PT-2026-133917

TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

PT-2026-133877

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-133881

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

PT-2026-133875

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-133879

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.24.5-tuxcare.2...

PT-2026-133882

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-118323

A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api plugins.php of the component Plugin Installer. Such manipulation of the argument plugin file leads to unrestricted upload. The attack may ...

PT-2026-118674

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...

PT-2026-118672

Name of the Vulnerable Software and Affected Versions Custom Tables plugin for WordPress versions prior to 3.4.6 Description A reflected cross-site scripting issue exists that allows unauthenticated attackers to inject scripts into victims' browsers to steal cookies. This occurs via the unsanitiz...

PT-2026-118680

Name of the Vulnerable Software and Affected Versions Aspose Importer & Exporter plugin for WordPress versions prior to 3.0 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This occurs because the file parameter is not properly sanitized. Attackers...

PT-2026-118681

Name of the Vulnerable Software and Affected Versions Aspose PDF Exporter plugin for WordPress versions prior to 2.0 Description An issue exists where unauthenticated attackers can download files by exploiting a path traversal flaw. This occurs because the file parameter passed to the readfile...

PT-2026-134293

TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-134294

TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-134379

TuxCare rebuilt @babel/plugin-syntax-decorators to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-134367

TuxCare rebuilt @babel/plugin-syntax-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-134374

TuxCare rebuilt @babel/plugin-syntax-decorators to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-134378

TuxCare rebuilt @babel/plugin-syntax-decorators to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-133913

TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-133928

TuxCare rebuilt @babel/plugin-transform-arrow-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CVE-2012-20005: Improper Neutralization of Input During Web Page Generation

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...