fr.cnieg.keycloak:attribute-login-provider (>=1.3.9, <=1.3.10), io.phasetwo.keycloak:keycloak-events (>=0.21, <=0.22) +20 more potentially affected by CVE-2026-9705 via org.keycloak:keycloak-services (22.0.5)

org.keycloak:keycloak-services MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.9, =0.21, =0.44, =0.46 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.16), com.github.vzakharchenko:cisco-radius-plugin (1.3.16) +24 more potentially affected by CVE-2026-9705 via org.keycloak:keycloak-services (16.0.0)

org.keycloak:keycloak-services MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.16 -...

com.github.vzakharchenko:keycloak-plugins (1.2.3), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.3) +14 more potentially affected by CVE-2026-9705 via org.keycloak:keycloak-services (9.0.3)

org.keycloak:keycloak-services MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.3 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.7), com.github.vzakharchenko:cisco-radius-plugin (1.3.7) +23 more potentially affected by CVE-2026-9705 via org.keycloak:keycloak-services (13.0.1)

org.keycloak:keycloak-services MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.7 -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=4.0.3-25.0, <=4.0.5-25.0) +23 more potentially affected by CVE-2026-9705 via org.keycloak:keycloak-services (25.0.6)

org.keycloak:keycloak-services MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =4.0.3-25.0, =4.0.3-25.0, =4.0.5-25.0...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.1, <=1.3.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.1, <=1.3.2) +21 more potentially affected by CVE-2026-9705 via org.keycloak:keycloak-services (12.0.1)

org.keycloak:keycloak-services MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1,...

CVE-2026-54866

Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button Elementor Plugin = 1.2.8 versions...

CVE-2026-116866

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...

EUVD-2026-112986

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...

CVE-2026-116866 WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...

CVE-2026-116866

The Extra Fees Plugin for WooCommerce (versions

CVE-2026-116866 WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...

CVE-2026-62131 WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Zoho Flow = 2.14.5 versions...

CVE-2026-62131 WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Zoho Flow = 2.14.5 versions...

EUVD-2026-112955

Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button Elementor Plugin = 1.2.8 versions...

CVE-2026-54866

The Razorpay Payment Button Elementor Plugin for WordPress, in versions

CVE-2026-54866 WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button Elementor Plugin = 1.2.8 versions...

CVE-2026-54866 WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button Elementor Plugin = 1.2.8 versions...

CVE-2026-80067

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stmlmsstep parameter passed to the stmlmsimportsampledata AJAX action,...

CVE-2026-80069

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...