PT-2026-57774

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through = 5.7.8...

CVE-2026-12134

The CVE concerns the WordPress plugin JoomSport – for Sports: Team & League, Football, Hockey & more (up to and including version 5.7.8). It describes an authorization bypass where authenticated users with subscriber-level access and above can create arbitrary season groups or modify group names,...

WordPress JoomSport – for Sports: Team & League, Football, Hockey & more plugin <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification vulnerability

Authenticated Subscriber+ Missing Authorization to Arbitrary Group Creation/Modification vulnerability discovered by ? in WordPress Plugin JoomSport versions = 5.7.8...

CVE-2026-39603

Summary: CVE-2026-39603 is a CSRF vulnerability in the WordPress theme “ThemeGoods Grand Photography grandphotography” affecting Grand Photography versions from n/a up to and including 5.7.8. The issue is a Cross-Site Request Forgery, with CVSS 3.1 base score 5.4 (Medium): network attacker, no pr...

EUVD-2023-12960

Malicious code in bioql PyPI...

EUVD-2024-28410

Malicious code in bioql PyPI...

CVE-2024-31362

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2023-0977

A heap-based overflow vulnerability in Trellix Agent Windows and Linux version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable...

CVE-2023-0975

A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent’s executables before it can be executed. This allows the user to elevate their permissions...

CVE-2024-30491

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2024-30490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

PT-2025-1934 · WordPress · Shopping Cart & Ecommerce Store

Name of the Vulnerable Software and Affected Versions: The Shopping Cart & eCommerce Store plugin for WordPress versions up to, and including, 5.7.8 Description: The issue is related to a missing capability check on the webhook function, allowing unauthenticated attackers to modify order statuses...

OPENSUSE-SU-2024:12521-1 radare2-5.7.8-1.1 on GA media

These are all security issues fixed in the radare2-5.7.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-31362

CVE-2024-31362 is a CSRF vulnerability in ProfileGrid (Metagauss) affecting ProfileGrid versions up to 5.7.8. NVD CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no user privileges, and required user interaction. Public remediation details are not provided in the documents; PatchStack...

WordPress ProfileGrid Plugin <= 5.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software ProfileGrid Type Plugin Vulnerable versions = 5.7.8 Fixed in 5.7.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31362 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 56f2b8a25e3b Credits thiennv Required...

CVE-2024-30491

CVE-2024-30491 affects ProfileGrid (WordPress plugin) up to version 5.7.8. The issue is an SQL Injection flaw in ProfileGrid’s handling of input, enabling unauthenticated access to potentially exposed data (root cause: improper neutralization of input in SQL commands). Wordfence and RH advisories...

CVE-2024-30490

CVE-2024-30490 affects the WordPress ProfileGrid plugin (versions through 5.7.8). The root cause is SQL Injection from insufficient escaping of the user-supplied ‘search’ parameter, leading to arbitrary SQL execution. Public descriptions from connected sources confirm the plugin versions affected...

PT-2024-23416

Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions through 5.7.8 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

[SECURITY] Fedora 31 Update: kernel-5.7.8-100.fc31

The kernel meta package...

Fedora 32 : kernel (2020-3c3d1d7006)

The 5.7.8 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...