CVE-2026-65447: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Contest Gallery = 30.0.6 versions...

CVE-2026-65446: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Kali Forms = 2.4.18 versions...

CVE-2026-65445: Missing Authorization

Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...

CVE-2026-65443: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in BackWPup = 5.7.4 versions...

CVE-2026-65442: Server-Side Request Forgery (SSRF)

Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...

CVE-2026-65441: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.3 versions...

CVE-2026-65438: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Message Filter for Contact Form 7 = 1.6.3.9 versions...

CVE-2026-61957: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...

CVE-2026-65437: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...

CVE-2026-61953: Server-Side Request Forgery (SSRF)

Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...

CVE-2026-64698: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65921: Improper Limitation of a Pathname to a Restricted Directory

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

CVE-2026-66474: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Insert Headers and Footers Code – HT Script = 1.1.8 versions...

CVE-2026-66438: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...

CVE-2026-28932: Uncontrolled Resource Consumption

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial of service...

CVE-2026-28849: Authentication Bypass by Spoofing

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-66437: Server-Side Request Forgery (SSRF)

Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...

CVE-2026-66433: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...

CVE-2026-66428: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...

CVE-2026-66427: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WP Google Review Slider = 18.4 versions...