WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion vulnerability

Authenticated Custom+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event Solution versions = 4.1.22...

GHSA-6HQM-HM2V-3P2P vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

CVE-2026-67319 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

GHSA-68JP-44VC-2X5H vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

GHSA-9WX3-P993-35VP vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

WordPress FluentCart plugin <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion vulnerability

Authenticated Custom+ Arbitrary File Deletion vulnerability discovered by Wordfence PRISM in WordPress Plugin FluentCart versions = 1.6.2...

WordPress Persistent Login plugin <= 3.1.0 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin WordPress Persistent Login versions = 3.1.0...

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: langfuse, lerna, nextcloud-server, opensearch-dashboards-fips, prism, gitlab-rails-ce, wazuh-dashboard, arangodb, opensearch-dashboards, semaphore, jitsucom-jitsu, wazuh-dashboard-fips, langfuse-fips, redisinsight, azurite, gitlab-rails-ce-fips,...

GHSA-4WW2-RJH2-XPV9 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, jitsucom-jitsu, langfuse, nextcloud-server, kubeflow-centraldashboard, lerna...

WordPress Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'lsddisplstyle' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Listdom versions = 5.8.1...

WordPress User Profile Builder plugin <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Profile Builder versions = 4.0.0...

WordPress Events Manager plugin <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter vulnerability

Reflected Cross-Site Scripting via 'headerformat' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Events Manager versions = 7.4.0.1...

PRISM: Lightweight Enclave Isolation with Prismatic Capabilities

Trusted execution environments TEEs protect sensitive code and data from external interference, but lack inherent memory safety. CHERI can enforce spatial memory safety at the object level. Attempts to establish a TEE using CHERI primitives suffer from 1 expensive capability revocation operations...

WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion vulnerability

Authenticated Administrator+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin Events Manager versions = 7.3.7.4...

WordPress Media Sweep plugin <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'fields' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Media Sweep – WordPress Media Cleaner versions = 1.1.3...