CVE-2026-120534

The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injection in versions up to and including 0.9.2.6 . The flaw exists in the render_field function due to insufficient validation of form configuration parameters before they are merged into field settings a...

CVE-2025-9334

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 1.7.7. This is due to insufficient input validation and restriction on the 'rtafarajax' function. This makes it possible for authenticated...

CVE-2019-4038

IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162...