CVE-2026-78074

CVE-2026-78074 affects the free versions of various miniOrange Joomla extensions. A missing authentication check allows unauthenticated actors to deinstall arbitrary installed extensions , resulting in high integrity and availability impact on the vulnerable system. The CVSS 4.0 score is 8.8 (HIG...

PT-2026-53294

Name of the Vulnerable Software and Affected Versions Link Whisper Free versions prior to 0.9.5 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Link Whisper Free ...

CVE-2026-39441

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free = 5.3 versions...

PT-2026-49371

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free = 5.3 versions...

CVE-2025-49562

Animate versions 23.0.12, 24.0.9 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-23853 WordPress NoFollow Free plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in michelem NoFollow Free nofollow-free allows Reflected XSS.This issue affects NoFollow Free: from n/a through = 1.6.3...

i-librarian 跨站脚本漏洞

i-librarian is an online service by Martin Kucej Personal Developer that will organize your PDF files and office document sets. A cross-site scripting vulnerability exists in i-librarian-free versions prior to 5.10.4. An attacker could exploit this vulnerability to perform cross-site scripting...