CVE-2026-7456

The Udimi Tools plugin for WordPress (versions

WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by timomangcut in WordPress Plugin Tracking Code Manager versions = 2.6.0...

CVE-2026-5062: Improper Neutralization of Special Elements used in an SQL Command

The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection via the 's' search parameter on the Pretty Links listing page in all versions up to, and including, 3.6.20. This is due to insufficient escapin...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: GHSA-3R7G-Q6CG-Q2VX...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: SNYK:PYTHON-OPENWEBUI-18600527...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: OSV:GHSA-3R7G-Q6CG-Q2VX...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: MEND:CVE-2026-70491...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-54020 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-54020 Source advisory: SNYK:PYTHON-OPENWEBUI-18600522...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-54020 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-54020 Source advisory: OSV:GHSA-H6X2-583H-X99R...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-54020 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-54020 Source advisory: GHSA-H6X2-583H-X99R...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-54020 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-54020 Source advisory: MEND:CVE-2026-54020...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70481 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70481 Source advisory: SNYK:PYTHON-OPENWEBUI-18600532...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70481 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70481 Source advisory: GHSA-MJ5R-JF49-M3W7...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70481 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70481 Source advisory: OSV:GHSA-MJ5R-JF49-M3W7...

kin v0.4.8

The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59224 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59224 Source advisory: OSV:PYSEC-2026-3600...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59223 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59223 Source advisory: OSV:PYSEC-2026-3603...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: OSV:PYSEC-2026-3591...

open-webui (>=0.5.17, <=0.6.5), open-webui-steve (0.6.5.45) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.2)

pymdown-extensions PYPI version 10.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.5.17, =0.6.5 - open-webui-steve 0.6.5.45 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-61632 Source...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: OSV:PYSEC-2026-3592...