CVE-2026-34082

Dify is an open-source LLM app development platform. Prior to 1.13.1, the method "DELETE /console/api/installed-apps//conversations/" has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue...

WordPress plugin Fluent Forms has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

data.all security vulnerabilities

data.all is an open source development framework from data-dot-all open source. A security vulnerability exists in data.all that stems from inconsistent authorization permissions that could allow external participants with authenticated accounts to perform restricted operations on data sets and...