EUVD-2026-60789

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73367

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73367 WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73367

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73343

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-73343

The WP Compress WordPress plugin (versions before 7.20.01) allows unauthenticated remote attackers to execute arbitrary code, scoring CVSS 10.0 critical (full confidentiality, integrity, availability impact). Patchstack is the CNA; the fix is upgrading to 7.20.01 or later. Exploitation details ar...

EUVD-2026-60773

A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched...

EUVD-2026-60774

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-75784

TRENDnet TEW-WLC100 (firmware 1v2.07b01) nginx HTTP Header Handler function FUN_0040da4c allows remote unauthenticated stack-based buffer overflow via the Server argument. CVSS 10.0 critical; proof-of-concept exploit is public at https://github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc1...

CVE-2026-73343 WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-32467 WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

EUVD-2026-60901

Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...

EUVD-2026-60898

Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...

CVE-2026-32444 WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...

CVE-2026-32444

Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...

CVE-2026-32444 WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...

CVE-2026-28570

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

CVE-2026-50575 BetterDesk has a replay behavior vulnerability when devices are deleted

BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are...

CVE-2026-75874

Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154...

CVE-2026-74942

Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...