The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation

The Opal Estate Pro plugin ≤ 1.7.5 is vulnerable to privilege escalation. Due to missing role restrictions in the onregisteruser function, users can register with any role. This allows unauthenticated attackers to create administrator accounts. id: CVE-2025-6934 info: name: The Opal Estate Pro –...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 y versiones anteriores son vulnerables a un ataque de Redirección Abierta. Pasos para Reproducir 1. Inicia sesión en tu cuenta en https://mainnet.demo.btcpayserver.org/login 2. Luego haz clic en el siguiente enlace...

CVE-2026-28150 WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

CLEANSTART-2026-GS57944 Security fixes in vault-k8s-fips 1.7.5-r1

Package vault-k8s-fips version 1.7.5-r1 fixes 1 vulnerabilities: CVE-2026-39822...

CLSA-2026-1784856428 TuxCare security update for axios (3 CVEs)

TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.5-tuxcare.3...

CLSA-2026-1784769531 TuxCare security update for axios (18 CVEs)

TuxCare rebuilt axios to address 18 CVEs. Fixed in 1.7.5-tuxcare.2...

CLSA-2026-1783904624 TuxCare security update for axios (3 CVEs)

TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.5-tuxcare.1...

CVE-2026-52521

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature...

PT-2026-67517

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature...

CVE-2026-52521

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature...

CVE-2026-52521

A SQL injection vulnerability exists in Z-BlogPHP 1.7.5 . This flaw allows authenticated attackers to execute arbitrary SQL commands by targeting the id parameter within the CommentBat feature. The documents do not provide specific information regarding a patch version, workaround, or evidence of...

SUSE CVE-2026-44427

The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an open redirect attack. An attacker can craft a URL with a protocol-relative path e.g., //evil.com/ tha...

CLEANSTART-2026-KO16921 Security fixes in vault-k8s 1.7.5-r0

Package vault-k8s version 1.7.5-r0 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CVE-2026-57416

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.5...

CVE-2026-57416

The CVE-2026-57416 entry concerns the WordPress SiteGround Email Marketing plugin (versions

CVE-2026-57416 WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.5...

EUVD-2026-43343

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.5...

CVE-2026-57416 WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.5...

PT-2026-57727

Name of the Vulnerable Software and Affected Versions SiteGround Email Marketing versions prior to 1.7.6 Description SiteGround Email Marketing contains a stored cross-site scripting XSS flaw, which occurs when an application includes untrusted data in a web page without proper validation or...

PYSEC-2026-2859 Paste Script has improper group memberships permissions

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...