CLSA-2026-1792161951 TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792161950 TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

CLSA-2026-1792161949 TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.18-tuxcare.1...

CLSA-2026-1792161948 TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.14.8-tuxcare.1...

CLSA-2026-1792161946 TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.16.7-tuxcare.1...

CLSA-2026-1792160972 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792160971 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792160970 TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792160967 TuxCare security update for @babel/plugin-proposal-numeric-separator (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792160966 TuxCare security update for @babel/plugin-proposal-nullish-coalescing-operator (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792160961 TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by azqzazq1 in WordPress Plugin Passster versions = 4.3.18...

CVE-2026-109930

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

RLSA-2026:83544 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION CVE-2026-15815 For more details about the security issues, including the impact, a...

grafana security update

An update is available for grafana. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

CVE-2026-107648

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.1.5 . The root cause is insufficient input sanitization and output escaping within several parameters, including action, function, plugin, p...

EUVD-2026-102838

The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert any attachment to its backup copy and to permanently delete that backup and the plugin's generated WebP derivatives,...

CVE-2026-110029

The Squeeze WordPress plugin (versions before 1.8.1 ) is vulnerable to an authorization bypass due to a missing capability check on an AJAX action . This flaw allows authenticated users with Subscriber privileges or higher to revert any attachment to its backup copy. Furthermore, attackers can pe...

CVE-2026-109930 MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

CVE-2026-109930 MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...