CVE-2026-14313

The vulnerability CVE-2026-14313 affects the PeproDev WooCommerce Receipt Uploader WordPress plugin (versions up to 2.8.0). The issue is unauthenticated write access via IDOR (missing authorization) in the Receipt Uploader component, requiring WooCommerce to be present. The provided documents con...

EUVD-2026-53718

PeproDev WooCommerce Receipt Uploader PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce, all versions up to and including 2.8.0 latest on wordpress.org; no fixed version available at the time of writing, is vulnerable to...

CVE-2026-14314

The CVE concerns the PeproDev WooCommerce Receipt Uploader WordPress plugin (≤ v2.8.0). The root cause is a failure to verify that a requested attachment belongs to the order referenced by its access token, enabling an unauthenticated attacker to forge a token and disclose image attachments, incl...

CVE-2026-18400 Slider, Gallery, and Carousel by MetaSlider <= 3.111.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'delay' Post Meta Setting

The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post Meta Setting in all versions up to, and including, 3.111.0 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-18510

CVE-2026-18510 affects TranslatePress – Translate Multilingual (WordPress) up to version 3.2.6. Root cause: insufficient input sanitization and output escaping, enabling unauthenticated stored XSS via Comment Content. Attackers can inject arbitrary scripts in pages viewed by users; payloads use W...

CVE-2026-16636

The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipient Display Name to.name in Email Logs in all versions up to, and including, 2.2.95 due to insufficient input...

ROOT-OS-DEBIAN-12-CVE-2025-68344 CVE-2025-68344 in linux - Patched by Root

Root has patched CVE-2025-68344 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-71073 CVE-2025-71073 in linux - Patched by Root

Root has patched CVE-2025-71073 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-3847 CVE-2021-3847 in linux - Patched by Root

Root has patched CVE-2021-3847 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-64437 CVE-2026-64437 in linux - Patched by Root

Root has patched CVE-2026-64437 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-39931 CVE-2025-39931 in linux - Patched by Root

Root has patched CVE-2025-39931 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46324 CVE-2026-46324 in linux - Patched by Root

Root has patched CVE-2026-46324 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in linux - Patched by Root

Root has patched CVE-2026-31655 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-43317 CVE-2026-43317 in linux - Patched by Root

Root has patched CVE-2026-43317 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68371 CVE-2025-68371 in linux - Patched by Root

Root has patched CVE-2025-68371 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53072 CVE-2026-53072 in linux - Patched by Root

Root has patched CVE-2026-53072 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37797 CVE-2025-37797 in linux - Patched by Root

Root has patched CVE-2025-37797 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-18997 cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack...

EUVD-2026-53711

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack...

CVE-2026-15459

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that keys the WDP-AUTH request signature is empty, making the...