CVE-2026-103358 WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

EUVD-2026-100987

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

CVE-2026-104800

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution (RCE) in all versions up to and including 1.0 . The flaw exists in the standalone admin.php endpoint, which lacks authentication, capability checks, and nonce verification. Specifically, the plugin fails to sanitize POST par...

CVE-2026-104800 AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width and height' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with...

CVE-2026-110445

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

CVE-2026-110444

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CVE-2026-110445 TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

CVE-2026-110445

TeamPlus Messenger , developed by Teamplus Technology, contains a Code Injection vulnerability (CWE-94). Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. If a user confirms a Windows security warning, the attacker c...

EUVD-2026-100783

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

CVE-2026-110444

TeamPlus Messenger , developed by Teamplus Technology, contains a Code Injection vulnerability (CWE-94). Unauthenticated remote attackers can exploit this by tricking users into opening a crafted link , which allows for the injection and execution of arbitrary JavaScript . If the user interacts w...

EUVD-2026-100782

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CVE-2026-110444 TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CVE-2026-108151: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9...

CVE-2026-103081: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0...

CVE-2026-103358: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

CVE-2026-110444: Improper Control of Generation of Code

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

Palo Alto Networks PAN-OS Code Injection Vulnerability

Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall...

PT-2026-113954

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

PT-2026-113605

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-102870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network. CVE-2026-102870 Note tha...