267936 matches found
mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin
A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information qcinfo plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffe...
EUVD-2026-104088
The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment...
WordPress ElementsReady Addons for Elementor plugin <= 6.7.2 - Subscriber+ Plugin Settings Overwrite vulnerability
Subscriber+ Plugin Settings Overwrite vulnerability discovered by Stefan Spasic in WordPress Plugin ElementsReady Addons for Elementor versions = 6.7.2...
CVE-2026-89286
The FormFlow for GoHighLevel (GHL) WordPress plugin (versions through 1.0.0 ) is vulnerable to unauthenticated sensitive data disclosure. The application fails to restrict access to a log file stored within a publicly accessible uploads directory . An attacker can read this file to obtain connect...
CVE-2026-89286 FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
CVE-2026-89286 FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
CLSA-2026-1792384648 TuxCare security update for @babel/plugin-transform-block-scoped-functions (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792384645 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792384646 TuxCare security update for @babel/plugin-transform-block-scoped-functions (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792384647 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792384644 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792384642 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792384638 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792384639 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
CLSA-2026-1792384641 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792384637 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CLSA-2026-1792384640 TuxCare security update for @babel/plugin-transform-block-scoped-functions (1 CVE)
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792378056 TuxCare security update for @babel/plugin-syntax-typescript (2 CVEs)
TuxCare rebuilt @babel/plugin-syntax-typescript to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...