247 matches found
gpt-verse (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.0.44)
langgraph PYPI version 0.0.44 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - gpt-verse 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...
gpt-verse (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.0.44)
langgraph PYPI version 0.0.44 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - gpt-verse 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...
EUVD-2026-9780
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
CVE-2026-28128
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
CVE-2026-28128 WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
CVE-2026-28128
CVE-2026-28128 is a Local File Inclusion vulnerability in the ThemeREX Verse WordPress theme (Verse) due to improper control of filenames for include/require statements. Affected: Verse versions up to and including 1.7.0. Public sources (NVD/CVEs, Red Hat, CVE/CIRCL, PatchStack, Wordfence) consis...
CVE-2026-28128 WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
CVE-2026-28128
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
WordPress plugin Verse security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
CVE-2026-28128: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
PT-2026-23400
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2026-28415 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2026-28414 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2026-28415 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...
WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Verse versions = 1.7.0...
CVE-2026-1570
The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's verse shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-1570
The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's verse shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-1570 Simple Bible Verse via Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's verse shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-1570
The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's verse shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-1570
CVE-2026-1570 affects the WordPress plug‑in “Simple Bible Verse via Shortcode.” The vulnerability is a Stored Cross‑Site Scripting (XSS) in the verse shortcode caused by insufficient input sanitization and output escaping for user-provided attributes, impacting all versions up to and including 1....