3128 matches found
CVE-2026-66447
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-28178
Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66447
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-7529
The CVE describes a vulnerability in the wiseCampaign – WooCommerce Conversions Made Easy WordPress plugin (versions '__return_true'. This allows unauthenticated attackers to read and modify plugin settings and assets (banner, stockbar, core settings, background uploads) without nonce or capabil...
CVE-2026-16993 DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web server that does not honor .htaccess such as nginx an unauthenticated visitor...
CVE-2026-68078
Apache Qpid Broker-J versions through 10.0.1 are vulnerable to a resource exhaustion issue in the AMQP 1.0 incoming delivery handling within the AbstractReceivingLinkEndpoint component of broker-plugins/amqp-1-0-protocol. An authenticated attacker can cause a denial of service by sending a delive...
CVE-2026-68077
Apache Qpid Broker-J (versions through 10.0.1 ) is vulnerable to a Denial of Service (DoS) condition. An authenticated attacker can craft an AMQP 1.0 disposition frame containing large or illegal ranges. The underlying cause is naive range handling during disposition processing in the Session_1_0...
CVE-2026-52466
Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuFind\Controller\AbstractBase::validateAccessPermission after it has found that controller level access permissions do not allow access to t...
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions 6.54.1...
CLSA-2026-1784769619 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 4.1.0-tuxcare.2...
CLSA-2026-1784596264 TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 47 io.netty packages to address 8 CVEs. Fixed in 4.1.117.Final-tuxcare.2...
CLSA-2026-1784164100 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 3 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.3...
CLSA-2026-1784164029 TuxCare security update for io.netty (1 CVE)
TuxCare rebuilt 46 io.netty packages to address 1 CVE. Fixed in 4.1.75.Final-tuxcare.2...
CLSA-2026-1783904631 TuxCare security update for tar (3 CVEs)
TuxCare rebuilt tar to address 3 CVEs. Fixed in 6.1.15-tuxcare.1...
CLSA-2026-1783126876 TuxCare security update for @angular (5 CVEs)
TuxCare rebuilt 6 @angular packages to address 5 CVEs. Fixed in 5.1.0-tuxcare.3...
CLSA-2026-1783126881 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 6.1.10-tuxcare.10...