MINI-8J8P-59QQ-W8C7

Bulletin has no description...

MINI-FHXP-VVF6-WRGR

Bulletin has no description...

MINI-8C6W-V6X4-CHPP

Bulletin has no description...

MINI-G82C-JHRM-4WGP

Bulletin has no description...

EUVD-2026-59943

stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory...

MINI-CXX3-C9Q7-VF7X

Bulletin has no description...

MINI-39QP-VRV4-93H2

Bulletin has no description...

MINI-C2Q2-4WPH-6QGR

Bulletin has no description...

MINI-CC68-67CW-9F3V

Bulletin has no description...

MINI-86JQ-WWMX-9HV9

Bulletin has no description...

MINI-H2XP-X26H-WR92

Bulletin has no description...

MINI-GR84-CP2H-8VR6

Bulletin has no description...

MINI-X5PP-C9RV-84GG

Bulletin has no description...

MINI-49GV-CXQP-PPPM

Bulletin has no description...

CVE-2026-17608

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-17608 WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

EUVD-2026-59924

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-17608 WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-12998

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.55.0.2 via the 'draft' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-17608

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...