PT-2026-1767

Name of the Vulnerable Software and Affected Versions SlimStat Analytics plugin for WordPress versions through 5.3.3 Description The SlimStat Analytics plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. The issue resides in...

n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability

A critical vulnerability CVE-2026-21877 found by Upwind affects n8n automation tools. Learn why researchers are urging users to update to version 1.121.3 immediately to prevent remote code execution...

PT-2026-1984

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2025.3.24.0 through 2025.3.28.0 Description A flaw exists in the TeamViewer entry dashboard component of the software that can lead to exposure of sensitive information. Specifically, a defective...

PT-2026-2177

Name of the Vulnerable Software and Affected Versions OPEXUS eComplaint versions prior to 9.0.45.0 Description The application allows an attacker to access the 'DocumentOpen.aspx' endpoint and potentially download any uploaded files. This is possible by iterating through predictable values of the...

PT-2026-2173

Name of the Vulnerable Software and Affected Versions OPEXUS eCASE versions prior to 11.14.1.0 Description OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. This JavaScript is executed when another user views the Actio...

PT-2026-1790

Name of the Vulnerable Software and Affected Versions loopus WP Virtual Assistant versions through 3.0 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance...

PT-2026-1737

Name of the Vulnerable Software and Affected Versions brandexponents Oshine oshin versions through 7.2.7 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion...

PT-2026-2188

Name of the Vulnerable Software and Affected Versions Hakob Re Gallery & Responsive Photo Gallery Plugin versions through 1.17.18 Description The Hakob Re Gallery & Responsive Photo Gallery Plugin has a flaw related to incorrectly configured access control security levels, allowing for missing...

PT-2026-1638

Name of the Vulnerable Software and Affected Versions QR Code for WooCommerce order emails, PDF invoices, packing slips plugin for WordPress versions through 1.9.42 Description The plugin is susceptible to Stored Cross-Site Scripting through its shortcode due to inadequate input sanitization and...

PT-2026-1934

Name of the Vulnerable Software and Affected Versions LibreChat version 0.8.1-rc2 Description LibreChat, a ChatGPT clone with additional features, is susceptible to a server-side request forgery SSRF issue. This occurs because of missing restrictions within the Actions feature in its default...

PT-2026-1586

Name of the Vulnerable Software and Affected Versions ShareThis Dashboard for Google Analytics plugin for WordPress versions through 3.2.4 Description The plugin is susceptible to Sensitive Information Exposure. The Google Analytics client ID and client secret are stored in plaintext within the...

PT-2026-1580

Name of the Vulnerable Software and Affected Versions Key Figures plugin for WordPress versions prior to 1.2 Description The Key Figures plugin for WordPress is susceptible to Stored Cross-Site Scripting through the kf field figure default color render function. Insufficient input sanitization an...

PT-2026-1499

Name of the Vulnerable Software and Affected Versions Mojoomla WPCHURCH versions through 2.7.0 Description The software contains a flaw related to improper control of filenames used in include/require statements, specifically a PHP Local File Inclusion issue. This allows for unauthorized access a...

PT-2026-2106

Name of the Vulnerable Software and Affected Versions Mailpit versions 1.28.0 and below Description Mailpit is an email testing tool and API for developers. A Server-Side Request Forgery SSRF exists in the /proxy endpoint, allowing attackers to make requests to internal network resources. The...

Fedora 42 : doctl (2025-cfdb90b52d)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cfdb90b52d advisory. Update to 1.148.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora: Security Advisory (FEDORA-2025-c6b2100f44)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-1099

Name of the Vulnerable Software and Affected Versions MARS Multi-Application Recovery Service versions prior to 1.2.1.1686 Description An SQL injection issue affects MARS Multi-Application Recovery Service. Successful exploitation could allow remote attackers to execute unauthorized code or...

Fedora 43 : gh (2025-c6b2100f44)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c6b2100f44 advisory. Update to 2.83.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

PT-2025-53895

Name of the Vulnerable Software and Affected Versions Youzify versions through 1.3.5 Description The software contains a Server-Side Request Forgery SSRF flaw. This allows for Server Side Request Forgery. Recommendations Update Youzify to a version later than 1.3.5...

Fedora: Security Advisory (FEDORA-2025-202d079b40)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...