mysql-mcp-server-pro-plus (>=0.2.3, <=0.3.0), workspace-mcp (>=1.2.0, <=1.4.2) potentially affected by CVE-2026-27124 via fastmcp (2.11.1)

fastmcp PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mysql-mcp-server-pro-plus =0.2.3, =1.2.0, =1.4.2 Source cves: CVE-2026-27124 Source advisory: OSV:GHSA-RWW4-4W9C-7733...

mysql-mcp-server-pro-plus (>=0.2.3, <=0.3.0), workspace-mcp (>=1.2.0, <=1.4.2) potentially affected by CVE-2025-64340 via fastmcp (2.11.1)

fastmcp PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mysql-mcp-server-pro-plus =0.2.3, =1.2.0, =1.4.2 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

WordPress Everest Forms Pro plugin <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field vulnerability

Unauthenticated Remote Code Execution via Calculation Field vulnerability discovered by hoshino in WordPress Plugin Everest Forms Pro versions = 1.9.12...

EUVD-2026-17275

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

jwt-pro (>=1.0.0, <=1.0.2), octo-onedrive (0.0.7) +3 more potentially affected by CVE-2026-34073 via cryptography (38.0.0)

cryptography PYPI version 38.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - jwt-pro =1.0.0, =0.3.2, =1.0.0, =1.0.3, =1.0.16 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

markitdown-pro (>=1.0.0, <=2.2.0), structured-sql-agent (0.1.0) potentially affected by CVE-2026-34070 via langchain-core (0.3.74)

langchain-core PYPI version 0.3.74 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - markitdown-pro =1.0.0, =2.2.0 - structured-sql-agent 0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

CVE-2026-3300

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

CVE-2026-3300

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

CVE-2026-3300 Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

CVE-2026-3300 Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

CVE-2026-3300

CVE-2026-3300 affects Everest Forms Pro for WordPress (versions

PT-2026-29180

Name of the Vulnerable Software and Affected Versions Everest Forms Pro versions prior to 1.9.13 Description Unauthenticated attackers can achieve remote code execution via PHP code injection in the Everest Forms Pro plugin for WordPress. The issue exists within the Calculation Addon's process...

WordPress plugin Everest Forms Pro has a code injection vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2026-3300: Improper Control of Generation of Code

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack

Threat actors with ties to Iran successfully broke into the personal email account of Kash Patel, the director of the U.S. Federal Bureau of Investigation FBI, and leaked a cache of photos and other documents to the internet. Handala Hack Team, which carried out the breach, said on its website th...

WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AI Engine Pro versions 3.4.2...

jwt-pro (>=1.0.0, <=1.0.2), octo-onedrive (0.0.7) +3 more potentially affected by CVE-2026-34073 via cryptography (38.0.0)

cryptography PYPI version 38.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - jwt-pro =1.0.0, =0.3.2, =1.0.0, =1.0.3, =1.0.16 Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...

markitdown-pro (>=1.0.0, <=2.2.0), structured-sql-agent (0.1.0) potentially affected by CVE-2026-34070 via langchain-core (0.3.74)

langchain-core PYPI version 0.3.74 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - markitdown-pro =1.0.0, =2.2.0 - structured-sql-agent 0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

CVE-2021-27195

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...