2899393 matches found
ROOT-OS-DEBIAN-11-CVE-2020-0478 CVE-2020-0478 in aom - Patched by Root
Root has patched CVE-2020-0478 in the aom package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-56209 CVE-2026-56209 in aom - Patched by Root
Root has patched CVE-2026-56209 in the aom package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-56210 CVE-2026-56210 in aom - Patched by Root
Root has patched CVE-2026-56210 in the aom package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-6879 CVE-2023-6879 in aom - Patched by Root
Root has patched CVE-2023-6879 in the aom package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-74014 WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in IT Residence = 3.2.1 versions...
CVE-2026-74001
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
EUVD-2026-63310
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-66672
The WordPress Flatastic theme (versions ≤ 2.0) is vulnerable to unauthenticated PHP Object Injection, exploitable over the network without credentials. The Patchstack advisory documents the issue; no exploit code or in-the-wild activity is reported. Affected sites should update to a patched theme...
EUVD-2026-63303
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
EUVD-2026-63302
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66614
The WordPress SEO Plugin by Squirrly SEO (versions ≤ 14.2.2) contains an unauthenticated reflected/stored XSS vulnerability exploitable via crafted input, with CVSS 3.1 score 7.1 (HIGH). No exploit code or in-the-wild exploitation details are provided in the documents; patch version is not specif...
CVE-2026-66605 WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...
CVE-2026-66605
Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...
CVE-2026-66597 WordPress wpDataTables plugin <= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...
EUVD-2026-63333
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-66586 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-66583 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
CVE-2026-66582 WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...
CVE-2026-28150
The Golo Framework WordPress plugin (versions before 1.7.5) contains an unauthenticated Local File Inclusion vulnerability. CVSS 3.1 scores it HIGH (8.1) with network attack vector, no privileges or user interaction required. Affected sites should upgrade to version 1.7.5 immediately. No in-the-w...