CVE-2026-6565: Improper Neutralization of Input During Web Page Generation

The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input...

EUVD-2006-3597

Malware in sbrugna...

CVE-2006-3602

Directory traversal vulnerability in jscripts/tinymce/tinymcegzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing null %00 byte in the language parameter in the advanced theme...

CVE-2006-3602

CVE-2006-3602 affects FarsiNews 3.0 BETA 1, via directory traversal in jscripts/tiny_mce/tiny_mce_gzip.php. The underlying flaw allows remote attackers to include arbitrary files by supplying .. and a trailing null (%00) byte in the language parameter of the advanced theme, enabling partial integ...