PT-2026-46323

Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...

PT-2026-46359

Unauthenticated Local File Inclusion in Medeus = 1.14 versions...

PT-2026-46334

Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...

PT-2026-46352

Unauthenticated Local File Inclusion in Mission = 1.22 versions...

PT-2026-46358

Unauthenticated Local File Inclusion in Top Dog = 1.0.5 versions...

PT-2026-46348

Subscriber Privilege Escalation in Genemy = 1.6.6 versions...

PT-2026-46332

Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme = 1.2.2 versions...

PT-2026-46362

Unauthenticated Local File Inclusion in Granola = 1.13 versions...

PT-2026-46340

Unauthenticated Local File Inclusion in Especio = 1.0 versions...

PT-2026-46324

Unauthenticated Local File Inclusion in Rosaleen = 2.8 versions...

PT-2026-46321

Unauthenticated Cross Site Scripting XSS in Qreatix = 1.9.4 versions...

PT-2026-46320

Unauthenticated Local File Inclusion in Geya = 1.15 versions...

PT-2026-46327

Unauthenticated Local File Inclusion in AirSupply = 2.0.0 versions...

PT-2026-46361

Unauthenticated Local File Inclusion in Gamic = 1.15 versions...

PT-2026-46363

Unauthenticated Local File Inclusion in Printo = 1.11 versions...

PT-2026-46377

Unauthenticated Local File Inclusion in Etude = 1.6 versions...

PT-2026-46331

Unauthenticated Local File Inclusion in MaxiNet = 1.2.10 versions...

PT-2026-46343

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

wordpress plugin School Management 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...