CVE-2026-82923 AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes

The AI Website Builder WordPress plugin GitHub build 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauthenticated attackers to install and activate plugins and themes, import content from a URL under their control, write a file of their choosing into th...

EUVD-2026-70990

The AI Website Builder WordPress plugin GitHub build 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauthenticated attackers to install and activate plugins and themes, import content from a URL under their control, write a file of their choosing into th...

GHSA-2FJV-4HM5-6J23 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5FQ4-CF4M-H32G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F4FR-6HPC-V792 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-859R-QGH9-2MWV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8H5Q-977G-XQF2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-P67G-9RGF-JJH6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5724-75RM-8CXV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-M4C2-Q6HR-P6W3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XM9J-86VV-2J8R vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XRMP-96P2-C668 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9QGH-MJ3F-5GW3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FV55-2P8J-MHM4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G897-47PP-HQ75 vulnerabilities

Vulnerabilities for packages: chromium...

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 CVSS score: 8.8, has been described as a type confusion bug in V8, Chrome's JavaScript and...

CVE-2026-19224 Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

WordPress Hummingbird Performance plugin < 3.21.2 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Hummingbird versions 3.21.2...

CVE-2026-19224

CVE-2026-19224 affects the Hummingbird Performance WordPress plugin in versions prior to 3.21.2 . The vulnerability resides in the Hub Connector component, which fails to restrict a network-wide setting to network administrators , allowing any site administrator on a WordPress multisite network t...

Malicious code in timeweave (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6450b478521f96973a556306ed36a1430407373bb1331e051faec0266e1e0d The package presents itself as a timezone/IANA cache utility but ships a manifest-driven Windows code-execution channel. updater.py defines...