387354 matches found
CVE-2026-62043 WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension = 5.0.7 versions...
EUVD-2026-96473
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension = 5.0.7 versions...
CVE-2026-42630
The Web Plura Backup & Restore Manager WordPress plugin versions
EUVD-2026-96432
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...
CVE-2026-42630 WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...
CVE-2026-42419
The Swish Migrate and Backup WordPress plugin, in versions
EUVD-2026-96543
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...
CVE-2026-42419 WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...
CVE-2026-98263
A flaw was found in the Linux kernel's Realtek RT712 audio codec driver. A local user could exploit this flaw to cause a Denial of Service DoS or unexpected system behavior. The issue arises because audio stream configuration data is left uninitialized before being passed to the SoundWire...
CVE-2026-98254
A flaw was found in the Linux kernel's Software I/O Translation Lookaside Buffer swiotlb. During Direct Memory Access DMA bounce operations involving high memory, an incorrect address calculation occurs when an offset crosses a page boundary. This error causes data transfers to read from or...
CVE-2026-62044
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...
CVE-2026-104398
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10...
CVE-2026-104398 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10...
CVE-2026-104398
The VillaTheme AFFI – Affiliate Marketing for WooCommerce WordPress plugin is vulnerable to a PHP Object Injection flaw due to the deserialization of untrusted data in the affi-affiliate-marketing-for-woo component. This issue affects versions from n/a through 1.0.10 . Exploitation of this vulner...
EUVD-2026-96374
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...
CVE-2026-62044
The bPlugins Super Video Player WordPress plugin (versions ≤ 1.8.13 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which can allow an attacker to inject objects into the application. The impact includes high levels of risk to confiden...
CVE-2026-108579
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...
CVE-2026-108579
OpenPanel versions through 2.3.0 are vulnerable to a CSV formula injection vulnerability via the Cohort Member Export feature. Unauthenticated attackers can supply crafted profile IDs (e.g., =HYPERLINK(...)) to the /track endpoint. When a cohort is exported to a CSV file, these embedded formulas ...
EUVD-2026-96362
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...