CVE-2026-80517

The WP Ultimate CSV Importer WordPress plugin (versions before 9.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate file types within uploaded archives or sanitize their content before storing them in a publicly served location. This allows...

EUVD-2026-91935

The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uploaded archive nor sanitise their content before storing them in a publicly served location, allowing high privilege users such as administrators to achieve Stored Cross-Site...

EUVD-2026-91838

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

PT-2026-104521

Name of the Vulnerable Software and Affected Versions WP Ultimate CSV Importer versions prior to 9.2 Description Insufficient validation of file types within uploaded archives and a lack of content sanitization before storage in a publicly accessible location allow high-privilege users to execute...

PT-2026-104523

Name of the Vulnerable Software and Affected Versions Unlimited Elements for Elementor WordPress plugin versions prior to 2.0.21 Description Insufficient sanitization of file paths within uploaded archives allows authenticated users with access to the asset-management feature to write arbitrary...

CVE-2026-80517: Improper Neutralization of Input During Web Page Generation

The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uploaded archive nor sanitise their content before storing them in a publicly served location, allowing high privilege users such as administrators to achieve Stored Cross-Site...

CVE-2026-104476 Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

CVE-2026-104476 Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

CVE-2026-104476 Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

Versions of PeaZip prior to 11.3.0 are vulnerable to OS command injection when running in a non-default configuration. The root cause is the mishandling of the string "quotation character already used in the string" when processing a filename in an archive . Impacting the local system, this vulne...

CVE-2026-104843

A flaw was found in uv. An attacker could achieve arbitrary code execution on a Windows system by tricking a user into installing a specially crafted Python wheel package. During archive extraction, files can be written outside the intended target directory, allowing an attacker to place maliciou...

CVE-2026-102514

A flaw was found in PeaZip. When decompressing PEA archives, the application fails to properly validate compressed block sizes, resulting in an out-of-bounds write vulnerability. By convincing a victim to open or extract a specially crafted archive file, an attacker could exploit this flaw to...

PT-2026-104453

Name of the Vulnerable Software and Affected Versions PeaZip versions prior to 11.3.0 Description In a non-default configuration, the software is susceptible to OS command injection. This occurs when a filename within an archive is processed and the application mishandles cases where a quotation...

CVE-2026-105050: Incorrect Behavior Order: Validate Before Canonicalize

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-56660

The GetSimple CMS CE community edition (prior to version 1.5 ) is vulnerable to remote code execution (RCE) due to a flaw in the update handler located in UpdateCE.php . The application downloads and extracts ZIP archives into the web root without validating file types or extraction paths. This a...

compas-cloud (>=0.1.2rc1, <=0.3.3), evennia (>=1.0.0, <=6.1.0) +8 more potentially affected by CVE-2026-77528 via autobahn (20.12.3)

autobahn PYPI version 20.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - compas-cloud =0.1.2rc1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =4.5.2, =1.0.2, =1.0.9 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-402...

CVE-2026-103754

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...