PT-2026-118685

Name of the Vulnerable Software and Affected Versions JavaMelody versions prior to 1.60.0 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject scripts into victims' browsers. This occurs when crafted values are supplied to the graph parameter of the...

PT-2026-118686

Name of the Vulnerable Software and Affected Versions Cherry Plugin for WordPress versions prior to 1.2.7 Description An issue allows unauthenticated attackers to download arbitrary files. This occurs because the script passes input directly to the readfile function without proper validation...

Can Quantum Layers Offer Performance and Security Advantages in Vision-Language Models?

As quantum computing moves from the noisy intermediate-scale quantum NISQ era toward early fault-tolerant quantum computing EFTQC, quantum-enhanced AI is shifting from a conceptual idea to experimental research. Quantum components are expected to extend the capabilities of existing AI systems, ye...

PT-2026-118674

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...

PT-2026-118243

The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

PT-2026-118241

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.20 Roundcube Webmail versions 1.7.x prior to 1.7.5 Description Remote authenticated attackers can perform IMAP command injection by injecting CRLF sequences into the uid parameter of the 'mail/headers' a...

PT-2026-118295

Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding in github.com/corazawaf/coraza...

PT-2026-118468

Configurable Reports block for Moodle moodle-block configurablereports before 5.3.1 contains an sql injection vulnerability in report sql::prepare sql via the filter var request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTER VAR%% placeholder can...

PT-2026-120311

Summary Apostrophe's cross-domain session migration emits a single-use session token as a URL query parameter and stores it in the Mongo cache. Any client that presents the token silently adopts the target user's full session including passport.user with no credentials. Details...

PT-2026-118678

Name of the Vulnerable Software and Affected Versions ChurcHope theme for WordPress versions prior to 2.2 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This is achieved by supplying directory traversal sequences to the file parameter of the...

PT-2026-118679

Name of the Vulnerable Software and Affected Versions Aspose Doc Exporter plugin for WordPress versions prior to 2.0 Description An issue allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to the readfile function. This is achieved by sending GET requests to...

PT-2026-118672

Name of the Vulnerable Software and Affected Versions Custom Tables plugin for WordPress versions prior to 3.4.6 Description A reflected cross-site scripting issue exists that allows unauthenticated attackers to inject scripts into victims' browsers to steal cookies. This occurs via the unsanitiz...

PT-2026-118687

Name of the Vulnerable Software and Affected Versions EyeLock nano NXT version 3.05.1193 EyeLock nano NXT version 3.04.1108 EyeLock nano NXT version 3.03.944 EyeLock nano NXT version 3.01.646 Description Unauthenticated attackers can read arbitrary local system files due to a path traversal issue...

PT-2026-118680

Name of the Vulnerable Software and Affected Versions Aspose Importer & Exporter plugin for WordPress versions prior to 3.0 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This occurs because the file parameter is not properly sanitized. Attackers...

VulnCheck KEV: CVE-2012-20005

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...

VulnCheck KEV: CVE-2014-125132

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with maliciou...

VulnCheck KEV: CVE-2016-20103

Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...

PT-2026-118673

Name of the Vulnerable Software and Affected Versions K-news plugin for WordPress versions prior to 1.1.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject scripts by providing unsanitized input. Attackers can send GET requests to the endpoint...

PT-2026-120292

Summary Form and login CAPTCHA verification interpolate the user-supplied widget token unencoded into the server-side verification URL/body, allowing a crafted token to inject query parameters into the reCAPTCHA/hCaptcha verify request. Details - packages/form/lib/recaptcha.js:39 — recaptchaUri =...

PT-2026-118677

Name of the Vulnerable Software and Affected Versions NativeChurch theme for WordPress versions prior to 1.6.2 Description An issue allows unauthenticated attackers to download arbitrary files via the 'download.php' endpoint. By sending GET requests containing directory traversal sequences in the...