PT-2026-36323

Name of the Vulnerable Software and Affected Versions Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid versions prior to 1.17.2 Description The plugin is susceptible to unauthorized data modification because the wp ajax cli cancel function lacks a proper capability check...

PT-2026-36314

Name of the Vulnerable Software and Affected Versions Apache MINA versions prior to 2.2.7 Apache MINA versions prior to 2.1.12 Description An issue exists in the Java network application framework due to flaws in the deserialization mechanism. The software deserializes data from unknown network...

PT-2026-36852

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.10.5 Description A critical sandbox escape exists in the vm2 library, which is used to run untrusted JavaScript code in Node.js applications. This issue allows an attacker to break out of the restricted environment and...

ffmpeg:ffmpeg_dem_WTV_fuzzer: Heap-buffer-overflow in parse_mpeg2_extension_descriptor

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6219535958212608 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemWTVfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type:...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in DwaCompressor_uncompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6091314944081920 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcorecheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Cras...

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in ReadWMIHeader

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5913736901885952 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=5749729551253504 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

sentencepiece:trainer_fuzzer: Segv on unknown address in sentencepiece::unigram::Lattice::Viterbi

Project: https://github.com/google/sentencepiece.git Detailed Report: https://oss-fuzz.com/testcase?key=5298026431447040 Project: sentencepiece Fuzzing Engine: afl Fuzz Target: trainerfuzzer Job Type: aflasansentencepiece Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

libheif:encoder_fuzzer: Global-buffer-overflow in svt_aom_get_blk_var_map

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5042418566365184 Project: libheif Fuzzing Engine: afl Fuzz Target: encoderfuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5988b570c04...

angle:fuzz_spirv_transform: Crash in std::__Cr::__wrap_iter<unsigned int*> std::__Cr::vector<unsigned int, std::__Cr:

Detailed Report: https://oss-fuzz.com/testcase?key=4962732427509760 Project: angle Fuzzing Engine: libFuzzer Fuzz Target: fuzzspirvtransform Job Type: libfuzzerasanangle Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x786dc4920000 Crash State: std::Cr::wrapiter std::Cr::vectorunsigne...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=4616943402549248 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::TelnetLayer::getNextCommandField

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4555774813863936 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 20, 2026 to April 26, 2026)

Last week, there were 158 vulnerabilities disclosed in 123 WordPress Plugins and 27 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

The internet is noisy this week. We are seeing some wild new tactics, like people using fake cell towers to send scam texts, while some developers are accidentally downloading tools that peek into their private files during a simple install. It is definitely a busy time to be online. Security is...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-39998: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow bsc1252073. CVE-2025-68794: iomap: adjust read range correctly for...

SUSE-SU-2026:1661-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow bsc1252073. - CVE-2025-68794: iomap: adjust read range correctly for...

poppler:qt_search_fuzzer: Use-of-uninitialized-value in Gfx::doRadialShFill

Detailed Report: https://oss-fuzz.com/testcase?key=6416796692578304 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: qtsearchfuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Gfx::doRadialShFill Gfx::opShFill Gfx::go...

graphicsmagick:coder_HEIF_fuzzer: Heap-buffer-overflow in JPEG2000MainHeader::parse_SIZ_segment

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6361612268404736 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

lua:luaL_loadstring_test: Heap-use-after-free in insertkey

Detailed Report: https://oss-fuzz.com/testcase?key=6274756486955008 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: luaLloadstringtest Job Type: libfuzzerasani386lua Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0xcc338f84 Crash State: insertkey luaHresize luaHnewke...

selinux:checkpolicy-fuzzer: Use-of-uninitialized-value in hashtab_map

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5301794527051776 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: checkpolicy-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...