CVE-2026-108125

The wp-post-author plugin is vulnerable to an SQL injection flaw due to the improper neutralization of special elements used in an SQL command. This security issue specifically affects wp-post-author version 4.0.0 prior to 4.1.0 . Exploitation of this vulnerability may result in high confidential...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips, commercial-nginx-ingress, helmfile,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, spiffe-helper-fips, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, spiffe-helper-fips, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, spiffe-helper-fips, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, spiffe-helper-fips, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, spiffe-helper-fips, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, weaviate, kapp-controller, spiffe-helper-fips, k8ssandra-client, crossplane-provider-azure-orbital, flux-operator-fips, crossplane-provider-aws-globalaccelerator, crossplane-provider-aws-mediastore-fips, azurefile-csi-fips,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook, cert-exporter, ksops,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook, cert-exporter, ksops,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, amass, goreleaser, mockery, rancher-agent, dex, headlamp, rook, spicedb-operator, kubelet-csr-approver, argo-cd, hubble, ratify, rancher-webhook,...

CVE-2026-108124 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-108124

The wp-post-author plugin, specifically versions before 4.1.0 , is vulnerable to an authenticated SQL injection (CWE-89). The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker with high privileges to impact confidentiality ...