PT-2026-22838

Name of the Vulnerable Software and Affected Versions GLPI Inventory Plugin versions prior to 1.6.6 Description The GLPI Inventory Plugin manages network discovery, inventory, software deployment, and data collection for GLPI agents. A reflected cross-site scripting XSS issue exists in task jobs...

WordPress Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload vulnerability

WordPress Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin = 7.0.0.3 - Authenticated Administrator+ Server-Side Request Forgery to Arbitrary File Upload vulnerability discovered by lucsob in WordPress Plugin Uncanny Automator versions = 7.0.0.3...

WordPress WP Food plugin < 2.7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin WP Food versions 2.7.1...

CVE-2026-26694

creationtimestamp| type| source ---|---|--- 2026-03-02 16:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3muodidu2o...

WordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Maxify versions = 1.0.16...

WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Helion versions = 1.1.12...

WordPress EmojiNation theme <= 1.0.12 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme EmojiNation versions = 1.0.12...

WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Progress versions = 1.2...

OpenClaw Data Forgery Problem Vulnerability (CNVD-2026-13430)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw is vulnerable to a data forgery issue. The vulnerability stems from unauthenticated TXT records in discovery beacons, where certain clients treat the TXT values as authoritative routing/fixed inputs. An attacker...

VEcho: A Paradigm Shift from Vulnerability Verification to Proactive Discovery with Large Language Models

Static Application Security Testing SAST tools often suffer from high false positive rates, leading to alert fatigue that consumes valuable auditing resources. Recent efforts leveraging Large Language Models LLMs as filters offer limited improvements; however, these methods treat LLMs as passive,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: containerd-fips, k6-fips, gitlab-runner-fips, scorecard, kube-metrics-adapter-fips, datadog-operator, spire-server, temporal-server, zot, kubevirt-cdi-operator-fips, skaffold-fips, ceph-csi-operator-fips, cluster-api-provider-vsphere-fips, external-secrets-operator,...

OESA-2026-1450 avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...

CVE-2026-25147

creationtimestamp| type| source ---|---|--- 2026-02-27 17:14:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfu7ik7zfb2k 2026-03-04 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg6z66ywo723...

WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Guff versions = 1.0.1...

WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Aqualots versions = 1.1.6...

WordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Ozisti versions = 1.1.10...

WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Save Life versions = 1.2.13...

WordPress UberSlider PerpetuumMobile plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin UberSlider PerpetuumMobile versions = 2.3...

CVE-2026-28211

creationtimestamp| type| source ---|---|--- 2026-02-27 07:03:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mft5ey7out2s...

CVE-2026-20010

A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of specific...