VulnCheck KEV: CVE-2026-94504

Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...

WP < 7.1.3 - Contributor+ DoS via Block Editor URL Details

Description WordPress does not correctly handle some malformed relative URL paths while resolving them in some cases, which could allow users with Contributor-level access and above to trigger an uncontrolled loop and cause a denial of service through server worker exhaustion...

aprsd (>=2.3.0, <=2.5.9), cacaodocs (>=0.1.3, <=0.1.14) +19 more potentially affected by CVE-2026-102598 via werkzeug (2.0.0)

werkzeug PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aprsd =2.3.0, =0.1.3, =1.9.4rc2, =0.1.1, =1.5.3, =0.12.0, =1.0.0, =2.9.1, =0.28.1, =1.0.0, =0.3.0.0, =4.2.11.10, =4.2.11.11 - quickboard 0.1.1 a...

EUVD-2026-89336

simple-git: VISUAL editor environment variable is omitted from unsafe editor detection...

CVE-2026-105678

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105692

The open-source design and prototyping platform Penpot contains an IDOR vulnerability in its delete-share-link RPC before version 2.18.0 . The application fails to verify if a caller is the creator of a share-link or possesses administrator authority, checking only if the caller can edit the pare...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678

The Ghost Node.js content management system is vulnerable to an improper privilege management issue in versions 0.5.0 through 6.64.0 . Staff users holding the Editor or Super Editor roles can bypass permission restrictions to assign their own roles to users with Author or Contributor roles. This ...

CVE-2026-105678

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

Astra Linux – Vulnerability in GIMP

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow attacks. Through a specially crafted XCF file, the program will allocate a large amount of memory, leading to insufficient memory resources or the program crashing...

dbeaver v26.2.2

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

CVE-2026-105678: Improper Privilege Management

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105220

A flaw was found in Twine. The application fails to properly sanitize markup during story import, allowing embedded malicious scripts to execute within the editor interface. By convincing a user to import a specially crafted story file, an attacker can leverage an internal inter-process...

wordpress-rce-theme-editor-webshell-injection

WordPress RCE - Inyeccion de Webshell via Editor de Temas...

CVE-2026-103293

The MPG WordPress plugin before version 4.2.3 is vulnerable to an arbitrary file read flaw. The root cause is a failure to validate that a dataset source supplied during project import is a remote URL; instead, the system treats it as a local filesystem path and copies the content into a publicly...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

EUVD-2026-91933

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...