CVE-2026-26211 Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, and the text of an h4 element in the pa...

EUVD-2026-65620

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, and the text of an h4 element in the pa...

CVE-2026-26211

Ekushey Project Manager CRM 5.0 is affected by a stored XSS vulnerability in the administrator-configured system name field. The value is written to the login page without output encoding, and its occurrence in an h4 element is parsed as markup, causing any injected HTML event handlers to execute...

GO-2026-6250 Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy...

WordPress Subscriptions for WooCommerce plugin < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation vulnerability

Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Subscriptions for WooCommerce versions 2.0.1...

WordPress Fluent Booking plugin < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export vulnerability

Calendar Manager+ Sensitive Information Disclosure via Attendee Export vulnerability discovered by Md Amin Ullah Sheikh in WordPress Plugin Fluent Booking versions 2.1.2...

WordPress Frontend File Manager Plugin plugin <= 23.6 - Author+ Arbitrary Post Deletion vulnerability

Author+ Arbitrary Post Deletion vulnerability discovered by Tiago Ferreira in WordPress Plugin Frontend File Manager versions = 23.6...

EUVD-2026-65462

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9.4. This is due to the rumimporter function being registered on the WordPress core importstart action hook with ...

CVE-2026-75971 ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9.4. This is due to the rumimporter function being registered on the WordPress core importstart action hook with ...

CVE-2026-75971

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin is vulnerable to privilege escalation in versions up to and including 4.9.4 . The root cause is the rum_importer() function registered on the import_start action hook without a plugin-owned capability check or allowlist filtering...

Malicious code in mkb-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bc086d2159cad3d4eb02427ea2daa5f66ad57c39cbbaad5a8bb367071f4fb7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14490 Malicious code in mkb-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bc086d2159cad3d4eb02427ea2daa5f66ad57c39cbbaad5a8bb367071f4fb7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

WordPress Fluent Forms plugin < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability

Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin FluentForm versions 6.2.5...

WordPress HUSKY plugin < 1.4.1 - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion vulnerability

WordPress HUSKY plugin 1.4.1 - Products Filter Professional for WooCommerce 1.4.1 - Shop Manager+ Local File Inclusion vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin HUSKY versions 1.4.1...

WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Booking and Rental Manager versions = 2.7.5...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-66109

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...