acfe_module_form_front.render Plugin Code Execution

Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

Exploit Title: Joomla 2.9.99.4 -Unauthenticated Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Jooml...

CVE-2026-19378 code-projects Task Management System CommentSave.php cross site scripting

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

CVE-2026-19364

The CVE concerns itsourcecode Hospital Management System 1.0. The vulnerability is in an unknown function in /viewdoctorconsultancycharge.php where manipulating the delid argument leads to SQL injection. Attacks can be performed remotely, and public disclosure of the exploit is noted. The connect...

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

EUVD-2026-54879

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18465 WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

WS-2026-0049

league/commonmark's AttributesExtension left a form feed U+000C inside attribute names because PHP's default trim charlist omits the byte that PCRE's \s matches. Browsers treat U+000C as whitespace between attributes, so a name written as onclick="..." reached the browser as a genuine onclick...

PT-2026-69275

Name of the Vulnerable Software and Affected Versions WP MAPS PRO versions prior to 6.1.3 Description An issue exists where a capability check is missing in an AJAX action available to unauthenticated users. The plugin fails to properly validate a user-controlled path used in a file inclusion...

Kitty PHP HTTP Polling Drop-in

Writes a PHP script that polls listeners/multi/reversehttppolling. Deploy on a web host and trigger via cron, include, or HTTP request. from kittysploit import from lib.c2.agentinstaller import buildphppollingdropin from lib.c2.beaconprofile import BeaconProfile class ModuleBackdoor: """PHP drop-...

CVE-2026-16267 Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attackers to inject arbitrary PHP objects...

PT-2026-69168

Name of the Vulnerable Software and Affected Versions Newsletters WordPress plugin versions prior to 4.16 Description An issue exists where the software fails to restrict the classes allowed during the unserialization of values received from public form submissions. This allows unauthenticated...

CVE-2026-16267: Deserialization of Untrusted Data

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attackers to inject arbitrary PHP objects...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the REST API error handler returning unsanitized PHP error messages that include the full filesystem path. An attacker can obtain sensitive system path...

CVE-2026-70561

TestLink 1.9.20 and earlier is affected by an insecure direct object reference in the attachmentdownload.php endpoint. An authenticated user, including low-privilege guests, can read arbitrary attachments by supplying any integer attachment ID, bypassing per-project access checks. Attackers can e...

WordPress: WordPress 7.1 Media Processing Race Enables Persistent PHP File Write and Author-to-RCE

A race condition vulnerability was discovered in WordPress 7.1 that allowed authenticated users with Author role to achieve persistent arbitrary PHP execution. The vulnerability involved exploiting media finalization, URL-media sideload, and image post-processing flows to generate persistent imag...

CVE-2026-62996

creationtimestamp| type| source ---|---|--- 2026-08-07 16:35:38+00:00| published-proof-of-concept| https://github.com/smarty-php/smarty/security/advisories/GHSA-rjhh-76wf-8xmw...

CVE-2026-62996

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...

CVE-2026-62992

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 5.8.2 and 4.5.7 on the 4.x line, Security::checkDir does not fully resolve symbolic links before validating that a requested path lies within a configured secure directory. A...

UBUNTU-CVE-2026-62996

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...