CVE-2026-110025

A flaw in slackero phpwcms (versions up to 1.9.49/1.12.3) allows for unrestricted upload via remote exploitation. The vulnerability exists in the Extension Check component, specifically within the file include/inc_front/content/cnt23.article.inc.php. Attackers can trigger this by manipulating the...

CVE-2026-15425: Improper Neutralization of Input During Web Page Generation

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...