67417 matches found
Next.js: Remote Code Execution in next/og ImageResponse
Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...
WordPress Solace Extra plugin < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure vulnerability
Unauthenticated Non-Published Post Content Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Solace Extra versions 1.7.2...
CVE-2026-103044
A flaw was found in the MediaWiki EasyTimeline extension. An Extensible Markup Language XML injection vulnerability exists due to improperly serving image map files as XML data. A remote attacker could exploit this flaw by convincing a user to interact with specially crafted content, potentially...
CVE-2026-97239
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-96832
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...
CVE-2026-96823
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
CVE-2026-27085
Shop manager Content Injection in Astra WordPress Theme = 4.13.12 versions...
CVE-2026-100507
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.10.1...
CVE-2026-100507
The If-So Dynamic Content Personalization plugin for WordPress, version
CVE-2026-100507 WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.10.1...
CVE-2026-100507 WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.10.1...
EUVD-2026-89937
Unauthenticated Cross Site Scripting XSS in If-So Dynamic Content Personalization = 1.10.1 versions...
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97239
The WordPress MCP Content Manager Lite plugin (versions
EUVD-2026-89903
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
EUVD-2026-89884
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...
CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...