42652 matches found
CVE-2026-66427 WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-66427
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
EUVD-2026-49239
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65562 WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version
CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49228
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49224
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...
CVE-2026-59535
CVE-2026-59535 affects WordPress Thrive Product Manager plugin
CVE-2026-59535 WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...
EUVD-2026-49206
Unauthenticated Broken Access Control in Stripe For WooCommerce = 4.0.7 versions...
CVE-2026-59528
CVE-2026-59528 concerns the WordPress plugin ShipTime: Discounted Shipping Rates (versions
CVE-2026-59529
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59527
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...
CVE-2026-48144
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
DEBIAN-CVE-2026-48586
Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BackWPup versions = 5.7.4...
CVE-2026-58023 Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
Out-of-bounds Read vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...