CVE-2026-22691

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:01+00:00| seen| https://gist.github.com/alon710/e674a091497c87216f8bbb1417187e78 2026-01-24 21:26:10+00:00| seen| https://gist.github.com/alon710/e5a93d732ac6484870ad550d8066ea64 2026-01-24 22:41:24+00:00| seen|...

CVE-2026-22691 vulnerabilities

Vulnerabilities for packages: open-webui...

DEBIAN-CVE-2026-22691

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-referen...

CVE-2026-22691

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-referen...

Linux Distros Unpatched Vulnerability : CVE-2026-22691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses...

CVE-2025-22691

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...

CVE-2025-22691

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...

CVE-2025-22691

creationtimestamp| type| source ---|---|--- 2025-02-03 15:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113940590264088785 2025-02-03 15:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtkpu65d2j...

CVE-2025-22691

CVE-2025-22691 is a SQL injection vulnerability in the WordPress plugin WP Travel . The issue arises from improper neutralization of input in SQL commands, affecting versions up to and including 10.1.0 (and referenced advisories extend to 10.1.3). The CVSS-derived base impact in the initial recor...

CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...

CVE-2023-22691

CVE-2023-22691 affects the WordPress plugin Category Specific RSS feed Subscription (Tips and Tricks HQ) &lt;= v2.1. A CSRF vulnerability exists in settings/credential-related actions due to missing CSRF checks, enabling unauthenticated attackers to induce actions on behalf of admins. Patch sourc...

CVE-2023-22691 WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

CVE-2023-22691 WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Category Specific RSS feed Subscription Type Plugin Vulnerable versions = v2.1 Fixed in v2.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22691 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID aed3a951c25f Credi...

CVE-2021-22691

...

CVE-2021-22691

CVE-2021-22691 entry is rejected/not used and does not represent an active vulnerability.

CVE-2022-22691

creationtimestamp| type| source ---|---|--- 2022-01-18 20:25:08+00:00| seen| https://t.me/cibsecurity/35732...

CVE-2022-22691

The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset...

CVE-2022-22691

CVE-2022-22691 relates to Umbraco’s password reset flow, where the application builds the reset URL using the hostname from the request host header. This can allow an attacker to tamper the reset URL so it points to the attacker’s server, potentially exposing the password reset token when the use...