external_expat_AOSP10_r33_CVE-2022-25235

Expat, Versión 2.2.6 Esto es Expat, una biblioteca en C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujos. Esto significa que registras manejadores con el analizador antes de iniciar el análisis. Estos manejadores son llamados cuando el analizador...

external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827

Expat, Versión 2.2.6 Esto es Expat, una biblioteca C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujo. Esto significa que registras manejadores con el analizador antes de comenzar el análisis. Estos manejadores se llaman cuando el analizador descub...

CLSA-2026-1789477857 TuxCare security update for 3 packages (1 CVE)

TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 2.2.6-tuxcare.1...

CVE-2026-19336 Pimzino spec-workflow-mcp approvals.ts ApprovalStorage.createApproval path traversal

A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a manipulation of the argument categoryName results in path traversal. The attack is only possible with local access...

CVE-2026-65552 WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65552

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

EUVD-2026-53980

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65510

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65516

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65516

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65510 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65510 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65499

CVE-2026-65499 affects the WordPress plugin PeproDev Ultimate Invoice, version

CVE-2026-65499

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65499 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-27372 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-27372

The CVE concerns WordPress plugin PeproDev Ultimate Invoice (admin URL not needed) for affected versions

EUVD-2026-48153

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by longnv719 in WordPress Plugin PeproDev Ultimate Invoice versions = 2.2.6...

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin PeproDev Ultimate Invoice versions = 2.2.6...