CVE-2026-66667: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...

CVE-2026-32549: Missing Authorization

Unauthenticated Broken Access Control in ThumbPress 6.5 versions...

CVE-2026-32481: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-66641: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66640: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

CVE-2026-66639: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in WPZOOM Forms – Contact Form Plugin for Gutenberg = 2.0.4 versions...

CVE-2026-66636: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-66633: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-32547: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

CVE-2026-28568: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Quill Forms = 5.7.1 versions...

CVE-2026-28192: Unrestricted Upload of File with Dangerous Type

Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro = 7.1.67 versions...

CVE-2026-28569: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in SSL Zen = 4.7.43 versions...

CVE-2026-28567: Missing Authorization

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

CVE-2026-28191: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0...

CVE-2026-28570: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

CVE-2026-73367: Inclusion of Functionality from Untrusted Control Sphere

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73345: Improper Neutralization of Special Elements used in an SQL Command

Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...

CVE-2021-43718: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP...

CVE-2026-73379: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-74300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a...