WordPress WP Docs plugin <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]' vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via 'wpdocsoptionsiconsize' vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin WP Docs versions = 2.2.9...

MAL-2026-2746 Malicious code in chainlink-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa71a3bbe3ac61328a09a14db5bdffc3fa0db05f8af79d28c0a31f7c1d3cd7c The package chainlink-docs was found to contain malicious code...

Malicious code in chainlink-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa71a3bbe3ac61328a09a14db5bdffc3fa0db05f8af79d28c0a31f7c1d3cd7c The package chainlink-docs was found to contain malicious code...

EUVD-2026-23168

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878 WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878 WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878: Improper Neutralization of Input During Web Page Generation

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

PT-2026-33252

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocs optionsicon size' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-lev...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.54-1.hum1 noarch tomcat10-admin-webapps-10.1.54-1.hum1 noarch tomcat10-common-10.1.54-1.hum1 noarch tomcat10-docs-webapp-10.1.54-1.hum1 noarch...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8ssandra-client, trivy, helm, nova, harbor, rancher-fleet, pluto, trivy-operator, tigera-operator, helm-push, helm-set-status, zarf, cilium-cli, flux, chart-testing, kube-arangodb, kuma, linkerd2, cert-manager-cmctl, k9s, envoy-gateway, helm-mapkubeapis,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, trivy, helm, nova, harbor, rancher-fleet, pluto, trivy-operator, tigera-operator, helm-push, helm-set-status, zarf, cilium-cli, flux, chart-testing, kube-arangodb, kuma, linkerd2, cert-manager-cmctl, k9s, envoy-gateway, helm-mapkubeapis,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chaos-mesh, kots, envoy-gateway-fips, kuma, kubescape-server-fips, jfrog-cli, helm-diff-fips, cloudbeat, envoy-gateway, kubescape-server, cerbos, k8ssandra-client, helm, consul-k8s-fips, linkerd2-fips, gitlab-operator, rancher-fleet, tigera-operator-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, karpenter-fips, prometheus, prometheus-redis-exporter-fips, db-operator, commercial-chainloop-backend, kubernetes-csi-livenessprobe, crossplane-provider-aws-rolesanywhere-fips, nri-discovery-kubernetes, rancher-webhook, request-1279,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, db-operator, kubernetes-csi-livenessprobe, hcl2json, prometheus-stackdriver-exporter, sftpgo-plugin-geoipfilter, yunikorn-web, knative-storage-migrate, neuvector-scanner-fips, crossplane-provider-aws-wafv2, virt-handler-fips,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs20: nodejs20-20.20.0-7.1.hum1 aarch64, x8664 nodejs20-bin-20.20.0-7.1.hum1 noarch nodejs20-devel-20.20.0-7.1.hum1 aarch64, x8664 nodejs20-docs-20.20.0-7.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.9.3 release.

Red Hat Developer Hub 1.9.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.14.1-4.hum1 aarch64, x8664 nodejs24-bin-24.14.1-4.hum1 noarch nodejs24-devel-24.14.1-4.hum1 aarch64, x8664 nodejs24-docs-24.14.1-4.hum1 noarch...

[SECURITY] Fedora 44 Update: python3.12-3.12.13-2.fc44

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...