267994 matches found
CVE-2026-109193: Improper Neutralization of Input During Web Page Generation
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' e.g. hpcustomlink' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-109388: Improper Neutralization of Input During Web Page Generation
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-74923: Exposure of Sensitive Information to an Unauthorized Actor
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed...
PT-2026-124438
TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-124527
TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-124434
TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.18-tuxcare.1...
PT-2026-115921
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...
PT-2026-124563
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-124564
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-124539
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.14.8-tuxcare.1...
PT-2026-124543
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-124557
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.12.18-tuxcare.1...
PT-2026-124555
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.16.7-tuxcare.1...
PT-2026-124544
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-125578
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-124566
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
PT-2026-124580
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-124584
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.2...