6700 matches found
WordPress Social Media Share Buttons & Social Sharing Icons plugin < 3.0.1 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Social Media & Share Icons versions 3.0.1...
CVE-2026-63384 affecting package mysql for versions less than 8.0.46-2
CVE-2026-63384 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...
CVE-2026-63383 affecting package mysql for versions less than 8.0.46-2
CVE-2026-63383 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...
WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.40 - Unauthenticated Payment Bypass vulnerability
Unauthenticated Payment Bypass vulnerability discovered by Abdullah Kareem in WordPress Plugin MasterStudy LMS versions 3.7.40...
WordPress User Frontend plugin < 4.3.10 - Editor+ PHP Object Injection vulnerability
Editor+ PHP Object Injection vulnerability discovered by Hijun Kim in WordPress Plugin WP User Frontend versions 4.3.10...
WordPress UpdraftPlus: WP Backup & Migration Plugin plugin < 1.26.7 - Backup Restoration vulnerability
Backup Restoration vulnerability discovered by Jashid Sany in WordPress Plugin UpdraftPlus versions 1.26.7...
WordPress Simple Google Calendar Outlook Events Widget plugin < 3.1.0 - Unauthenticated SSRF via calendar_id vulnerability
Unauthenticated SSRF via calendarid vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Simple Google Calendar Outlook Events Block Widget versions 3.1.0...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104794)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104794 advisory. In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be...
NPM: consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
NPM: consciousness-explorer / sublinear-time-solver MCP exportstate has an arbitrary file write vulnerability discovered by ? in WordPress Npm sublinear-time-solver versions 1.6.0...
WordPress RealHomes Memberships plugin < 3.1.0 - Subscriber+ Membership Payment Bypass vulnerability
Subscriber+ Membership Payment Bypass vulnerability discovered by Pablo González and Fran Ramírez in WordPress Plugin RealHomes Memberships versions 3.1.0...
EUVD-2026-64805
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
EUVD-2026-64791
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
PT-2026-80823
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
PT-2026-80839
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
PT-2026-80824
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
OESA-2026-3438 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
OESA-2026-3435 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
CVE-2026-53801 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53801 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...