CVE-2026-35228

Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects component: helper tool. The supported versions that is affected is 1.0.1-1.0.156. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle MCP Server...

CVE-2026-4125

The WPMK Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to and including 1.0.1. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Specifically, in the...

PT-2026-21163

Name of the Vulnerable Software and Affected Versions Themesflat Elementor versions through 1.0.1 Description A flaw exists in Themesflat Elementor that allows for object injection due to deserialization of untrusted data. This issue could potentially allow for malicious code execution...

EUVD-2025-30626

Malicious code in bioql PyPI...

WordPress Sync Feedly plugin <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger vulnerability

Cross-Site Request Forgery to Sync Trigger vulnerability discovered by Nabil Irawan in WordPress Plugin Sync Feedly versions = 1.0.1...

WordPress Add User Meta plugin <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Add User Meta versions = 1.0.1...

CVE-2024-56004

Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through = 1.0.1...

PT-2024-35006 · Unknown · Wp Automatic Widget

Name of the Vulnerable Software and Affected Versions: wp automatic widget versions n/a through 1.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS. Recommendations: For versions...

PT-2024-34258 · Unknown · Bstone Demo Importer

Name of the Vulnerable Software and Affected Versions: Bstone Demo Importer versions 1.0.1 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows for Privilege Escalation. Recommendations: For Bstone Demo Importer versions 1.0.1 and earlier,...

PT-2024-25396 · WordPress · Mahesh Vora Wp Page Post Widget Clone

Name of the Vulnerable Software and Affected Versions: Mahesh Vora WP Page Post Widget Clone versions 1.0.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Mahesh Vora WP Page Post Widget Clone. Recommendations: For Mahesh Vora WP Page Post Widget Clone...

CVE-2023-52181

Deserialization of Untrusted Data vulnerability in Presslabs Theme per user.This issue affects Theme per user: from n/a through 1.0.1...

ai.grakn:grakn (>=0.13.0 <=0.14.0), ai.grakn:grakn-client (>=0.13.0 <=0.14.0) +4251 more potentially affected by CVE-2023-34454 via org.xerial.snappy:snappy-java (>=1.0.1-rc3 <=1.1.10.0)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.7.0, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.7.0, =0.13.0, =0.13.0, =0.6.1, =0.17.0, =0.13.0, =0.14.0 and more Source cves: CVE-2023-34454 Source advisory: OSV:GHSA-FJPJ-2G6W-X25R...

2broke2wait (=0.1.0), 2ch-fetcher-with-proxy (>=1.0.0 <=1.0.1) +4006 more potentially affected by CVE-2022-25893 via vm2 (>=1.0.1 <=3.9.1)

vm2 NPM version =1.0.1, =1.0.0, =15.0.0, =5.1.3, =1.0.2, =1.0.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.48, =0.12.5-20190619040852, =0.2.46, =0.23.0-alpha.1 and more Source cves: CVE-2022-25893 Source advisory: OSV:GHSA-4W2J-2RG4-5MJW...

adoc (>=0.1.0 <=0.1.5), alembic-viz (=0.1.0) +128 more potentially affected by CVE-2022-40023 via mako (>=1.0.1 <=1.2.1)

mako PYPI version =1.0.1, =0.1.0, =0.1.0, =1.0.4, =0.0.1, =0.1.2, =0.3.24, =0.1.0, =0.1.1, =2016.3.17, =1.3.1, =1.0.2, =1.4.0 - cmc-py-wrapper =0.1.0 - coil =1.2.1 and more Source cves: CVE-2022-40023 Source advisory: OSV:PYSEC-2022-260...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-23591 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-23591 Source advisory: OSV:GHSA-247X-2F9F-5WP7...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-23572 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-23572 Source advisory: OSV:GHSA-RWW7-2GPW-FV6J...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4817 more potentially affected by CVE-2021-41227 via tensorflow (>=1.0.1 <=2.4.3)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2021-41227 Source advisory: OSV:GHSA-J8C8-67VP-6MX7...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4761 more potentially affected by CVE-2021-37650 via tensorflow (>=1.0.1 <=2.3.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-37650 Source advisory: OSV:GHSA-F8H4-7RGH-Q2GM...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4761 more potentially affected by CVE-2021-37657 via tensorflow (>=1.0.1 <=2.3.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-37657 Source advisory: OSV:GHSA-5XWC-MRHX-5G3M...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4761 more potentially affected by CVE-2021-37668 via tensorflow (>=1.0.1 <=2.3.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-37668 Source advisory: OSV:GHSA-2WMV-37VQ-52G5...