CVE-2026-7635

The CVE-2026-7635 entry concerns the coreActivity: Activity Logging for WordPress plugin for WordPress, affected up to version 3.0. The vulnerability arises from unsanitized PHP serialization in the User-Agent header stored to the logmeta table and later deserialized via maybe_unserialize() durin...

GHSA-FX98-8W93-4MXR Snipe-IT XSS Vulnerability

Snipe-IT before 4.6.14 has XSS, as demonstrated by logmeta values and the user's last name in the API...

PT-2019-11581

Name of the Vulnerable Software and Affected Versions: Snipe-IT versions prior to 4.6.14 Description: The issue allows for XSS, as demonstrated by log meta values and the user's last name in the "API". Recommendations: For versions prior to 4.6.14, update to version 4.6.14 or later to resolve the...