CVE-2026-24990 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990: Missing Authorization

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-6236

Name of the Vulnerable Software and Affected Versions Fahad Mahmood WP Docs versions through 2.2.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kubernetes-replicator, sftpgo-plugin-kms, aws-sigv4-proxy, grafana-rollout-operator, ip-masq-agent, kubeflow, neuvector-sigstore-interface, flux-image-automation-controller, gitness, kine, temporal-ui-server,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, confluent-cp-docker-utils, sftpgo-plugin-kms, aws-sigv4-proxy, temporal-ui-server, neuvector-sigstore-interface, kine, nri-memcached, fluxcd-kustomize-mutating-webhook, yunikorn-k8shim, gatekeeper, git-sync, git-lfs,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, confluent-cp-docker-utils, sftpgo-plugin-kms, aws-sigv4-proxy, temporal-ui-server, neuvector-sigstore-interface, kine, nri-memcached, fluxcd-kustomize-mutating-webhook, yunikorn-k8shim, gatekeeper, git-sync, git-lfs,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, confluent-cp-docker-utils, sftpgo-plugin-kms, aws-sigv4-proxy, temporal-ui-server, neuvector-sigstore-interface, kine, nri-memcached, fluxcd-kustomize-mutating-webhook, yunikorn-k8shim, gatekeeper, git-sync, git-lfs,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, confluent-cp-docker-utils, sftpgo-plugin-kms, aws-sigv4-proxy, temporal-ui-server, neuvector-sigstore-interface, kine, nri-memcached, fluxcd-kustomize-mutating-webhook, yunikorn-k8shim, gatekeeper, git-sync, git-lfs,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, ctop, kubernetes-replicator, sftpgo-plugin-kms, aws-sigv4-proxy, grafana-rollout-operator, ip-masq-agent, kubeflow, neuvector-sigstore-interface, flux-image-automation-controller, gitness, kine, temporal-ui-server,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kubernetes-replicator, sftpgo-plugin-kms, aws-sigv4-proxy, grafana-rollout-operator, ip-masq-agent, kubeflow, neuvector-sigstore-interface, flux-image-automation-controller, gitness, kine, temporal-ui-server,...

Directory Traversal

Overview @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Directory Traversal via the TechdocsGenerator function when processing documentation from...

CVE-2026-25153 @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, when TechDocs is configured with runIn: local, a malicious actor who...

Malicious Package

Overview docs-ux is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cosmos-hub-docs-site is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview acp-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview fabric-shim-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-206360

The default password for the extended admin user mode in the application U9ExosAdmin.exe "Kaba 9300 Administration" is hard-coded in multiple locations as well as documented in the locally stored user documentation...

[SECURITY] Fedora 42 Update: python3.12-3.12.12-3.fc42

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

[SECURITY] Fedora 43 Update: python3.11-3.11.14-4.fc43

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...