490235 matches found
CVE-2026-66655
Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...
CVE-2026-28173
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
OESA-2026-3328 apr-util security update
The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...
EUVD-2026-57916
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
EUVD-2026-57904
Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
EUVD-2026-57899
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
CVE-2026-66660
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...
EUVD-2026-57895
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
EUVD-2026-57972
Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...
CVE-2026-28157
CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions
CVE-2026-28155
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...
MINI-QC8Q-W4RW-978P
Bulletin has no description...
MINI-7597-9M3M-2683
Bulletin has no description...
MINI-V5F4-RHJM-46M8
Bulletin has no description...
ALPINE-CVE-2026-16238
Type confusion in PostgreSQL pgrestoreattributestats allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...
CVE-2026-14663
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...
MINI-HHFV-MVJQ-HJMG
Bulletin has no description...
MINI-8P4G-322Q-J7VH
Bulletin has no description...