EUVD-2026-2962

The LEAV Last Email Address Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions = 1.7.1. This is due to missing or incorrect nonce validation on the displaysettingspage function. This makes it possible for unauthenticated attackers to modify plugin settings via ...

EUVD-2026-2975

Not used...

EUVD-2026-2978

The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /aioseo/v1/ai/credits REST route in all versions up to, and including, 4.9.2. This makes it possible for...

EUVD-2026-2990

Delta Electronics DIAView has multiple vulnerabilities...

EUVD-2026-3016

EUVD-2026-3016...

EUVD-2026-3022

EUVD-2026-3022...

EUVD-2026-3029

EUVD-2026-3029...

EUVD-2026-3024

EUVD-2026-3024...

EUVD-2026-3032

EUVD-2026-3032...

EUVD-2026-3018

EUVD-2026-3018...

EUVD-2026-3036

EUVD-2026-3036...

EUVD-2026-3042

EUVD-2026-3042...

EUVD-2026-2878

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

EUVD-2026-2905

In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting XSS allows remote attackers to inject arbitrary web script or HTML into the login page via the tab parameter, for Choice authentication...

EUVD-2026-2824

The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript...

EUVD-2026-2805

The device's passwords have not been adequately salted, making them vulnerable to password extraction attacks...

EUVD-2026-2833

Not used...

EUVD-2026-2429

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...

EUVD-2026-2460

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading...

EUVD-2026-2471

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remotepartitiondisable+0xf7/0x110 RIP: 0010:remotepartitiondisable+0xf7/0x110 RSP:...