CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-41555

The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

EUVD-2026-93235

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

CVE-2026-57555

Memory Corruption when executing system service routines due to improper handling of user input buffers...

EUVD-2026-92983

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555 Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555 Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555

A Use After Free vulnerability exists in the DSP Service due to improper handling of user input buffers during the execution of system service routines. This memory corruption flaw can lead to HIGH confidentiality, integrity, and availability impacts. Exploitation details are not provided in the ...

CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105611

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes...

EUVD-2026-92938

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105703

The PHPGurukul User Registration & Login and User Management System 3.3 is vulnerable to an incorrect authorization flaw within the Change Password Handler component. Specifically, an unknown function in the file loginsystem/admin/change-password.php fails to properly validate the currentpassword...

CVE-2026-105703 PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105611 chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes...