1163299 matches found
PT-2026-85086
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
Important: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive...
ALSA-2026:63022 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...
PT-2026-85087
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
CVE-2026-2573: Improper Neutralization of Input During Web Page Generation
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...
PT-2026-85220
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...
CVE-2026-81776: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81281: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-84773: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84763: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84812: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...
CVE-2026-81292: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
PT-2026-85111
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
PT-2026-85092
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
PT-2026-85110
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
PT-2026-85088
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
PT-2026-85091
Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-81295: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...