EUVD-2026-57873

Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...

EUVD-2026-57872

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

EUVD-2026-57870

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

EUVD-2026-57868

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

EUVD-2026-57869

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...

EUVD-2026-57863

Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...

EUVD-2026-57977

Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...

EUVD-2026-57974

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

EUVD-2026-57965

Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...

EUVD-2026-57964

Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...

EUVD-2026-57957

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

EUVD-2026-57952

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

EUVD-2026-57951

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

EUVD-2026-57950

Subscriber Path Traversal in Do Lasso = 358 versions...

EUVD-2026-57949

Subscriber SQL Injection in Do Lasso = 358 versions...

EUVD-2026-57944

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

EUVD-2026-57934

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

EUVD-2026-57848

Type confusion in PostgreSQL pgrestoreattributestats allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before...

EUVD-2026-57846

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...

EUVD-2026-57847

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein or levenshteinlessequal. Versions before PostgreSQL 18.5, 17.11,...