PT-2026-74635

TuxCare rebuilt tinymce to address 4 CVEs. Fixed in 5.10.9-tuxcare.1...

PT-2026-74634

TuxCare rebuilt tinymce to address 13 CVEs. Fixed in 4.9.11-tuxcare.1...

PT-2026-74338

TuxCare rebuilt tinymce to address 1 CVE. Fixed in 6.8.6-tuxcare.1...

PT-2026-75429

TuxCare rebuilt tinymce to address 3 CVEs. Fixed in 5.10.9-tuxcare.2...

PT-2026-75384

TuxCare rebuilt tinymce to address 3 CVEs. Fixed in 4.9.11-tuxcare.2...

CVE-2026-65535

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

CVE-2026-65535 WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

CVE-2026-65535

CVE-2026-65535 concerns the WordPress TinyMCE Templates plugin, specifically versions

EUVD-2026-48136

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

CVE-2026-65535

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

CVE-2026-65535 WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin TinyMCE Templates versions = 4.8.1...

CVE-2026-65535: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

PT-2026-63946

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

Exploit for CVE-2026-38526

KrayinCRM-RCE-Exploit-CVE-2026-38526 CVE-2026-38526 ex...

Exploit for CVE-2026-38526

CVE-2026-38526-PoC-htb-nexus-...

Exploit for CVE-2026-38526

CVE-2026-38526-PoC-htb-nexus-...

Exploit for CVE-2026-38526

CVE-2026-38526 - Krayin CRM PHP Upload RCE Automated exploit...

PYSEC-2026-1302 TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

Impact A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. Patches This vulnerability has been patched in TinyMCE 7.2.0,...

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

ImpactA cross-site scripting XSS vulnerability was discovered in TinyMCE’s content extraction code. When using the noneditableregexp option, specially crafted HTML attributes containing malicious code were able to be executed when content was extracted from the editor. PatchesThis vulnerability h...