CVE-2026-84780

MediumCVSS 5.3/10Last modified Sep 4, 2026

Description

Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Sep 2, 2026
Last modified
Sep 4, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-847816.5Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions.CVE-2026-847828.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retCVE-2026-847837.5Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed whiCVE-2026-847847.5Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many coCVE-2026-847878.1ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability thCVE-2026-847897.1ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability tCVE-2026-84796.9IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messCVE-2026-847907.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldCVE-2026-847917.1ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability tCVE-2026-847924.3Craft CMS versions before 5.10.11 contain a broken access control vulnerability in the element-indexes/save-elements endpoint that allows coCVE-2026-847934.8Craft CMS versions from 5.0.0-RC1 before 5.10.11 contain a stored cross-site scripting vulnerability in the site name field that fails to saCVE-2026-847947.1Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is supplied. Authenticated users
CVE-2026-84780: Medium severity, CVSS 5.3 | Vulnix