65983 matches found
EUVD-2026-24717
The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's loginlink shortcode in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on the 'prefix' attribute. This makes it possible for...
CVE-2026-33257
creationtimestamp| type| source ---|---|--- 2026-04-22 12:28:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3iqer7u32k 2026-04-27 06:39:56+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mkhhkzbwp2af...
CVE-2026-33261
creationtimestamp| type| source ---|---|--- 2026-04-22 12:15:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3hyghief2q...
CVE-2026-4132
creationtimestamp| type| source ---|---|--- 2026-04-22 11:16:16+00:00| published-proof-of-concept| Telegram/4Ce1p0rz1Dwr7V7nrROOlVFZDWJLAA0UiQHZa7V2KBLsc 2026-04-24 03:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk7lq65bhb24...
WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Link Library versions = 7.8.8...
CVE-2026-28684
A flaw was found in python-dotenv. A local attacker can exploit this by crafting a symbolic link, which the setkey and unsetkey functions in python-dotenv follow when rewriting .env files. This can lead to the overwriting of arbitrary files on the system. Mitigation Mitigation for this issue is...
CVE-2026-1913
The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's loginlink shortcode in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on the 'prefix' attribute. This makes it possible for...
EUVD-2026-24652
The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppwctabox' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user-supplied post meta values including 'ctaboxbuttonlink',...
CVE-2026-1913 Gallagher Website Design <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode Attribute
The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's loginlink shortcode in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on the 'prefix' attribute. This makes it possible for...
CVE-2026-1913
The Gallagher Website Design plugin for WordPress is affected by a Stored Cross-Site Scripting (XSS) vulnerability via the login_link shortcode, present in all versions up to and including 2.6.4. The issue stems from insufficient input sanitization and output escaping on the 'prefix' attribute, a...
CVE-2026-6023
creationtimestamp| type| source ---|---|--- 2026-04-22 08:46:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk34cmwggp2k 2026-04-22 09:15:31+00:00| seen| Telegram/4TzioWDgsVQC8RNZfmkg0C5nwkVRV-bYkkXJoHA6GlOJ-c 2026-04-22 10:23:24+00:00| seen|...
MAL-2026-2987 Malicious code in @bmg-web/bmg-external-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6373b00808251dd64521cfb1864a0bf382c5df23e976984dea8dbebf925bbb63 The package @bmg-web/bmg-external-link was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in @bmg-web/bmg-external-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6373b00808251dd64521cfb1864a0bf382c5df23e976984dea8dbebf925bbb63 The package @bmg-web/bmg-external-link was found to contain malicious code. Source: ossf-package-analysis...
CVE-2026-41664
creationtimestamp| type| source ---|---|--- 2026-04-22 08:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33lvtwi22e...
CVE-2026-40450
creationtimestamp| type| source ---|---|--- 2026-04-22 08:29:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33exhwe62n...
CVE-2026-41667
creationtimestamp| type| source ---|---|--- 2026-04-22 08:28:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33bs53k52h...
CVE-2026-22754
creationtimestamp| type| source ---|---|--- 2026-04-22 07:15:26+00:00| seen| Telegram/CS2dujevfXlHsF93idKXet0n8ytFBz1cdJm2cp5u6N6EQ 2026-04-22 08:53:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk34pcwgrk2p 2026-04-22 12:45:25+00:00| seen|...
Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries
Overview LiveOn Meet provided by Japan Media Systems Corporation is a web conferencing system. The installer of LiveOn Meet Client for Windows and the installer of Canon Network Camera Plugin insecurely load Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-32679 This...