229568 matches found
CVE-2026-73506 Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data
Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, writes rune in src/terminal/writer.go emitted attacker-controlled current directory names and Git metadata, including Commit.Subject, Commit.Author.Name, Commit.Author.Email, and...
CVE-2026-73506
Oh My Posh is vulnerable to terminal escape sequence injection in prompt rendering. In versions prior to 29.35.1, the function write(s rune) could emit attacker-controlled data (current directory names and Git metadata, including Commit.Subject, Commit.Author.Name/Email, RawUpstreamURL) without r...
CVE-2026-73506
Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, writes rune in src/terminal/writer.go emitted attacker-controlled current directory names and Git metadata, including Commit.Subject, Commit.Author.Name, Commit.Author.Email, and...
CVE-2026-73349
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73353
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...
CVE-2026-73401
Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...
CVE-2026-73403
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
CVE-2026-66691
Unauthenticated Broken Access Control in Nokri = 1.6.6 versions...
CVE-2026-66689
Unauthenticated Broken Access Control in Anti Spam and list cleaner AcyChecker = 2.0.0 versions...
CVE-2026-66693
Subscriber Broken Access Control in Motors = 1.4.113 versions...
CVE-2026-66660
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...
CVE-2026-66469
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
CVE-2026-66465
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
CVE-2026-66461
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...
CVE-2026-66464
Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...
CVE-2026-66466
Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.1.1 versions...
CVE-2026-66459
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
CVE-2026-66454
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...