EUVD-2026-112996

Shop manager PHP Object Injection in FV Flowplayer Video Player = 8.3.4 versions...

CVE-2026-118075 WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability

Contributor PHP Object Injection in WP Media folders = 1.1.10 versions...

EUVD-2026-112991

Shop manager PHP Object Injection in Finale Lite = 2.21.0 versions...

EUVD-2026-112989

Shop manager PHP Object Injection in myPOS Checkout = 1.4.5 versions...

CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

CVE-2026-116867

The WordPress Dynamic QR Code – generator plugin versions

CVE-2026-116865

The Zippy WordPress plugin versions

CVE-2026-116865 WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability

Editor PHP Object Injection in Zippy = 1.7.0 versions...

CVE-2026-116864 WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability

Author PHP Object Injection in WPCargo Track & Trace = 8.0.5 versions...

CVE-2026-116864

The WPCargo Track & Trace WordPress plugin versions

EUVD-2026-112959

Unauthenticated PHP Object Injection in GEO my WordPress = 4.5.5.3 versions...

CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AjaxLoadMore Cache = 3.1.1 versions...

CVE-2026-61991

The AjaxLoadMore Cache WordPress plugin versions

EUVD-2026-112947

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

EUVD-2026-113160

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network...

CVE-2026-96192

A Use after free vulnerability in Microsoft Edge for iOS (Chromium-based) allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. Whi...

EUVD-2026-113159

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...

CVE-2026-18894 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...

CVE-2026-18894

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to a code injection flaw (CWE-94 ). A remote attacker can trigger pre-existing stored Python component code within a public workflow, executing it under the flow owner's runtime context. This bypasses the trust boundary intended to res...

CVE-2026-101288 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...