CVE-2026-66584

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66584

An unauthenticated Cross-Site Scripting (XSS) vulnerability affects the WordPress plugin 12 Step Meeting List in versions 3.19.16 and earlier , as reported by researcher V1T via PatchStack. The CVSS 3.1 base score is 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a ne...

EUVD-2026-64830

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66584 WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66584 WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66584: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

PT-2026-80805

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin 12 Step Meeting List versions = 3.19.16...

CVE-2026-53614

A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...

GO-2026-6117 Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend

Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend...

ANT-2026-0JJXMV3G · supabase/auth · privilege-escalation

privilege-escalation medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0JJXMV3G: Passkey registration requires no step-up authentication The POST...

CVE-2026-75091: Improper Neutralization of Input During Web Page Generation

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2026-80362

Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-fips, step-issuer, step, caddy-fips, step-ca-fips, step-issuer-fips, step-ca, caddy...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: rclone-fips, step-ca-fips, dapr, step-fips, step, rclone, tkn-fips, buf, tkn, telegraf, gitness, caddy-fips, sftpgo, kyverno-policy-reporter-ui-fips, karma, step-ca, dapr-fips, kyverno-policy-reporter-ui, cloudflared, caddy, step-issuer, step-issuer-fips, gogatekeepe...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-fips, step-issuer, step, caddy-fips, step-ca-fips, step-issuer-fips, step-ca, caddy...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy-fips, frankenphp-8.5, step-ca-fips, step-issuer-fips, frankenphp-8.4, frankenphp-8.3, caddy, frankenphp-8.2...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, mariadb-operator-fips, cert-manager-cmctl, opentelemetry-operator, percona-xtradb-cluster-operator, cert-manager-google-cas-issuer, cert-manager-istio-csr, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, gitlab-operator,...