EUVD-2026-48241

SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View database cell rendering. A Template column value is rendered as HTML via text/template without auto-escaping, and EscapeHTML is only applied when HasUnclosedHtmlTag returns true; because balanced...

EUVD-2026-48227

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

CVE-2026-59545 WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

CVE-2026-59545

The vulnerability CVE-2026-59545 affects the WordPress plugin miniOrange Discord Integration (versions

EUVD-2026-48198

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

CVE-2026-59545 WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

CVE-2026-14282 GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

PT-2026-63856

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

CVE-2026-59545: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

Oracle Primavera Unifier (July 2026 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Integration Lodash. Supported versions that are...

CVE-2026-64802: Improper Control of Generation of Code

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

PT-2026-63972

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description A cross-site scripting issue exists in the siyuan:// protocol handler. When a link using the format siyuan://plugins/ references a plugin that is not installed, the application opens a custom tab and...

PT-2026-63956

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible within the Go Modules integration before the user grants project trust. Recommendations Update JetBrains GoLand to version 2026.2...

EUVD-2026-47768

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request...

WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Payment Gateway for PayPal on WooCommerce versions = 9.1.4...

What’s New in Rapid7 Products and Services: Q2 2026 in Review

If Q1 set the pace for Rapid7's tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation across Rapid7’s portfolio. Each release was designed with a clear goal in mind: helping security teams reduce complexity whi...

WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by buitu in WordPress Plugin miniOrange Discord Integration versions = 2.2.4...

EUVD-2026-47522

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...

EUVD-2026-47518

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47521

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...