CVE-2026-14987

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'twittermessage' Sequoia Template Setting in all versions up to, and including, 4.16.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-27379

Deserialization of Untrusted Data vulnerability in NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g allows Object Injection.This issue affects NextScripts: from n/a through = 4.4.7...

CVE-2026-25311

Missing Authorization vulnerability in 10up Autoshare for Twitter autoshare-for-twitter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoshare for Twitter: from n/a through = 2.3.1...

org.hornetq:hornetq-amqp-protocol (>=2.4.0.Beta2 <=2.4.0.Beta3), org.hornetq:hornetq-stomp-protocol (>=2.4.0.Beta2 <=2.4.0.Beta3) +1 more potentially affected by CVE-2017-12174 via org.hornetq:hornetq-server (>=2.3.0.BETA2 <=2.4.0.Beta3)

org.hornetq:hornetq-server MAVEN version =2.3.0.BETA2, =2.4.0.Beta2, =2.4.0.Beta2, =2.3.0.BETA2, =2.4.0.Beta3 Source cves: CVE-2017-12174 Source advisory: OSV:GHSA-GC96-H5PR-839J...