CVE-2026-81051

Dell ThinOS 10, versions prior to 260510.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

EUVD-2026-75582

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...

CVE-2026-84816

Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...

CVE-2026-81805

Unauthenticated Privilege Escalation in SiteSkite = 2.1.5 versions...

CVE-2026-81803

Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...

CVE-2026-81795

Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...

CVE-2026-81787

Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...

CVE-2026-81782

Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...

CVE-2026-66674

Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...

CVE-2026-66632

Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...

EUVD-2026-42937

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows...

EUVD-2026-75535

Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...

CVE-2026-84816 WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...

EUVD-2026-75531

Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...

EUVD-2026-75529

Unauthenticated SQL Injection in Verified Reviews Avis Vérifiés = 2.4.6 versions...

EUVD-2026-75528

Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce = 4.6.4 versions...

EUVD-2026-75526

Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...

CVE-2026-81796

CVE-2026-81796 is an unauthenticated Broken Authentication vulnerability in the WordPress WP Travel plugin , affecting versions

CVE-2026-81791

The WordPress EventON plugin , versions

CVE-2026-81787

CVE-2026-81787 affects the WordPress plugin IMPress for IDX Broker (versions ≤ 3.3.0 ). The vulnerability is an unauthenticated Broken Authentication flaw, meaning an attacker with network access and no prior credentials can exploit it. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:...