 json | A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the f... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-100844 json | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100686 json | Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint,... | Not Provided | 2026-09-26 | 2026-09-30 |