EUVD-2026-60940

Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

EUVD-2026-60818

Editor PHP Object Injection in TaxoPress = 3.51.0 versions...

EUVD-2026-60816

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme = 2.17.22 versions...

EUVD-2026-60812

Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...

EUVD-2026-60810

Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...

EUVD-2026-60809

Subscriber Broken Authentication in User Registration = 5.2.6 versions...

EUVD-2026-60804

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

EUVD-2026-60776

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

EUVD-2026-60775

Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...

EUVD-2026-60770

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

EUVD-2026-60936

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

EUVD-2026-60932

Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...

EUVD-2026-60931

Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...

EUVD-2026-60929

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...

EUVD-2026-60926

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

EUVD-2026-60915

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

EUVD-2026-60904

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway = 2.11.14 versions...

EUVD-2026-60896

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...

EUVD-2026-60761

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7...

EUVD-2026-60685

Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...