CVE-2026-66594

Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...

CVE-2026-66593

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

CVE-2026-66595

Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...

CVE-2025-53999

Unauthenticated Broken Access Control in Altair = 5.2.2 versions...

EUVD-2025-210753

HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...

CVE-2025-62299

HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.

CVE-2026-7485

In Checkmk, incorrect authorization in frozen BI aggregations lets an authenticated user with restricted host/service visibility learn the names and existence of hosts and services they should not see. Affected versions: <2.5.0p2, <2.4.0p29,

CVE-2026-74020 WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

CVE-2026-74020

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

EUVD-2026-63320

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

EUVD-2026-63319

Unauthenticated Broken Access Control in EPROLO Dropshipping = 2.4.2 versions...

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

EUVD-2026-63314

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

EUVD-2026-63311

Subscriber Remote Code Execution RCE in Query Wrangler = 1.5.57 versions...

CVE-2026-68564

Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...

EUVD-2026-63302

Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...

EUVD-2026-63301

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

CVE-2026-66647 WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

CVE-2026-66647

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

CVE-2026-66616 WordPress Form Maker by 10Web plugin <= 1.15.46 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...