3060 matches found
CVE-2026-28178
Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-7529
The CVE describes a vulnerability in the wiseCampaign – WooCommerce Conversions Made Easy WordPress plugin (versions '__return_true'. This allows unauthenticated attackers to read and modify plugin settings and assets (banner, stockbar, core settings, background uploads) without nonce or capabil...
CVE-2026-16993 DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web server that does not honor .htaccess such as nginx an unauthenticated visitor...
CVE-2026-68078
The CVE describes a DoS risk in Apache Qpid Broker-J caused by an inability to govern the maximum number of transfer frames per incoming delivery. This weakness allows an authenticated attacker to trigger excessive resource usage, potentially degrading service. Affected versions are up to 10.0.1;...
CVE-2026-68077
CVE-2026-68077 affects Apache Qpid Broker-J prior to 10.1.0, where an authenticated attacker can craft a disposition frame with large or illegal ranges, triggering excessive CPU usage due to naive range handling and causing a denial of service. The issue is mitigated by upgrading to version 10.1....
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions 6.54.1...
CLSA-2026-1784769619 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 4.1.0-tuxcare.2...
CLSA-2026-1784596264 TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 47 io.netty packages to address 8 CVEs. Fixed in 4.1.117.Final-tuxcare.2...
CLSA-2026-1784164029 TuxCare security update for io.netty (1 CVE)
TuxCare rebuilt 46 io.netty packages to address 1 CVE. Fixed in 4.1.75.Final-tuxcare.2...
CLSA-2026-1784164100 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 3 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.3...
CLSA-2026-1783904631 TuxCare security update for tar (3 CVEs)
TuxCare rebuilt tar to address 3 CVEs. Fixed in 6.1.15-tuxcare.1...
CLSA-2026-1783126876 TuxCare security update for @angular (5 CVEs)
TuxCare rebuilt 18 @angular packages to address 5 CVEs. Fixed in 5.1.0-tuxcare.3...
CLSA-2026-1781744133 TuxCare security update for 40 packages (1 CVE)
TuxCare rebuilt 40 packages to address 1 CVE. Fixed in 10.1.42-tuxcare.4...
CLSA-2026-1781225629 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 18 @angular packages to address 1 CVE. Fixed in 5.1.0-tuxcare.1...
CLSA-2026-1780707089 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 19 @angular packages to address 1 CVE. Fixed in 10.1.0-tuxcare.1...
CLSA-2026-1780966310 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 5.1.0-tuxcare.1...