16337 matches found
WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Supakiad S. m3ez in WordPress Plugin RepairBuddy versions = 4.1223...
WordPress Kirki plugin < 6.2.3 - Editor+ Stored XSS via Font Zip Upload vulnerability
Editor+ Stored XSS via Font Zip Upload vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Kirki versions 6.2.3...
WordPress Quiz And Survey Master plugin < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability
Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Quiz And Survey Master versions 11.2.4...
CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...
EUVD-2026-63310
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-66605 WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...
CVE-2026-66583 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Tonda Core versions 2.6...
WordPress Tourmaster plugin < 5.4.9 - Unauthenticated Sensitive Data Disclosure via Order Export vulnerability
Unauthenticated Sensitive Data Disclosure via Order Export vulnerability discovered by WPscan in WordPress Plugin TourMaster Plugin versions 5.4.9...
WordPress Visualizer plugin < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure vulnerability
Contributor+ Cross-User Chart Configuration Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin Visualizer versions 4.0.7...
WordPress Extra Product Options Builder for WooCommerce plugin < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload vulnerability
Unauthenticated Customer File Disclosure via getpublicfileupload vulnerability discovered by Farid Narimanov in WordPress Plugin Extra Product Options Builder for WooCommerce versions 1.2.176...
WordPress Saitama Addon Pack plugin <= 1.0.8 - Contributor+ Stored XSS via Post Meta vulnerability
Contributor+ Stored XSS via Post Meta vulnerability discovered by testoun in WordPress Plugin Saitama Addon Pack versions = 1.0.8...
WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability
Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...
RLSA-2026:56973 Important: mysql:8.4 security, bug fix, and enhancement update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026...
PT-2026-78998
Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n/a through 3.2.8...
RLSA-2026:56936 Important: mysql:8.4 security, bug fix, and enhancement update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026...
mysql:8.4 security, bug fix, and enhancement update
An update is available for module.mysql, module.mecab-ipadic, mysql, mecab-ipadic, mecab, module.mecab. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is ...
CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...