6391 matches found
CVE-2026-1969
CVE-2026-1969 affects the WordPress plugin trx_addons prior to version 2.38.5. The issue is improper validation of file types in an AJAX action, enabling unauthenticated uploads of arbitrary files. Root cause noted as an incorrect fix of CVE-2024-13448. Some sources confirm the vulnerable version...
Advisory ROSA-SA-2026-3226
software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-26 affected versions grub2-2.06-26 CVE-ID: CVE-2025-61662 BDU-ID: 2025-14786 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the gettext module of the Grub2 operating systems boot loader is related to the ability to use memory...
WordPress Motta Addons plugin < 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Motta Addons versions 1.6.1...
WordPress Jaroti theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Jaroti versions 1.4.8...
WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pendulum versions 3.1.5...
WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Vex versions 1.2.9...
WordPress Kargo Takip plugin < 0.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Kargo Takip versions 0.2.4...
WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Lumise Product Designer versions 2.0.9...
WordPress Scape theme < 1.5.16 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Scape versions 1.5.16...
WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Fusion Builder versions 3.15.0...
CVE-2026-33037
WWBN AVideo is an open source video platform. In versions 25.0 and below, the official Docker deployment files docker-compose.yml, env.example ship with the admin password set to "password", which is automatically used to seed the admin account during installation, meaning any instance deployed...
CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23942 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23942 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23943 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23943 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
WordPress Get Use APIs plugin < 2.0.10 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Ahmed Makawi in WordPress Plugin JSON Content Importer versions 2.0.10...
CVE-2025-12385 affecting package qt5-qtdeclarative for versions less than 5.12.5-6
CVE-2025-12385 affecting package qt5-qtdeclarative for versions less than 5.12.5-6. A patched version of the package is available...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
CVE-2026-23941 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23941 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
