EUVD-2026-81600

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package...

EUVD-2026-81607

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes...

EUVD-2026-81606

vm2: NodeVM node:-prefixed negative builtin deny bypass exposes childprocess...

EUVD-2026-81598

vm2: vm.freeze/vm.readonly bypass via accessor descriptor...

EUVD-2026-90846

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

EUVD-2026-90807

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...

EUVD-2026-90798

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...

EUVD-2026-81594

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted...

CVE-2026-103347

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

Exploit for CVE-2026-90907

CVE-2026-90907 — Joomla! CMS Unauthorized User Account Creatio...

NPM: devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion

NPM: devalue: Malformed null-prototype object keys bypass proto rejection via property-key coercion vulnerability discovered by ? in WordPress Npm devalue versions = 5.9.2...

CVE-2026-103347

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

CVE-2026-103347 WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

CVE-2026-62061

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-102382

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...

CVE-2026-62061

The WordPress ProfileGrid plugin (versions

CVE-2026-62061 WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-102382 WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...

CVE-2026-102382

The Majestic Support WordPress plugin (versions

CVE-2026-102382 WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...