CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

EUVD-2026-53916

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

CVE-2026-34502

CVE-2026-34502 corresponds to a Heap-based Buffer Overflow in the Apache Portable Runtime Utility memcached client, affecting APR Utility versions 1.3.0 through 1.6.3. The entry notes a NETWORK attack vector with LOW attack complexity and NO privileges required, and an impact profile of Availabil...

CVE-2026-66710 WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

EUVD-2026-53911

Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...

CVE-2026-66708

CVE-2026-66708 affects the WordPress plugin Total Upkeep (versions

EUVD-2026-53910

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

EUVD-2026-53909

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

EUVD-2026-53906

Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...

CVE-2026-66701 WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

CVE-2026-66699 WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability

Custom role Broken Access Control in Dokan = 5.0.10 versions...

CVE-2026-66696 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability

Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks = 3.7.8 versions...

CVE-2026-66696

The CVE-2026-66696 entry concerns the WordPress Kadence Blocks plugin (Gutenberg Blocks) versions

EUVD-2026-53903

Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks = 3.7.8 versions...

CVE-2026-66695

The CVE-2026-66695 entry describes an Unauthenticated Path Traversal in the WordPress W3 Total Cache plugin, affecting versions &lt;= 2.10.2. The vulnerability is active across plugin components implementing file/path access, with CVSS 3.1 base metrics indicating NETWORK attack vector, no user in...

EUVD-2026-53902

Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...

CVE-2026-66692

Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...

CVE-2026-66692 WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability

Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...

CVE-2026-66694 WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...