PT-2026-107565

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-103681: Improper Access Control

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields...

CVE-2026-107207: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

PT-2026-107398

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields...

CVE-2026-32577

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-32572

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32577

The Frontend File Manager plugin for WordPress (versions

CVE-2026-32577 WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-32577 WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

EUVD-2026-93238

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

EUVD-2026-93235

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

[SECURITY] Fedora 45 Update: ocaml-psmt2-frontend-0.4.0-33.fc45

This package contains a library to parse and typecheck a conservative extension of the SMT-LIB 2 standard with prenex polymorphism...

CVE-2026-32577: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-32572: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

PT-2026-106400

Name of the Vulnerable Software and Affected Versions WP User Frontend Pro versions prior to 4.2.14 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...

PT-2026-106403

Name of the Vulnerable Software and Affected Versions Frontend File Manager versions 23.6 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page...

Linux Distros Unpatched Vulnerability : CVE-2026-93323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversiz...