267931 matches found
PT-2026-134025
TuxCare rebuilt @babel/plugin-proposal-optional-catch-binding to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-133981
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-134297
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-133929
TuxCare rebuilt @babel/plugin-transform-arrow-functions to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-134026
TuxCare rebuilt @babel/plugin-proposal-optional-catch-binding to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-134300
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-118676
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with maliciou...
PT-2026-133863
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-133923
TuxCare rebuilt @babel/plugin-transform-arrow-functions to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133802
TuxCare rebuilt @babel/plugin-transform-optional-catch-binding to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-118686
Name of the Vulnerable Software and Affected Versions Cherry Plugin for WordPress versions prior to 1.2.7 Description An issue allows unauthenticated attackers to download arbitrary files. This occurs because the script passes input directly to the readfile function without proper validation...
PT-2026-133854
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-118308
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are...
PT-2026-133407
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-133985
TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-134376
TuxCare rebuilt @babel/plugin-syntax-decorators to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-134362
TuxCare rebuilt @babel/plugin-syntax-jsx to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-119446
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...