4911 matches found
EUVD-2026-1269
The Simple User Meta Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user meta value field in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2026-1333
The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing or incorrect nonce validation on the handlequeryargs function. This makes it possible for unauthenticated attackers to update the plugin's...
EUVD-2026-1278
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayName' parameter in all versions up to, and including, 5.93.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-Case Prototypes
Agentic AI marks an important transition from single-step generative models to systems capable of reasoning, planning, acting, and adapting over long-lasting tasks. By integrating memory, tool use, and iterative decision cycles, these systems enable continuous, autonomous workflows in real-world...
CVE-2025-20803
creationtimestamp| type| source ---|---|--- 2026-01-06 16:03:36+00:00| seen| Telegram/TCex7aZekT09DvEY9wX636dHaOk7Nos7qsus59ia7rYD0xo...
CVE-2025-20787
creationtimestamp| type| source ---|---|--- 2026-01-06 15:03:59+00:00| seen| Telegram/IzmJVDHIDu3u0Y8EmT2xTZPye35xj5uskV49q8qxzRHd0...
EUVD-2026-1067
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catchlpajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents b...
EUVD-2026-1070
Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password...
EUVD-2026-1079
The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'deletefield' function in all versions up to, and including, 1.2.8. This makes it possible for authenticated attackers, with Subscriber-level...
EUVD-2026-1098
EUVD-2026-1098...
EUVD-2026-0891
In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sgnentsforlen The return value of sgnentsforlen was assigned to an unsigned long in starfivehashdigest, causing negative error codes to be converted to large positive integers. Add...
EUVD-2026-0765
Not used...
EUVD-2026-0054
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0086
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0115
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0138
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0134
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0196
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...