MINI-QHVW-2VV4-CRP2

Bulletin has no description...

WordPress Offload, AI & Optimize with Cloudflare Images plugin <= 1.10.2 - Authenticated (Author+) Remote Code Execution vulnerability

Authenticated Author+ Remote Code Execution vulnerability discovered by Yat in WordPress Plugin Offload, AI & Optimize with Cloudflare Images versions = 1.10.2...

MINI-QXVF-WG4G-36P3

Bulletin has no description...

MINI-92V5-MWFC-2395

Bulletin has no description...

MINI-3V64-X455-GF8Q

Bulletin has no description...

MINI-7QJQ-FMJ8-68X9

Bulletin has no description...

MINI-43PF-XFJF-69WR

Bulletin has no description...

CVE-2026-55742

Cotonti 1.0.0 master branch, commit f43f1fc3 is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update action 'a=update' modifies group access rights including via cotauthaddgroup without calling cotcheckxg to validate th...

CVE-2026-9815

The MagicForm WordPress plugin through 0.1.3 does not properly validate the type of files uploaded through an unauthenticated AJAX action when a form's per-field extension allowlist is left empty, allowing unauthenticated attackers to upload PHP files and execute arbitrary code on the server...

MINI-7J45-2X6V-CQF7

Bulletin has no description...

MINI-GCVW-XXX7-F4V7

Bulletin has no description...

MINI-WQJQ-HGW3-X4G7

Bulletin has no description...

MINI-CQC2-4V7C-FQ4H

Bulletin has no description...

MINI-JMXQ-V77F-66G3

Bulletin has no description...

MINI-XF46-X4G3-M8H4

Bulletin has no description...

MINI-5WCV-5GCR-RWCP

Bulletin has no description...

MINI-PHHJ-GP86-Q6HJ

Bulletin has no description...

MINI-3PXX-W276-3PH7

Bulletin has no description...

MINI-3W5Q-2V44-XPF4

Bulletin has no description...

MINI-6J77-H98G-6MC7

Bulletin has no description...