Integrate Google Drive <= 1.5.3 - Information Disclosure

File Manager for Google Drive - Integrate Google Drive with WordPress plugin for WordPress = 1.5.3 contains sensitive information exposure caused by improper protection of the getlocalizedata function, letting unauthenticated attackers extract Google OAuth credentials and account email addresses,...

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy Библиотека для быстрой и настраиваемой очистки HTML, поступающего из ненадёжных источников. Другими словами, это API, который помогает убедиться, что клиенты не передают вредоносный код в HTML, который они предоставляют для своего профиля, комментариев и т.д. и который сохраняется на...

CVE-2026-66469

The CVE-2026-66469 entry concerns Unauthenticated Broken Access Control in WordPress plugin Arvow AI SEO Writer (versions

CVE-2026-65575

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

CVE-2026-66843 html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...

CVE-2026-65575

CVE-2026-65575 describes an unauthenticated PHP Object Injection affecting the WordPress theme Accalia up to version 1.5.3 . The vulnerability exists in the Accalia theme and exposes a critical impact (CVSSv3.1: 9.8, HIGH for confidentiality, integrity, and availability) with network attack vecto...

CVE-2026-65575

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

EUVD-2026-53993

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

CVE-2025-9266

CVE-2025-9266 affects the WordPress Accelerate theme up to version 1.5.3. The root cause is a missing capability check in enqueue_scripts(), enabling authenticated users with Subscriber-level access and above to install and activate the ThemeGrill Demo Importer plugin. The impact is unauthorized ...

CLSA-2026-1783904625 TuxCare security update for morgan (1 CVE)

TuxCare rebuilt morgan to address 1 CVE. Fixed in 1.5.3-tuxcare.2...

CLSA-2026-1773620211 TuxCare security update for morgan (3 CVEs)

TuxCare rebuilt morgan to address 3 CVEs. Fixed in 1.5.3-tuxcare.1...

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid...

CVE-2026-14870

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2026-65068

These are all security issues fixed in the apptainer-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64440

Name of the Vulnerable Software and Affected Versions seroval versions prior to 1.5.3 Description A type confusion issue exists in the fromJSON function. This flaw allows attacker-controlled JSON input to cause Promise control nodes to operate on values from the general deserialization reference...

CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-20213 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20213 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

EUVD-2026-43141

The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete all...

SUSE SLES15: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2026:2834-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2834-1 advisory. This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote...