44601 matches found
DEBIAN-CVE-2026-17513
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...
CVE-2025-59178
CVE-2025-59178 affects Ericsson Packet Core Controller (PCC) prior to 1.39. The vulnerability arises in Configuration Management, exposing sensitive system information that allows an attacker to enumerate other users on the system. According to the CVSS metrics, the impact is primarily on confide...
CVE-2026-66477
CVE-2026-66477 affects WordPress Gillion theme versions up to 4.13. The vulnerability is an unauthenticated Broken Access Control in the theme’s access logic, potentially allowing access to restricted resources by unauthenticated users. CVSSv3.1 base score 5.3 (Medium) with AV:N/AC:L/PR:N/UI:N/S:...
EUVD-2026-49251
Administrator Arbitrary File Deletion in Easy Digital Downloads = 3.6.9 versions...
CVE-2026-66475
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce - Checkout Manager = 3.0.5 versions...
CVE-2026-66474 WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Insert Headers and Footers Code – HT Script = 1.1.8 versions...
CVE-2026-66445
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
CVE-2026-66427 WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-66427
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
EUVD-2026-49239
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65562 WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version
EUVD-2026-49228
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49224
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...
CVE-2026-59535 WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...
CVE-2026-59535
CVE-2026-59535 affects WordPress Thrive Product Manager plugin