1011 matches found
NPM: Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
NPM: Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin vulnerability discovered by ? in WordPress Npm electron versions 39.8.7...
WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin < 5.0.0 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by João Ramos Maciel in WordPress Plugin Dynamic Pricing With Discount Rules for WooCommerce versions 5.0.0...
CVE-2026-14872 Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...
NPM: fast-uri vulnerable to host confusion via backslash authority introducer
NPM: fast-uri vulnerable to host confusion via backslash authority introducer vulnerability discovered by ? in WordPress Npm fast-uri versions 2.4.4...
CVE-2026-55969 affecting package thrift for versions less than 0.24.0-1
CVE-2026-55969 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-14849
The CVE-2026-14849 entry concerns the Paid Membership Subscriptions WordPress plugin (before 3.0.7). Affected component: member and payment export files written to a predictable location in the uploads directory. Root cause: lack of protection allows unauthenticated users to download these export...
CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12
CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12. A patched version of the package is available...
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...
CVE-2026-65888
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox 2.20.2 - The socialLogin method allows actors to login as any given user on the target site...
CVE-2026-65889
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...
CVE-2026-65943
Joomla Extension RO CSVI by rolandd.com (
PT-2026-65806
Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...
CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1
CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1
CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1
CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50252 affecting package unbound for versions less than 1.25.2-1
CVE-2026-50252 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
Astra Linux – Vulnerability in Chromium
Using “after free” in DevTools in Google Chrome before version 150.0.7871.47 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Low...
CVE-2026-59884 affecting package python-pyasn1 for versions less than 0.4.8-3
CVE-2026-59884 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...
CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...