112923 matches found
CVE-2026-65549 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme AI ANN versions = 1.29.0...
WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agricola versions = 1.21.0...
WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agora versions = 1.9...
WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Advice versions = 1.18.0...
WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Abogado versions = 1.18...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via filename handling in the Gitblame, Hgblame, and Svnblame report generators. An attacker can execute arbitrary shell commands by supplying an untrusted file whose name contains shell metacharacters. When...
EUVD-2026-53825
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...
CVE-2026-19021 SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...
CVE-2026-71488: Inefficient Algorithmic Complexity
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...
CVE-2026-71478: Improper Neutralization of Input During Web Page Generation
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...
CVE-2026-66710: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...
CVE-2026-65581: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65576: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65577: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...
CVE-2026-65574: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-65578: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
CVE-2026-65571: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...