461254 matches found
RHSA-2026:48815 Red Hat Security Advisory: libsolv security update
Bulletin has no description...
RHSA-2026:48816 Red Hat Security Advisory: libsolv security update
Bulletin has no description...
RHSA-2026:48813 Red Hat Security Advisory: libsolv security update
Bulletin has no description...
RHSA-2026:48811 Red Hat Security Advisory: libsolv security update
Bulletin has no description...
RHSA-2026:48790 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2026:48760 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
RHSA-2026:48759 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
RHSA-2026:48703 Red Hat Security Advisory: vim security update
Bulletin has no description...
RHSA-2026:48650 Red Hat Security Advisory: vim security update
Bulletin has no description...
RHSA-2026:48585 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
RHSA-2026:48386 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:43225 Red Hat Security Advisory: OpenShift Container Platform 4.15.67 packages and security update
Bulletin has no description...
RHSA-2026:42125 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
CVE-2026-16635
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the maybeupdateuserrole function passing an attacker-controlled Gravity Forms field value $lead$feed-userrolefieldid directly into WPUser::setrole without any...
CVE-2026-16635
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the maybeupdateuserrole function passing an attacker-controlled Gravity Forms field value $lead$feed-userrolefieldid directly into WPUser::setrole without any...
EUVD-2026-51795
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the maybeupdateuserrole function passing an attacker-controlled Gravity Forms field value $lead$feed-userrolefieldid directly into WPUser::setrole without any...
CVE-2026-16635 Pronamic Pay <= 10.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms 'Update user role' Field
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the maybeupdateuserrole function passing an attacker-controlled Gravity Forms field value $lead$feed-userrolefieldid directly into WPUser::setrole without any...
CVE-2026-16635
The CVE concerns the Pronamic Pay plugin for WordPress (up to version 10.1.0). The vulnerability lies in the maybe_update_user_role() function, which passes an attacker-controlled Gravity Forms field value ($lead[$feed->user_role_field_id]) directly into WP_User::set_role() without allowlist v...
CVE-2025-14469 Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1. This is due to missing nonce validation on the msupdate AJAX action. This makes it possible for unauthenticated attackers to modify child theme CSS styles via a forged...
CVE-2025-14469
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1. This is due to missing nonce validation on the msupdate AJAX action. This makes it possible for unauthenticated attackers to modify child theme CSS styles via a forged...