WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.5.8 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin Groundhogg versions = 4.5.8...

WordPress Houzez Property Feed plugin <= 2.5.46 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin Houzez Property Feed versions = 2.5.46...

MAL-2026-6493 Malicious code in prism-silq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb3e8b0ded57991e21f137aac7c905348a83f6be7914c4da619c18d2acd280c The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...

Malicious code in prism-silq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb3e8b0ded57991e21f137aac7c905348a83f6be7914c4da619c18d2acd280c The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...

WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.5.4 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin Groundhogg versions = 4.5.4...

WordPress Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin <= 2.22.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by PRISM in WordPress Plugin Tourfic versions = 2.22.7...

CVE-2026-8875

The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...

CVE-2026-8875

Affected software : WordPress plugin Easy Prism Syntax Highlighter (versions ≤ 1.0.2). Vulnerability : Stored Cross-Site Scripting via the plugin’s 'code' and 'c' shortcode attributes due to insufficient input sanitization and output escaping in shortcode(), which concatenates the first positiona...

CVE-2026-8875 Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...

EUVD-2026-32083

The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...

CVE-2026-8875

The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...

WordPress plugin Easy Prism Syntax Highlighter 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: tileserver-gl, sqlpad, opensearch-dashboards, kubeflow-centraldashboard, thingsboard, kubeflow-pipelines, prism, code-server, langfuse, argo-workflows, json-server, renovate, saf...

CVE-2026-8723 vulnerabilities

Vulnerabilities for packages: tileserver-gl, sqlpad, opensearch-dashboards, kubeflow-centraldashboard, thingsboard, kubeflow-pipelines, prism, code-server, langfuse, argo-workflows, json-server, renovate, saf...

CVE-2026-8723 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, saf, tileserver-gl, argo-workflows, thingsboard-fips, opensearch-dashboards-fips, unleash, code-server, langfuse, wazuh-dashboard-fips, kibana, kubeflow-pipelines, thingsboard, pelias-api, opensearch-dashboards,...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, saf, tileserver-gl, argo-workflows, thingsboard-fips, opensearch-dashboards-fips, unleash, code-server, langfuse, wazuh-dashboard-fips, kibana, kubeflow-pipelines, thingsboard, pelias-api, opensearch-dashboards,...

WordPress Easy Prism Syntax Highlighter plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Easy Prism Syntax Highlighter versions = 1.0.2...

GHSA-Q3J6-QGPJ-74H6 vulnerabilities

Vulnerabilities for packages: tileserver-gl, opensearch-dashboards, prism, serve, langfuse, argo-workflows, vitess, saf...

CVE-2026-6321 vulnerabilities

Vulnerabilities for packages: tileserver-gl, opensearch-dashboards, prism, serve, langfuse, argo-workflows, vitess, saf...

GHSA-Q3J6-QGPJ-74H6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, saf, tileserver-gl, argo-workflows, opensearch-dashboards-fips, keep, langfuse, wazuh-dashboard-fips, keep-fips, kibana, vitess, opensearch-dashboards, tileserver-gl-fips, serve, wazuh-dashboard, prism, gitlab-rails-ce-fips, arangodb, langfuse-fips...