MINI-W3P3-87RM-573J

Bulletin has no description...

MINI-3GHW-FGWV-PV32

Bulletin has no description...

MINI-2PRC-HC97-292R

Bulletin has no description...

MINI-XVMR-XX54-FJ42

Bulletin has no description...

MINI-8X4W-7FP5-6QHH

Bulletin has no description...

MINI-WFMV-Q3WV-HHPP

Bulletin has no description...

MINI-V5F8-4G3V-2M4V

Bulletin has no description...

MINI-FQPJ-MRJF-7RGC

Bulletin has no description...

MINI-QH52-F8CJ-43VM

Bulletin has no description...

MINI-3Q5G-HX32-6XWG

Bulletin has no description...

MINI-VF94-44JF-WJ62

Bulletin has no description...

MINI-8PXP-M6HR-QJ68

Bulletin has no description...

MINI-QXMW-6GQR-9V5F

Bulletin has no description...

MINI-5PF5-V6CW-9499

Bulletin has no description...

MINI-J5MM-FQXV-PXV2

Bulletin has no description...

MINI-9FPR-JPHW-67CW

Bulletin has no description...

CVE-2026-3423 Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-67708

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-3423 Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-3423

The Envira Gallery WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the gallery description configuration field in all versions up to and including 1.12.4 . The root cause is insufficient input sanitization and output escaping , allowing authenticated attackers with Author-...