CVE-2026-93527

HighCVSS 8.5/10Last modified Sep 23, 2026

Description

Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 23, 2026
Last modified
Sep 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-935283.7The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allCVE-2026-935296.5Contributor Broken Access Control in WSP MCP &#8211; AI Agents Connector <= 2.7.0 versions.CVE-2026-93537.3A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/sCVE-2026-935314.3A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects CVE-2026-935326.3A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affeCVE-2026-935336.3A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::chCVE-2026-935346.3A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdateCVE-2026-935356.4The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CVE-2026-935376.5A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permiCVE-2026-935387.1A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplieCVE-2026-935395.4A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incomiCVE-2026-93546.5A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function of the component Slac
CVE-2026-93527: High severity, CVSS 8.5 | Vulnix