CVE-2026-28116 WordPress Progress Planner plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progress Planner: from n/a through 1.9.0...

WordPress Progress Planner plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hongdo in WordPress Plugin Progress Planner versions = 1.9.0...

CVE-2026-28116: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progress Planner: from n/a through 1.9.0...

PT-2026-45748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progress Planner: from n/a through 1.9.0...

WordPress plugin Progress Planner has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-45410

TREK is a collaborative travel planner. Prior to 3.0.18, early return on missing user during login flow allowed an attacker to enumerate valid user accounts via response timing discrepancy. When an email address existed in the database, the backend performed a bcrypt password comparison before...

PwnGPT-Automation

PwnGPT Caputre the flag with Large Language Models. Constructe...

gerri (1.0.0), ia-planner-jerson (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2026-48710 via starlette (0.41.2)

starlette PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - gerri 1.0.0 - ia-planner-jerson =0.1.0, =0.1.0, =1.6.52, =25.4.0, =0.5.4, =1.1.1, =0.0.74, =0.0.75 Source cves: CVE-2026-48710 Source advisor...

GenAI-Driven Threat Detection with Microsoft Security Copilot

Defending against today's increasingly sophisticated cyberattacks requires security analysts to continuously translate evolving attacker tradecraft into detection logic. This places defenders in a reactive posture, requiring constantly updated expertise across an increasingly fragmented security...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.0-alpha2) +2 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =2.1.0, =2.1.1 Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.0-alpha2) +2 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =2.1.0, =2.1.1 Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the SQL code generation process. An attacker can execute arbitrary code on TaskManagers by submitting specially crafted SQL queries that exploit improper escaping of user-controlled strings in generated Java...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: MEND:CVE-2026-35194...

academic-metrics (>=0.1.0b0, <=1.0.99), chaincomposer (>=0.1.2, <=0.1.8) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.9)

langchain-openai PYPI version 0.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - academic-metrics =0.1.0b0, =0.1.2, =0.1.0, =0.2.0 - ia-planner-jerson-gpt 0.1.0 - okazaki 0.4.6 Source cves: CVE-2026-41488 Sour...