GO-2025-3633 vulnerabilities

Vulnerabilities for packages: cilium-fips, cilium...

GO-2025-3993 vulnerabilities

Vulnerabilities for packages: argo-cd...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2026-5437 vulnerabilities

Vulnerabilities for packages: minio...

GO-2022-1038 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-3706 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-3790 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2022-0390 vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester, ctop...

CVE-2026-19794

The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.56 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute...

WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability

WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...

WordPress Quick PayPal Payments plugin <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPN vulnerability

Unauthenticated Payment Bypass via PayPal IPN vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Quick Paypal Payments versions = 5.7.50...

WordPress Welcart e-Commerce plugin < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callback vulnerability

Unauthenticated Payment Bypass via Forged Settlement Callback vulnerability discovered by Pedro Pinho in WordPress Plugin Welcart e-Commerce versions 2.11.33...

WordPress Order Sync with Zendesk for WooCommerce plugin < 2.2.3 - Unauthenticated Customer Order Data Disclosure vulnerability

Unauthenticated Customer Order Data Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Order Sync with Zendesk for WooCommerce versions 2.2.3...

WordPress WooCommerce Subscriptions plugin < 9.1.0 - Unauthenticated RCE via PHP Object Injection vulnerability

Unauthenticated RCE via PHP Object Injection vulnerability discovered by Vasily Belolapotkov, Vlad Olaru in WordPress Plugin WooCommerce Subscriptions versions 9.1.0...

CVE-2026-19794

The CVE-2026-19794 entry concerns the WP-Stats plugin for WordPress, affected in all versions up to and including 2.56. Root cause: insufficient input sanitization and output escaping, enabling Stored Cross-Site Scripting. Impact: unauthenticated attackers can inject arbitrary web scripts that ex...

WordPress WP Crowdfunding plugin < 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Jakub Herman in WordPress Plugin WP Crowdfunding versions 2.2.1...