Wordfence Intelligence Weekly WordPress Vulnerability Report (June 22, 2026 to June 28, 2026)

Last week, there were 201 vulnerabilities disclosed in 171 WordPress Plugins and 9 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 112 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

CVE-2026-12246

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-111 (ALASNITRO-ENCLAVES-2026-111)

The version of containerd installed on the remote host is prior to 2.1.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-111 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-256...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebRTC in Google Chrome before version 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Firefox

Under certain circumstances, the offline cache of a ServiceWorker may have been leaked to the file system when using private browsing mode. This vulnerability affects Firefox versions earlier than 111...

Astra Linux – Vulnerability in Firefox

When following a redirect to a publicly accessible web extension file, the URL may have been translated into the actual local path, potentially exposing sensitive information. This vulnerability affects Firefox versions earlier than 111...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 110. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 111...

Astra Linux – Vulnerability in Chromium

Memory access out of bounds in WebHID in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption through a malicious HID device. Chromium security severity: High...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-111-02)

The version of mozilla-firefox installed on the remote host is prior to 140.10.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-111-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2026-111-03)

The version of mozilla-thunderbird installed on the remote host is prior to 140.10.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-111-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

CVE-2026-1354

creationtimestamp| type| source ---|---|--- 2026-04-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-06 2026-04-21 23:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk23qvraqb2r...

CVE-2026-2635

creationtimestamp| type| source ---|---|--- 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-111/ 2026-02-21 00:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdcx3zcw32k 2026-03-01 00:01:22+00:00| seen|...

MiracleLinux 7 : rpcbind-0.2.0-38.0.1.el7.AXS7 (AXSA:2017-1656:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-1656:01 advisory. The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a...

MiracleLinux 7 : libtirpc-0.2.4-0.8.0.1.el7.AXS7 (AXSA:2017-1681:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-1681:01 advisory. This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network...

EUVD-1999-0189

Malware in sbrugna...

EUVD-2012-1826

Malware in sbrugna...

EUVD-2022-50322

Malicious code in bioql PyPI...

EUVD-2025-27559

Malicious code in bioql PyPI...

CVE-2025-9994

The Amp’ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing unauthorized access to anyone with network access...

Amp'ed RF BT-AP 111 Bluetooth access point lacks an authentication mechanism

Overview The Amp’ed RF BT-AP 111 Bluetooth Access Point exposes an HTTP-based administrative interface without authentication controls. This allows an unauthenticated remote attacker to gain full administrative access to the device. Description The Amp’ed RF BT-AP 111 is a Bluetooth-to-Ethernet...