CVE-2026-112844 WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26...

PT-2026-122594

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse section and decode name that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can send truncated record headers or RDATA,...

Linux Distros Unpatched Vulnerability : CVE-2026-116013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parsesection and decodename that fails to check resource record lengt...

WordPress All-in-One Video Gallery cross-site scripting vulnerability

WordPress All-in-One Video Gallery versions 4.9.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Infomaniak Network VOD Infomaniak Cross-site Scripting Vulnerability

Infomaniak Network VOD: Infomaniak versions 1.5.14 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

WordPress Ad Inserter cross-site scripting vulnerability

WordPress Ad Inserter versions 2.8.18 and earlier contain a cross-site scripting vulnerability. This flaw stems from improper input handling during web page generation and makes it susceptible to reflected cross-site scripting attacks...

NetScaler ADC and Gateway 14.1-73.36 Check

NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain an improper input validation vulnerability that permits unauthenticated command execution. The supplied offline tool assesses reported builds against applicable fixed versions...

Noah Hearle Cross-site Scripting Vulnerability

Noah Hearle: Versions 2.6 and earlier of “We’re Open” contain a cross-site scripting vulnerability caused by improper input handling during web page generation; this makes them susceptible to reflected XSS attacks...

Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88774-check Standal...

CVE-2026-112863 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0...

CVE-2026-112863 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0...

CVE-2026-112863

The Hogash KALLYAS WordPress theme is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to the improper neutralization of input during web page generation . This vulnerability affects KALLYAS versions up to and including 4.25.0 . Exploitation of this flaw could allow an attacker to ex...

Exploit for CVE-2026-112900

Python Pillow Critical RCE Flaw CVE-20...

CVE-2026-112835

The VikRentCar WordPress plugin (versions

CVE-2026-112835 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.8...

CVE-2026-112835 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.8...

Chromium CVE-2026-113289: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-113264: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-113252: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-113249: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...