CVE-2026-108603

The slide-maker software (versions through 5.8.0 ) contains a path traversal vulnerability in the generate_images_openai.py component. The root cause is the application's failure to sanitize manifest-supplied filenames, allowing attackers to use ../ sequences or symlinked filenames to write image...

CVE-2026-78530 WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability

Subscriber Arbitrary File Deletion in FoodBakery = 4.6 versions...

CVE-2026-78530

The WordPress FoodBakery theme (versions

EUVD-2026-96514

Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...

CVE-2026-66481 WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability

Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...

CVE-2026-65459

The Forminator WordPress plugin (versions

EUVD-2026-96513

Unauthenticated Arbitrary Content Deletion in Forminator = 1.57.3 versions...

CVE-2026-62129 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

CVE-2026-62129

The Creator LMS WordPress plugin (versions

EUVD-2026-96511

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

EUVD-2026-96463

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

CVE-2026-62024

The CodeBard Help Desk WordPress plugin, versions

CVE-2026-62025

The Tailored Tools plugin for WordPress (versions

CVE-2026-62024 WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

CVE-2026-62025 WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

EUVD-2026-96462

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

EUVD-2026-96541

Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...

CVE-2026-40805

The PeepSo WordPress plugin (versions

CVE-2026-40805 WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability

Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...

CVE-2026-108597

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal tar slip vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to...