295344 matches found
PT-2026-124533
TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-124550
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
PT-2026-124548
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-124555
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.16.7-tuxcare.1...
PT-2026-124557
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.12.18-tuxcare.1...
PT-2026-124539
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.14.8-tuxcare.1...
PT-2026-124544
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-124543
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-124547
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-115579
Name of the Vulnerable Software and Affected Versions MAIO WordPress plugin versions prior to 7.3.22 Description Insufficient access restrictions to analytics data allow unauthenticated attackers to retrieve the stored crawl-analytics log. This occurs because the plugin treats a credential value...
PT-2026-124510
TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-124576
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CVE-2026-109193: Improper Neutralization of Input During Web Page Generation
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' e.g. hpcustomlink' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-109388: Improper Neutralization of Input During Web Page Generation
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-74923: Exposure of Sensitive Information to an Unauthorized Actor
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed...
CVE-2026-104932: Deserialization of Untrusted Data
The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replaceall function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain...
CVE-2026-104001: Improper Control of Generation of Code
The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running...
PT-2026-124438
TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.21.0-tuxcare.4...