CVE-2026-81770

CVE-2026-81770 affects the WordPress Interactive Geo Maps plugin in versions ≤ 1.6.30 . The vulnerability is an unauthenticated Reflected Cross-Site Scripting (XSS) , meaning no prior login is required to exploit it, though user interaction is needed (CVSS 3.1: 7.1 HIGH , vector AV:N/AC:L/PR:N/UI...

EUVD-2026-69927

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

EUVD-2026-69928

Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...

EUVD-2026-69926

Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...

CVE-2026-84781 WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...

CLSA-2026-1788348294 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post16+tuxcare...

ROOT-OS-DEBIAN-12-CVE-2026-34380 CVE-2026-34380 in openexr - Patched by Root

Root has patched CVE-2026-34380 in the openexr package for Root:Debian:12. Multiple fixed versions available...

WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jiemook in WordPress Plugin Breadcrumb NavXT versions = 7.5.1...

RHSA-2026:60449 Red Hat Security Advisory: OpenShift Container Platform 4.21.31 packages and security update

Bulletin has no description...

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Brobicho in WordPress Plugin PublishPress Permissions versions = 4.8.3...

SUSE-SU-2026:23514-1 Security update for libpng16

This update for libpng16 fixes the following issues: Changes for libpng16: - Version update to 1.6.58 jscPED-16190...

CVE-2026-82883 WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcus Login With Ajax allows Reflected XSS. This issue affects Login With Ajax: from n/a through 4.5.1...

Improper Authorization in Jira Service Management Data Center

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

WordPress WC Vendors plugin < 2.7.2.1 - Order Shipment Status Change vulnerability

Order Shipment Status Change vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2025-46418

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...

CVE-2025-59528

CVE-2025-59528 Proof of Concept English version PoC minimaliste et orienté validation technique de la vulnérabilité sur un environnement autorisé. Prerequis Avoir un compte utilisateur sur le dashboard Flowise cible. Disposer d'une clef API valide associee a ce compte. Demarrer un listener sur ta...

[slackware-security] pcre2

New pcre2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/pcre2-10.48-i586-1.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

CVE-2014-4140

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:10+00:00| seen| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs 2026-09-03 00:00:55+00:00| published-proof-of-concept| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs...