CVE-2026-32455

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DOM-Based XSS.This issue affects MDTF: from n/a through = 1.3.5...

CVE-2026-32352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issue affects Elementor Website Builder: from n/a through = 3.35.5...

EUVD-2026-12101

SM9 Infinity-Point Ciphertext Forgery Vulnerability...

CLSA-2026-1773412353 Fix CVE(s): CVE-2026-24481

SECURITY UPDATE: heap information disclosure in PSD channel decoder - debian/patches/CVE-2026-24481.patch: initialize pixel buffer with zeros in ReadPSDChannelZip to prevent heap memory leak - CVE-2026-24481...

MINI-GRQ5-WFHJ-W6W6

Bulletin has no description...

MINI-8QG8-WF36-9HGR

Bulletin has no description...

CVE-2026-32454 WordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issue affects Avada Core: from n/a through 5.15.0...

CVE-2026-32450

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through = 1.0.7...

MINI-RHJ5-44W6-VJM3

Bulletin has no description...

MINI-V366-3536-F347

Bulletin has no description...

MINI-QH9V-69H6-585R

Bulletin has no description...

MINI-6894-H652-478P

Bulletin has no description...

MINI-782X-X693-35X8

Bulletin has no description...

MINI-RMGQ-MGG4-7QW8

Bulletin has no description...

MINI-5993-4WCV-82H8

Bulletin has no description...

MINI-3W6J-QFVJ-V8GQ

Bulletin has no description...

MINI-36XF-64HH-WH22

Bulletin has no description...

MINI-3WJ2-9788-V5J9

Bulletin has no description...

PT-2026-25306

Name of the Vulnerable Software and Affected Versions Liton Arefin Master Addons for Elementor versions through 2.1.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the...

PT-2026-25298

CVE-2026-32454 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issue affects Avada Core https://t.co/axBxa96sWp...