CVE-2026-77792

The RegistrationMagic WordPress plugin, in versions prior to 6.0.9.9 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to escape a registration form field value—specifically the Rating Field —before it is outputted into an HTML attribute on an administrative pag...

snpguest-0.10.0-3.1 on GA media (moderate)

snpguest-0.10.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11653-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N...

Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen (critical)

openSUSE security update: security update for mozillafirefox, mozilla-nss, mozilla-nspr, rust-cbindgen ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21713-1 Rating: critical References: bsc1262698 bsc1262701 bsc1266262 bsc1266263 bsc1271649...

dovecot24-2.4.5-1.1 on GA media (moderate)

dovecot24-2.4.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11629-1 Rating: moderate Cross-References: CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606 CVE-2026-33607 CVE-2026-40014 CVE-2026-40015 CVE-2026-40017 CVE-2026-40019 CVE-2026-40203 CVE-2026-40205...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0318-1 Rating: critical References: 1276225 1276749 Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899...

Security update for postgresql15 (important)

openSUSE security update: security update for postgresql15 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21700-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

Security update for postgresql14 (important)

openSUSE security update: security update for postgresql14 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21699-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

chromedriver-152.0.7977.64-1.1 on GA media (moderate)

chromedriver-152.0.7977.64-1.1 on GA media Announcement ID: openSUSE-SU-2026:11628-1 Rating: moderate Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899 CVE-2026-78900 CVE-2026-78901 CVE-2026-789...

grafana-12.4.5-4.1 on GA media (moderate)

grafana-12.4.5-4.1 on GA media Announcement ID: openSUSE-SU-2026:11619-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-21723 CVE-2026-33814 CVE-2026-39882 CVE-2026-8609 CVE-2026-9029 CVSS scores: CVE-2026-1229 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CVE-2026-1229 SUSE :...

Security update for vim (important)

openSUSE security update: security update for vim ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21671-1 Rating: important References: bsc1268162 bsc1271684 bsc1275011 bsc1275012 bsc1275013 bsc1275014 bsc1275015 bsc1275016 bsc1275017 bsc1275018...

CVE-2026-78285

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-78285

WordPress Like Button Rating plugin (versions

CVE-2026-78285 WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

EUVD-2026-66942

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-78285 WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-78285: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

Security update for rsync (important)

openSUSE security update: security update for rsync ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21650-1 Rating: important References: bsc1269039 bsc1269040 bsc1269041 bsc1269042 bsc1269043 bsc1269044 bsc1269045 bsc1269046 bsc1269047 bsc1269048...

PT-2026-82461

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-2388: Improper Neutralization of Input During Web Page Generation

The Reviews and Rating – Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.10. This is due to the wpdisplay shortcode handler, used by multiple shortcodes, allowing attacker-controlled htmltags values to define raw HTML tags a...

WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Like Button Rating versions = 2.6.61...