50770 matches found
CVE-2026-57397 WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...
CVE-2026-27422
The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions
CVE-2026-27399 WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...
EUVD-2026-48157
Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...
CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...
EUVD-2026-48144
Contributor SQL Injection in Create by Mediavine = 2.5.3 versions...
EUVD-2025-210505
Administrator Cross Site Scripting XSS in WP-Polls = 2.77.3 versions...
WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability
Unknown vulnerability discovered by dodoh4t in WordPress Plugin Falcon – WordPress Optimizations & Tweaks versions = 2.10.0...
CVE-2026-15015
creationtimestamp| type| source ---|---|--- 2026-07-23 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968824938837459 2026-07-23 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i 2026-07-23 13:58:05+00:00| seen|...
RHSA-2026:42089 Red Hat Security Advisory: glib2 security update
Bulletin has no description...
RHSA-2026:42080 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
Bulletin has no description...
RHSA-2026:41947 Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement update
Bulletin has no description...
WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability
2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Hide My WP Ghost versions = 7.0.06...
CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta
The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...
WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin TemplateSpare versions = 4.2.2...
CVE-2026-15827 GutenKit <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints
The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and including, 2.4.12. Both endpoints are...
CVE-2026-15827
The CWE/CVSS entry CVE-2026-15827 concerns GutenKit Blocks for WordPress, affected up to version 2.4.12. Two REST endpoints (/wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests) register permission_callback => '__return_true' and expose the site’s Mailchim...
EUVD-2026-47926
The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and including, 2.4.12. Both endpoints are...
USN-8597-1: Linux kernel (IBM) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8597-1 linux-ibm-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...