CVE-2026-65689

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

CVE-2026-65688

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

CVE-2026-65687

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

EUVD-2026-48225

Administrator Arbitrary File Upload in Really Simple CSV Importer = 1.3 versions...

EUVD-2026-48220

Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...

EUVD-2026-48201

Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...

EUVD-2026-48171

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

EUVD-2026-48195

Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...

EUVD-2026-48176

Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...

EUVD-2026-48151

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

EUVD-2026-47903

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the 'imploded' parameter parameter. This makes it possible for authenticated attackers, with...

EUVD-2026-47919

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

CVE-2026-65461

The WordPress plugin Really Simple CSV Importer (vulnerable:

CVE-2026-65455

CVE-2026-65455 affects the WordPress MapSVG plugin up to version 8.14.0. The vulnerability is described as an Administrator Arbitrary File Upload, with an overall CVSSv3.1 base score of 9.1 (CRITICAL) and a network attack vector, requiring high privileges and no user interaction. The reports do n...

CVE-2026-59555

CVE-2026-59555 affects WordPress: Participants Database plugin version

CVE-2026-59542

The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin

CVE-2026-57716

Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...

CVE-2026-57696

The CVE concerns the WordPress Picture Gallery plugin (WordPress plugin) with versions

CVE-2026-27064

CVE-2026-27064 affects the WordPress Mailster plugin, versions

CVE-2026-15786 WP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the 'imploded' parameter parameter. This makes it possible for authenticated attackers, with...