external_expat_AOSP10_r33_CVE-2022-25235

Expat, Versión 2.2.6 Esto es Expat, una biblioteca en C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujos. Esto significa que registras manejadores con el analizador antes de iniciar el análisis. Estos manejadores son llamados cuando el analizador...

external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827

Expat，发布版 2.2.6 这是 Expat，一个用于解析 XML 的 C 语言库，由 James Clark 于 1997 年启动。 Expat 是一个面向流的 XML 解析器。这意味着您在开始解析之前向解析器注册处理程序。当解析器发现正在解析的文档中相关的结构时，这些处理程序会被调用。开始标签就是您可以为其注册处理程序的结构类型的一个例子。 Windows 用户应使用 expatwin32 包，该包包含预编译的库和可执行文件，以及供开发人员使用的源代码。 Expat 是自由软件。您可以根据本包附带的 COPYING 文件中包含的许可证条款复制、分发和修改它。该许可证与 MIT/X...

CVE-2026-19336 Pimzino spec-workflow-mcp approvals.ts ApprovalStorage.createApproval path traversal

A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a manipulation of the argument categoryName results in path traversal. The attack is only possible with local access...

CVE-2026-65552 WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

EUVD-2026-53980

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65552

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65516

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65516

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65510 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65499

CVE-2026-65499 affects the WordPress plugin PeproDev Ultimate Invoice, version

CVE-2026-65499

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65499 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-27372

The CVE concerns WordPress plugin PeproDev Ultimate Invoice (admin URL not needed) for affected versions

EUVD-2026-48153

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by longnv719 in WordPress Plugin PeproDev Ultimate Invoice versions = 2.2.6...

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin PeproDev Ultimate Invoice versions = 2.2.6...

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Derrick Gilliland in WordPress Plugin PeproDev Ultimate Invoice versions = 2.2.6...

PT-2026-63811

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...

PT-2026-63920

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

PT-2026-63930

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...