PT-2026-98484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the xfs module when the xqcheck mod live ino dqtrx function fails to free a newly allocated dqa object following a failed rhashtable insertion. Recommendations At...

WordPress Go Live Update Urls plugin <= 7.0.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Go Live Update Urls versions = 7.0.8...

CVE-2026-93527

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

CVE-2026-93527 WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

EUVD-2026-85460

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

CVE-2026-93527

The Live Copy Paste for Elementor WordPress plugin, versions

CVE-2026-93527 WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

SUSE-SU-2026:4315-1 Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on...

CVE-2026-96758

orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. Attackers can inject $... expressions into OpenAPI schema property names that execute as live interpolation when the...

DRUPAL-CONTRIB-2026-184

This module provides integration of the tawk.to live chat for Drupal sites. The module does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery CSRF vulnerability...

WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Live Copy Paste for Elementor versions = 1.5.10...

PT-2026-97678

This module provides integration of the tawk.to live chat for Drupal sites. The module does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery CSRF vulnerability...

PT-2026-97445

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

CVE-2026-93527: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...

MAL-2026-16526 Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

CVE-2026-16778

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslcmoduledownloadsoutput' Shortcode Content in all versions up to, and including, 2.1.21 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-16778

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.1.21 . The flaw exists in the 'dslc_module_downloads_output' shortcode content due to insufficient input sanitization and output escapin...

CVE-2026-16778 Live Composer <= 2.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslcmoduledownloadsoutput' Shortcode Content in all versions up to, and including, 2.1.21 due to insufficient input sanitization and output escaping. This makes it possible fo...

EUVD-2026-84298

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslcmoduledownloadsoutput' Shortcode Content in all versions up to, and including, 2.1.21 due to insufficient input sanitization and output escaping. This makes it possible fo...