CVE-2026-16054

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...

EUVD-2026-53722

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...

EUVD-2026-53676

H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial o...

UBUNTU-CVE-2026-19027

The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...

PT-2026-68391

Name of the Vulnerable Software and Affected Versions Tourmaster versions prior to 5.4.9 Description An issue exists where the plugin writes order and booking exports to a fixed, predictable file within a publicly accessible directory. Due to a lack of access control, unauthenticated users can...

PDFium DoS

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause service interruptions using a specially created font file...

SUSE SLED15: evince / evince-devel / evince-lang / evince-plugin-djvudocument / etc (SUSE-SU-2026:3512-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3512-1 advisory. This update for evince fixes the following issue: - CVE-2026-63729: texlive: heap use-after-free in synctexparser.c via...

PT-2026-68802

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.3 Statamic versions prior to 6.24.2 Description Public frontend forms fail to enforce the file upload restrictions configured in the Control Panel. This allows an unauthenticated visitor to upload file types tha...

PT-2026-68569

Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...

CVE-2025-15678: Improper Neutralization of Input During Web Page Generation

The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files Author by default, allowing them to upload a file containing malicious JavaScript that executes when the file is accessed, leading to Stored Cross-Site...

PT-2026-68603

Name of the Vulnerable Software and Affected Versions e2pdf versions prior to 1.32.41 Description An unauthenticated Local File Inclusion LFI issue exists in the e2pdf plugin. Local File Inclusion is a vulnerability that allows an attacker to read files on the server that are not intended to be...

PT-2026-68447

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An Event Publisher output adapter logs irrelevant properties without sufficient validation or sanitization of the property values. An attacker with access to the...

PT-2026-68978

Impact Public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow through a form's assets or files field. For assets fields, files could be stored on a public,...

PT-2026-68771

Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.09.3 Description Endpoints in the local HTTP server do not adequately constrain requested media and built-in data paths. This allows scripts served from shared decks, or malicious websites using an origin-check bypass...

PT-2026-68415

Name of the Vulnerable Software and Affected Versions TinyAGI version 0.0.20 Description A remote file inclusion issue exists in the buildSystemPrompt function within the packages/server/src/routes/agents.ts file. This allows a remote attacker to include arbitrary files through manipulation of th...

PT-2026-68568

Name of the Vulnerable Software and Affected Versions Agricola versions prior to 1.22.0 Description The Agricola - Agriculture & Organic Farm Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...

PT-2026-68592

Name of the Vulnerable Software and Affected Versions W3 Total Cache versions prior to 2.10.3 Description An unauthenticated path traversal issue exists in the W3 Total Cache plugin. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web...

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

CVE-2026-19026 Nbit filter NULL/short parameter-array dereference

H5Zfilternbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the...

CVE-2026-34966 Gitea prior to 1.27.0 SSRF via Migration URI Fetch Bypass

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get without a custom DialContext. Attackers can supply...