WordPress plugin xSmart has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-21943

creationtimestamp| type| source ---|---|--- 2026-01-21 08:23:53+00:00| seen| https://gist.github.com/Darkcrai86/9e07e2b9d2b4a7f979e9ed65b6569b80 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

EUVD-2026-3710

Malicious code in ts-tweetnacl-utils npm...

EUVD-2026-3751

Malicious code in chai-chain-async npm...

EUVD-2026-3758

Malicious code in @mikudev/ridwan-signal npm...

CVE-2026-21990

...

CVE-2026-21987

CVE-2026-21987 affects Oracle VM VirtualBox (Core) with affected versions 7.1.14 and 7.2.4. The vulnerability is described as exploitable by a high‑privilege attacker who has logon to the infrastructure where VirtualBox runs, with local attack vector and impacts to confidentiality, integrity, and...

CVE-2026-21982

CVE-2026-21982 affects Oracle VM VirtualBox Core in the Oracle Virtualization product. Affected versions are 7.1.14 and 7.2.4. The issue allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running VirtualBox to compromise the software, pot...

CVE-2026-21983

...

CVE-2026-21981

...

CVE-2026-21974

...

CVE-2026-21970

...

CVE-2026-21966

...

CVE-2026-21938

...

CVE-2026-21934

...

CVE-2026-21932

...

PSF-2026-6

User-controlled header names and values containing newlines can allow injecting HTTP headers...

CVE-2025-67473

creationtimestamp| type| source ---|---|--- 2026-01-20 20:18:09+00:00| seen| Telegram/94xF8qOf6a9zFTfjcIBBKIfclAWvX8OYrbzJopUPnpCqSjk...

CVE-2025-9281

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device reboots...

CVE-2025-14377

CVE-2025-14377 concerns the legacy Ansible playbook component of Verve Asset Manager. The issue arises from plaintext secrets being stored during playbook execution. This component has been retired and has been optional since the 1.36 release in 2024. The CVSS v4.0 score is 8.8 (HIGH), with netwo...