OPENSUSE-SU-2026:11561-1 chromedriver-151.0.7922.169-1.1 on GA media

These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed...

Debian dsa-6458 : gir1.2-gst-plugins-bad-1.0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6458 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6458-1 [email protected] https://www.debian.org/securit...

OPENSUSE-SU-2026:11565-1 libecpg6-18.6-1.1 on GA media

These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-72818

creationtimestamp| type| source ---|---|--- 2026-08-20 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdyg4ok727 2026-08-21 00:31:12+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkj2hszzn25...

CVE-2026-66592

creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkgqbuq2c 2026-08-20 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7o3igv2m...

WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Social Media & Share Icons versions = 2.9.9...

CVE-2026-66601

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66600

Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...

EUVD-2026-63342

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66600 WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability

Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...

EUVD-2026-63341

Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66600

Media Library Assistant WordPress plugin (versions ≤ 3.39) allows users with the Author role to upload arbitrary files, potentially enabling remote code execution. CVSS 9.1 (Critical) reflects network-exploitable, low-complexity attack with full confidentiality, integrity, and availability impact...

CVE-2026-66601 WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66601

Subscriber-level authenticated users can inject arbitrary JavaScript into the Media Library Assistant plugin (≤3.39) admin interface, enabling session hijacking or data theft. CVSS 6.5 (MEDIUM). Update to version 3.40 or later; no in-the-wild exploitation reported. See: https://patchstack.com/dat...

CVE-2026-17153

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...

CVE-2026-17153

AI Agent by SiteGround plugin (≤1.2.7) has a missing authorization check on its /generate-content REST endpoint, allowing authenticated Contributor-level users to upload images to the media library despite lacking the upload_files capability. The sg_ai_studio_gutenberg_nonce is issued to any bloc...

CVE-2026-17153 AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...

UBUNTU-CVE-2026-75144

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...

CVE-2026-55192

creationtimestamp| type| source ---|---|--- 2026-08-19 23:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthv66u36b2f...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions 14.0.4...