CLEANSTART-2025-UW48487 flaw was found in the X Rendering extension's handling of animated cursors

Security vulnerability affects the xorg-server package. A flaw was found in the X Rendering extension's handling of animated cursors...

Linux Distros Unpatched Vulnerability : CVE-2026-59959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP...

Telegram-0-Click-RCE-SECURITY-VULNERABILITY-ANALYSIS-REPORT

🔴 Telegram 0-Click RCE Vulnerability Analysis Report ZDI-CAN-30207 | CVSS 9.8 CRITICAL | Unpatched as of 2026-03-30 Author: Dennis Kim @gameworkerkim Date: March 30, 2026 Contact: [email protected] 📋 Summary Badges 1. Vulnerability Overview Executive Summary This is a zero-click remote code...

CVE-2026-116613

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

CVE-2026-116613 Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

CVE-2026-116613

The Animated Text Block plugin for WordPress (versions up to and including 1.2.6 ) is vulnerable to Sensitive Information Exposure via the animated-text shortcode. The root cause is that the atb_shortcode_handler() function fetches an arbitrary post using an attacker-supplied ID and executes disp...

CVE-2026-116613 Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

EUVD-2026-111575

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

CVE-2026-116613: bplugins Animated Text Block – Add Typing and Looping Text Effects: The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and…

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

PT-2026-127803

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb shortcode handler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch...

WordPress Animated Text Block authorization issue vulnerability

WordPress Animated Text Block versions 1.2.6 and earlier contain an authorization issue vulnerability. This vulnerability arises because the atbshortcodehandler function allows attackers to retrieve any post by providing an ID, and it fails to perform permission checks when calling displayContent...

CVE-2026-59959: Divide By Zero

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or ANMF frame...

WordPress Animated Text Block – Add Typing and Looping Text Effects plugin <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Wordfence PRISM in WordPress Plugin Animated Text Block versions = 1.2.6...

CVE-2026-115183 Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget

The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to embed live HTML forms, including password fields that submit to an external host, into posts wher...

CVE-2026-115183

The Qi Addons For Elementor WordPress plugin (versions before 1.11.2 ) is vulnerable to a content injection flaw. The root cause is the failure to properly sanitise a widget's heading text after decoding HTML entities. This allows users with the Contributor role or higher to embed live HTML forms...

CVE-2026-115183 Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget

The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to embed live HTML forms, including password fields that submit to an external host, into posts wher...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the handling of animated cursors by the X Rendering extension. If a client does not provide any cursors, the server assumes that at least one is present. This can lead to an out-of-bounds read and potential crash...

CVE-2026-15399

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-15399 Animated Number Counters <= 3.0 - Authenticated (Editor+) SQL Injection via 'counterid' Parameter

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-15399 Animated Number Counters <= 3.0 - Authenticated (Editor+) SQL Injection via 'counterid' Parameter

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...