CVE-2026-9729 Web Push Notifications <= 4.39.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'webpushr_notification_title' Post Meta Parameter

The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushrnotificationtitle' and 'webpushrnotificationbody' parameters in versions up to, and including, 4.39.0. This is due to insufficient input sanitization in the savesendnotificationflag...

Exploit for CVE-2024-21534

CVE-2024-21534: Remote Code Execution Vulnerability in jsonpa...

GHSA-77MV-MP2J-GXXH pygmentize Remote Code Execution

pygmentize is prone to remote code execution due to an unsafe sanitazation of user input when passed to the highlight function...

PT-2024-40152 · Pypi · Pygmentize

Name of the Vulnerable Software and Affected Versions: pygmentize affected versions not specified Description: The issue is related to remote code execution due to unsafe sanitization of user input when passed to the highlight function. Recommendations: At the moment, there is no information abou...