Vulnerabilities of .NET, Microsoft .NET Framework, and Microsoft Visual Studio software platforms, related to improper code generation management, allow attackers to escalate their privileges.

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to improper code generation management. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

WordPress Clever Mega Menu for Visual Composer plugin <= 1.0.1 - Subscriber+ Menu Item Meta Update vulnerability

Subscriber+ Menu Item Meta Update vulnerability discovered by Pablo González and Fran Ramírez in WordPress Plugin Clever Mega Menu for Visual Composer versions = 1.0.1...

CVE-2026-11872 Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

EUVD-2026-51939

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin, affecting versions through 1.0.1 , contains a vulnerability where it fails to perform a nonce or capability check within an AJAX action. This flaw specifically affects the action that updates navigation menu item metadata. Consequently, a...

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-11872: Improper Access Control

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-59326 HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-47858

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...

EUVD-2026-22591

Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability...

CVE-2026-65568

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

CVE-2026-65568

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

CVE-2026-65568 WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

EUVD-2026-49239

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

CVE-2026-65568

The CVE-2026-65568 entry concerns the WordPress Visual Composer Website Builder plugin (versions

CVE-2026-65568 WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

PT-2026-64958

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

CVE-2026-65568: Missing Authorization

Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...

WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Visual Composer Website Builder versions = 45.15.0...