3267 matches found
CVE-2026-25466
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
EUVD-2026-48179
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57767 WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57767 WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57767
WP Google Maps Pro plugin <= 10.1.02 has an unauthenticated Cross Site Scripting (XSS) vulnerability. Affects versions
CVE-2026-25466 WordPress WP Go Maps plugin <= 10.1.04 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
EUVD-2026-48150
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
CVE-2026-25466 WordPress WP Go Maps plugin <= 10.1.04 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
CVE-2026-25466
CVE-2026-25466 affects the WordPress WP Go Maps plugin (vulnerable:
PT-2026-63837
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
PT-2026-63808
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
CVE-2026-57767: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-65763: Improper Neutralization of Input During Web Page Generation
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 - Improper validation of user inputs lead to a reflective XSS vulnerability...
PT-2026-64040
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper validation of user inputs lead to a reflective XSS vulnerability...
CVE-2026-25466: Missing Authorization
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
WordPress WP Go Maps plugin <= 10.1.05 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin WP Go Maps versions = 10.1.05...
Linux Distros Unpatched Vulnerability : CVE-2026-59880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit...
CVE-2026-41252 xrdp: lib_palette_update Heap Buffer Overflow & RCE
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...
PT-2026-61645
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when CONFIG BPF LSM=y is set but the BPF LSM is not explicitly enabled at boot time. In this state, the BPF inode security blob offset bpf lsm blob sizes.lbs inode is not...
GHSA-398H-7F66-3H4P open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters
Summary A namespaced FeatureFlagSource or InProcessConfiguration resource can be referenced cross-namespace via the openfeature.dev/featureflagsource annotation using the documented NAMESPACE/NAME syntax. The operator resolves the referenced resource cluster-wide and materializes its contents env...