CVE-2026-107657

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: reports-server, nemo-gym, cert-manager, tempo-fips, falco-no-driver, kube-conformance, kubernetes, commercial-gitlab-workhorse-ee-fips, commercial-chainloop-cli, cosign-fips, terraform, kyverno, opentelemetry-collector-k8s, frankenphp-8.3, spire-server, karpenter-fip...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, argo-cd, flux-source-controller, argo-workflows, atlantis, continuity, kubernetes, mesosphere-vsphere-csi, k6, prometheus-adapter, rclone, falco-no-driver, cloudprober, kube-arangodb, kyverno-policy-reporter-ui, k8s-device-plugin,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: falco-no-driver, loki, k8s-device-plugin, cert-manager, ingress-nginx-controller, karpenter, kubernetes, external-dns, aactl, spire-server, flux...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, argo-cd, flux-source-controller, argo-workflows, atlantis, continuity, kubernetes, mesosphere-vsphere-csi, k6, prometheus-adapter, rclone, falco-no-driver, cloudprober, kube-arangodb, kyverno-policy-reporter-ui, k8s-device-plugin,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: falco-no-driver, loki, k8s-device-plugin, cert-manager, ingress-nginx-controller, karpenter, kubernetes, external-dns, aactl, spire-server, flux...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: falco-no-driver, loki, k8s-device-plugin, cert-manager, ingress-nginx-controller, karpenter, kubernetes, external-dns, aactl, spire-server, flux...

nowafpls

nowafpls Indice nowafpls Limitazioni documentate dei WAF Installazione di nowafpls Uso di nowafpls Autori Licenza nowafpls La maggior parte dei firewall per applicazioni web WAF ha limitazioni sulla quantità di dati che può elaborare quando viene inviato un corpo della richiesta. Ciò significa ch...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.123 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-100178

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-104728

The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

CVE-2026-100178

The WPAdverts – Classifieds Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.3.4 . The root cause is insufficient input sanitization and output escaping specifically involving the 'adverts_location' parameter. This flaw allows unauthent...

EUVD-2026-96282

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-96662 Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameter

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress is vulnerable to unauthenticated SQL Injection in all versions up to and including 5.7.2 . The root cause is insufficient escaping on the booking[service_id] parameter combined with a lack of sufficient preparation o...

EUVD-2026-96276

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings plugin for WordPress (versions up to and including 1.4.123 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the 'stm_f_s' parameter. This flaw allows authenticat...

EUVD-2026-96292

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.123 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

oregami

Oregami """ A cosa serve questo registro? Hmm.. Lo rinominerò semplicemente in veryuniquename, farò una ricerca testuale e troverò tutti i riferimenti! Ok.. Aspettando che la ricerca finisca.. da un momento all'altro.. Fatto! Ora devo solo capire quale dei risultati della ricerca sia rilevante pe...