EUVD-2026-64834

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

CVE-2026-78269

CVE-2026-78269 is a Server Side Request Forgery (SSRF) vulnerability in the WordPress Shared Files plugin (versions

EUVD-2026-64832

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

CVE-2026-66623 WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

EUVD-2026-64831

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

EUVD-2026-64829

Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...

CVE-2026-78291

CVE-2026-78291 is an unauthenticated Broken Access Control vulnerability in the WordPress plugin RepairBuddy (also referenced as Computer Repair Shop ), affecting versions 4.1223 and earlier . Discovered by Supakiad S. (m3ez) via Patchstack, the flaw allows a remote, unauthenticated attacker to m...

WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Booking Hub versions = 1.3.0...

CVE-2026-78244

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability

WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin = 1.4 - Local File Inclusion vulnerability discovered by Jamaal ahmed in WordPress Plugin MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator versions = 1.4...

WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin Boost versions = 2.0.4...

WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by luc in WordPress Plugin Boost versions = 2.0.4...

CVE-2026-78244 itsourcecode Real Estate Management System search.php sql injection

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fixed a credential leak in nfs4discovertrunking...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: A use-after-free bug has been fixed in open. If someone cancels the open RPC call, then we must not attempt to free either the open slot or the layoutget operation arguments, as they are likely still in use by the hun...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: NFSv4: Fixed an error in pnfsmarkrequestcommit, when performing ODIRECT operations. Fixed an error-prone condition in pnfsmarkrequestcommit, when adding a set of write operations to the commit list in order to reschedule them...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-pf: Fixed the use of GFPKERNEL in atomic contexts for rt. The commit 4af1b64f80fb “octeontx2-pf: Fixed the lmtst ID used in aurafree” uses get/putcpu to protect the usage of percpu pointers in the -aurafreeptr...

WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sungbyeongchan in WordPress Plugin Magazine Blocks versions = 1.8.6...

WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Booking and Rental Manager versions = 2.7.5...

CVE-2026-78317

A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...