5476835 matches found
EUVD-2026-65179
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
CVE-2026-78435
A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...
CVE-2026-78266
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
CVE-2026-78264
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
CVE-2026-78268
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
CVE-2026-78263
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar = 6.17.2 versions...
CVE-2026-78267
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
CVE-2026-78282
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...
CVE-2026-78259
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
CVE-2026-32563
Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32560
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
CVE-2026-32561
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
CVE-2026-27364
Subscriber Broken Access Control in Style Kits = 2.6.5 versions...
CVE-2026-32556
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
CVE-2026-32554
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...