CVE-2026-14333

The CVE concerns the Demi WordPress plugin, affected up to version 0.0.6. It stores full-site backup archives in a publicly accessible location with a predictable filename, exposing them to unauthenticated access. The impact is severe: attackers can download complete site backups, including the d...

CVE-2026-14319

The CVE relates to the GiveWP WordPress plugin (versions before 4.16.3) where a REST API endpoint does not properly restrict access, allowing unauthenticated retrieval of recurring-donor information. Affected component: the REST API endpoint handling recurring-donation records. Root cause: insuff...

CVE-2026-14317

CVE-2026-14317 affects the GiveWP WordPress plugin prior to version 4.16.3. The vulnerability arises because the plugin does not properly restrict the set of payment gateways to those enabled by the administrator, and it derives this list in part from request input. As a result, unauthenticated u...

CVE-2026-14483

The CVE-2026-14483 entry describes an unauthenticated Arbitrary File Upload in the Realtyna Organic IDX plugin + WPL Real Estate (

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

EUVD-2026-51401

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51389

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the Cookie parsing methods to conduct code execution when the SafeEnhancement feature is enabled...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51387

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the log message functionality to conduct code execution...

CVE-2026-43829 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51385

Full details and mitigation steps are currently restricted and will be published at a later date...