6735 matches found
PT-2026-5605
Name of the Vulnerable Software and Affected Versions MagicINFO 9 Server versions prior to 21.1090.1 Description A flaw exists in MagicINFO 9 Server that permits authorized users to upload HTML files without requiring authentication. This can lead to Stored Cross-Site Scripting XSS, potentially...
WordPress Himer theme < 2.1.1 - Arbitrary Group Joining via CSRF vulnerability
Arbitrary Group Joining via CSRF vulnerability discovered by Sushmita Poudel in WordPress Theme Himer versions 2.1.1...
Linux Distros Unpatched Vulnerability : CVE-2026-24868
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2. CVE-2026-24868 Note that Nessus relies on the presen...
WordPress The Ultimate Video Player For WordPress plugin < 2.2.3 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Presto Player versions 2.2.3...
WordPress Genesis Blocks plugin < 3.1.3 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Genesis Blocks versions 3.1.3...
WordPress EventON plugin < 4.5.9 - Unauthenticated Virtual Event Settings Update vulnerability
Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.9...
WordPress EventON Lite< 2.2.9 - Unauthenticated Virtual Event Settings Update vulnerability
Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.9...
WordPress WooCommerce Customers Manager plugin < 30.1 - Bulk Action via CSRF vulnerability
Bulk Action via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WooCommerce Customers Manager versions 30.1...
WordPress Ultimate Blocks plugin < 3.2.0 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ultimate Blocks versions 3.2.0...
WordPress MaxButtons plugin < 9.8.1 - Admin+ Stored XSS via Text Color vulnerability
Admin+ Stored XSS via Text Color vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin MaxButtons versions 9.8.1...
CVE-2025-61730 affecting package golang for versions less than 1.25.6-1
CVE-2025-61730 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...
CVE-2025-61728 affecting package golang for versions less than 1.25.6-1
CVE-2025-61728 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...
CVE-2025-61728 affecting package golang for versions less than 1.25.6-1
CVE-2025-61728 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...
CVE-2025-68121 affecting package golang for versions less than 1.24.12-1
CVE-2025-68121 affecting package golang for versions less than 1.24.12-1. A patched version of the package is available...
CVE-2025-68119 affecting package golang for versions less than 1.25.6-1
CVE-2025-68119 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...
CVE-2025-61100 affecting package frr for versions less than 9.1.1-5
CVE-2025-61100 affecting package frr for versions less than 9.1.1-5. A patched version of the package is available...
CVE-2025-61101 affecting package frr for versions less than 9.1.1-5
CVE-2025-61101 affecting package frr for versions less than 9.1.1-5. A patched version of the package is available...
CVE-2025-68119 affecting package golang for versions less than 1.24.12-1
CVE-2025-68119 affecting package golang for versions less than 1.24.12-1. A patched version of the package is available...