EUVD-2026-89726

A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lists using profile attributes they are not permitted to view directly, resulting in unauthorized information disclosure...

CVE-2026-102587

A flaw exists in Moodle where user list filters fail to enforce visibility restrictions on profile fields. An authorized user with manager privileges can exploit this by filtering user lists using profile attributes they are not permitted to view directly. This results in unauthorized information...

CVE-2026-93908 Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-89683

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-93908

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.3 . The flaw exists in the 'before_price_text' parameter due to insufficient input sanitization and output escaping. Specif...

CVE-2026-93908 Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.3.1 Security Update

Red Hat Edge Manager Version 1.3.1 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.3.1 Security Update

Red Hat Edge Manager Version 1.3.1 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

WordPress Real Estate Manager – Property Listing and Agent Management plugin <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Real Estate Manager versions = 7.3...

WordPress Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms plugin <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Tarcísio Luchesi De Almeida Silva Poystick in WordPress Plugin Frontend Post Submission Manager Lite versions = 1.3.4...

ROOT-APP-NPM-CVE-2024-29415 CVE-2024-29415 in ip - Patched by Root

Root has patched CVE-2024-29415 in the ip package for Root:npm. Multiple fixed versions available...

CVE-2026-88791

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...

ROOT-APP-NPM-CVE-2026-26956 CVE-2026-26956 in vm2 - Patched by Root

Root has patched CVE-2026-26956 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-37903 CVE-2023-37903 in vm2 - Patched by Root

Root has patched CVE-2023-37903 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44009 CVE-2026-44009 in vm2 - Patched by Root

Root has patched CVE-2026-44009 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24118 CVE-2026-24118 in vm2 - Patched by Root

Root has patched CVE-2026-24118 in the vm2 package for Root:npm. Multiple fixed versions available...

EUVD-2026-89613

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...

CVE-2026-88791

The Safe Redirect Manager WordPress plugin, in versions before 2.3.0 , is vulnerable to an open redirect flaw. The root cause is improper validation of the redirect destination when a wildcard redirect rule to an absolute URL is configured. This allows unauthenticated attackers to redirect site v...

CVE-2026-88791 Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...

CVE-2026-88791 Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...