CVE-2026-65607

SiYuan before v3.7.2 has a path traversal vulnerability in the /export/temp/ short-circuit branch of the serveExport handler (kernel/server/serve.go). The branch concatenates the raw, percent-decoded request path with util.TempDir and serves the file without the IsSubPath or IsSensitivePath check...

PYSEC-2026-3477 LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

Impact LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose allowedroutes includes /v1/skills, anthropicroutes, or llmapiroutes, could upload a crafted skill archive...

PYSEC-2026-3541 TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...

PYSEC-2026-3500 PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

Summary The multiedit tool in src/praisonai/praisonai/tools/multiedit.py allows LLM-controlled arbitrary file read and write without any path validation, workspace boundary check, or protected path guard. This enables an attacker who can influence agent tool arguments via crafted prompts, user...

PYSEC-2026-3516 PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API

Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agentfile field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agentfile field in...

CVE-2026-65461

The WordPress plugin Really Simple CSV Importer (vulnerable:

EUVD-2026-48225

Administrator Arbitrary File Upload in Really Simple CSV Importer = 1.3 versions...

EUVD-2026-48220

Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...

CVE-2026-65455

CVE-2026-65455 affects the WordPress MapSVG plugin up to version 8.14.0. The vulnerability is described as an Administrator Arbitrary File Upload, with an overall CVSSv3.1 base score of 9.1 (CRITICAL) and a network attack vector, requiring high privileges and no user interaction. The reports do n...

EUVD-2026-48201

Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...

CVE-2026-59555

CVE-2026-59555 affects WordPress: Participants Database plugin version

EUVD-2026-48195

Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...

CVE-2026-59542

The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin

CVE-2026-57716

CVE-2026-57716 affects the WordPress plugin WordPress Broadcast Live Video (VideoWhisper Live Streaming Integration)

EUVD-2026-48176

Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...

CVE-2026-57696

The CVE concerns the WordPress Picture Gallery plugin (WordPress plugin) with versions

EUVD-2026-48171

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

CVE-2026-27064

CVE-2026-27064 affects the WordPress Mailster plugin, versions

EUVD-2026-48151

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

CVE-2026-15786 WP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the 'imploded' parameter parameter. This makes it possible for authenticated attackers, with...