401497 matches found
CVE-2026-110886 WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...
CVE-2026-110886
The QuantumCloud Conversational Forms for ChatBot WordPress plugin (versions up to and including 1.5.1 ) is vulnerable to a PHP Object Injection flaw. This vulnerability arises from the deserialization of untrusted data , allowing an attacker to inject objects into the application. The vulnerabil...
CLSA-2025-1757962453 kernel: Fix of 34 CVEs
inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...
CLSA-2026-1784277735 kernel: Fix of CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK...
CVE-2026-87844
The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...
WordPress Modern Events Calendar Lite plugin < 7.37.0 - Subscriber+ Sensitive Data Disclosure vulnerability
Subscriber+ Sensitive Data Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Modern Events Calendar Lite versions 7.37.0...
CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...
CVE-2026-110069
The Modern Events Calendar Lite WordPress plugin, in versions prior to 7.37.0 , is vulnerable to sensitive data disclosure. The root cause is the failure to perform capability, nonce, or ownership checks before returning event booking and attendee data via the mec_event_bookings and mec_attendees...
CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...
CVE-2026-87844
The PickPlugins Product Designer for WooCommerce WordPress plugin (version 1.0.40 and below ) is vulnerable to unauthenticated data injection. The flaw stems from a lack of capability checks , an inverted nonce verification mechanism that accepts invalid or absent nonces, and a failure to validat...
CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection
The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...
EUVD-2026-103389
The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...
WordPress PickPlugins Product Designer for WooCommerce plugin <= 1.0.40 - Unauthenticated Design Template Data Injection vulnerability
Unauthenticated Design Template Data Injection vulnerability discovered by Valida Abdullayeva in WordPress Plugin Product Designer versions = 1.0.40...
CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection
The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...
CLSA-2026-1770032032 kernel: Fix of 63 CVEs
mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory CVE-2025-39883 - comedi: aioiiro16: Fix bit shift out of bounds CVE-2025-38529 - comedi: das6402: Fix bit shift out of bounds CVE-2025-38482 - comedi: pcl812: Fix bit shift out of bounds CVE-2025-38530 - comedi: das16m1: Fix...
CLSA-2026-1784274653 kernel: Fix of 2 CVEs
xfs: resample the data fork mapping after cycling ILOCK - macvlan: observe an RCU grace period in macvlancommonnewlink error path CVE-2026-23209...
PT-2026-116598
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...
PT-2026-116586
CVE-2026-107436 CVSS 8.8: Deserialization vulnerability in Strong Testimonials plugin WP Chill through v3.3.12. WordPress sites should check for updates. https://t.co/NKfc4BIlfd… via NVD Recent High CVSS CyberSecurity InfoSec Vulnerability AI MachineLearning https://t.co/q59xLTIjlq...
PT-2026-117021
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the advance nextseg function modifies the Segment Routing Header SRH Segments Left field and the IPv6 destination address without verifying if the packet data is...
PT-2026-128458
In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to the bus alignment align size, up to 511 bytes for SDIO, 1 byte for SPI but sends the padded length straight from the fra...