CVE-2026-78285

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-78286

Unauthenticated PHP Object Injection in Geo Controller = 8.9.8 versions...

CVE-2026-78289

Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...

CVE-2026-78292

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

CVE-2026-80433

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

CVE-2026-78274

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78276

Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78281

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78257

Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-32479

Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...

RHSA-2026:57401 Red Hat Security Advisory: OpenShift Container Platform 4.19.44 packages and security update

Bulletin has no description...

EUVD-2026-66952

Subscriber Broken Access Control in Ditty = 3.1.67 versions...

CVE-2026-81272

CVE-2026-81272 affects the WordPress FluentPlayer Pro plugin in versions 1.3.2 and below , where an Editor-level Broken Access Control flaw allows a user with the Editor role to perform actions they should not be permitted to. The CVSS 3.1 score is 4.9 (MEDIUM) with the vector AV:N/AC:L/PR:H/UI:N...

CVE-2026-81272 WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

EUVD-2026-66946

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

EUVD-2026-66945

Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...

EUVD-2026-66942

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

EUVD-2026-66940

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions