CLEANSTART-2025-RR05020 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2024-43484 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-OA94377 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2024-43483 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-KL68323 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2024-38081 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-BH85010 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2024-21409 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-FE50155 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-36049 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-IL60395 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2023-29331 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-YT42568 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-24936 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2024-HC22129 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2023-24897 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2024-SK69505 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2023-24895 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2024-TX40015 .NET Framework Remote Code Execution Vulnerability

CVE-2022-41089 affects multiple packages. . See references for individual vulnerability details...

CVE-2026-88999

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-88999 Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

EUVD-2026-90501

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-88999

The Redux Framework plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 4.5.14 . The root cause is a failure to properly verify user authorization for specific actions. Authenticated attackers with subscriber-level access and above can exploit this to...

CVE-2026-88999 Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-88999 Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

EUVD-2026-90465

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the...

CLEANSTART-2026-UC97457 Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics

Security vulnerability affects the apache-nifi package. The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics...

PT-2026-103667

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the...

CVE-2026-88999: Missing Authorization

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...