CVE-2026-114431: Unknown Enable Media Replace: The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload…

The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload pipeline, so the upload prefilter that SVG-sanitizer Enable Media Replace WordPress plugin before 4.2.3 rely on never runs, allowing an authenticated user with upload access to...

CVE-2026-106000: Unknown Booking Package: The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed before saving a booking on…

The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed before saving a booking on calendars configured to require online payment, allowing unauthenticated users to create confirmed bookings without paying...

CVE-2026-122118: Yealink: In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK…

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic...

CVE-2026-113373: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML…

Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider...

CVE-2026-105296: Akeeba Ltd.: Multiple Akeeba products lack the anti-CSRF check on some actions

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed...

CVE-2026-118625: MLflow: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the getendpoints...

CVE-2026-120638: URL Redirection to Untrusted Site ('Open Redirect')

CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect. redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example,...

CVE-2026-121598: TOTOLINK A950RG: A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-115498: wingerspeed Slim Jetpack: The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g<PAGE_ID>-website (Website…

The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g -website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-119477: Jacob N. Breetvelt WP Photo Album Plus: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003...

CVE-2026-106649: Unknown Kali Forms — Contact Form & Drag-and-Drop Builder: The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with…

The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with author-level access and above from storing arbitrary JavaScript in a form button configuration, which is later output into a JavaScript execution context and runs in the browser sessio...

CVE-2026-122134: mistralai mistral-vibe: Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by…

Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens a crafted repository, ProjectContextProvider.fetchgitstatus runs git status at startup,...

CVE-2026-113369: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account…

Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository a user account that holds the edit permission on that repository to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the...

CVE-2026-115262: Unknown: The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its…

The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database charset and collation rewrite to schema statements during a restore, so a value a Subscriber stores in their own profile can break out of its string literal and inject SQL int...

CVE-2026-122136: romkatv powerlevel10k: Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local…

Powerlevel10k before 1.20.19 contains a symlink following vulnerability in p9kdumpinstantprompt that allows local attackers to overwrite victim-writable files via a predictable temporary path. Attackers can pre-plant symlinks at p10k-instant-prompt-output- - in TMPDIR, guessing the victim's shell...

CVE-2026-65555: Uncanny Owl Uncanny Toolkit for LearnDash: Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit…

Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2...

CVE-2026-122014: NPC-Worldwide npcpy: A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27

A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function loadsftmodel of the file npcpy/ft/sft.py. The manipulation of the argument basemodelnameorpath leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

CVE-2026-120422: Sogou Sogou Input Method: Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe…

Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The application retrieves configuration data over unencrypted HTTP connections, allowing an attacker capable of manipulating network traffic to replace legitimate server...

CVE-2026-120644: Improper Encoding or Escaping of Output

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

CVE-2026-102280: sandboxie-plus Sandboxie: Sandboxie-Plus is an open source sandbox-based isolation software for Windows

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGIDFILESETATTRIBUTES or MSGIDFILESETSHORTNAME to SbieSvc and cause the SYSTEM service to open and modify an existing file outside the sandbox. The direct primiti...