CVE-2026-110025

A flaw in slackero phpwcms (versions up to 1.9.49/1.12.3) allows for unrestricted upload via remote exploitation. The vulnerability exists in the Extension Check component, specifically within the file include/inc_front/content/cnt23.article.inc.php. Attackers can trigger this by manipulating the...

CVE-2026-110025 slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/incfront/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POSTname causes unrestricted upload. The attack can be initiated...

CVE-2026-15425: Improper Neutralization of Input During Web Page Generation

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...