CVE-2026-73532

CVE-2026-73532 affects Fluent Forms Pro 6.2.7. A tampered plugin build from a decommissioned update server inserted a rogue file (libs/class-license-sync.php) loaded via require_once in fluentformpro.php, creating a backdoor REST API and persisting PHP files in mu-plugins and uploads. It also ins...

EUVD-2026-58112

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

CVE-2026-73533

Ninja Tables Pro 5.2.11 contains embedded malicious code introduced via a tampered plugin build served from a decommissioned update server. The rogue file app/Library/updater/NinjaTableDataSync.php creates a backdoor REST API endpoint, drops persistent PHP files in mu-plugins and uploads director...

CVE-2026-44649

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern accepts Remote-User Authelia and X-Authentik-Username Authentik HTTP headers to...