CVE-2026-59670

The Repasat application is affected by a Cross-Site Scripting (XSS) vulnerability. The flaw exists within the "nomListaValidacion" parameter at the endpoint "/es/validationslists/assignList/Employee/45659" . Successful exploitation could allow an attacker to trick a user into executing arbitrary ...

CVE-2026-80337

The HAVELSAN Inc. Sef - AI Chatbot Platform (versions before 2.1 ) is susceptible to a Missing Authorization vulnerability (CWE-862 ). This flaw allows attackers to access functionality that is not properly constrained by Access Control Lists (ACLs) , specifically enabling unauthorized Cross-Chat...

CVE-2026-80464

A Server-Side request forgery (SSRF) vulnerability exists in the API Tool Runner of HAVELSAN Inc. Sef - AI Chatbot Platform . This issue allows an attacker to perform SSRF attacks. The vulnerability affects versions before 2.1 . Notably, the vendor has stated that this product is no longer suppor...

CVE-2026-95607

The WordPress WPLMS theme (versions

CVE-2026-59669

The Repasat application is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79). The issue exists in the "name" parameter of the endpoint “/es/attachmenttypes/update/203336” . Successful exploitation could allow an attacker to trick a user into executing arbitrary code within their browser. N...

CVE-2026-91784

The cjbassi/gotop utility is vulnerable to local argument injection within its process termination functionality. The software fails to sanitize process names before passing them directly to the pkill command. A local attacker can exploit this by creating a process with a crafted name starting wi...

CVE-2026-96327

A SQL Injection vulnerability exists in the WordPress WPLMS plugin for versions prior to 1.9.9.8.2 . The flaw was identified by Rafie Muhammad. While the specific root cause and practical impact are not detailed in the provided documents, users are advised to update to version 1.9.9.8.2 or later ...

CVE-2026-95608

The WordPress HUSKY plugin (versions

CVE-2026-95610

The UpSolution Core plugin for WordPress (versions

CVE-2026-18036

Bouncy Castle for Java versions prior to 1.86 are vulnerable to a timing side-channel attack in the NTRU implementation. The root cause is the use of the % operator in three helpers, leading to integer division where latency depends on the secret operand. Specifically, Polynomial.modQ divides by ...

CVE-2026-96461

A Broken Access Control vulnerability exists in the Amelia WordPress plugin, affecting versions

CVE-2026-96337

The WordPress ProfilePress plugin (versions

CVE-2026-96518

The WordPress ProfilePress plugin (versions

CVE-2026-96333

The WordPress GiveWP plugin (versions

CVE-2026-96553

A Cross Site Scripting (XSS) vulnerability was discovered in the FiboSearch WordPress plugin, affecting versions

CVE-2026-94432

The Appointment Booking Plugin – LatePoint for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 5.7.1 . The flaw exists in the OsPaypalConnectController::create_order_for_transaction() action, which is exposed as an unauthenticated route via wp...

CVE-2026-97637

The JSON API Auth plugin for WordPress (versions up to and including 3.1.2 ) is vulnerable to an Authentication Bypass via cached session cookie disclosure. The root cause is that the required PI-Media/json-api parent plugin caches controller dispatch results using only the URI and query string, ...

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.1.1 . The root cause is insufficient input sanitization and output escaping of the 'lsd[remark]' parameter. This a...

CVE-2026-97634

The Event Tickets and Registration plugin for WordPress is vulnerable to a generic SQL Injection in all versions up to and including 5.29.5 . The root cause is insufficient escaping of the user-supplied orderby parameter and a lack of sufficient preparation on the existing SQL query. This allows ...

CVE-2026-97338

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.3.70 . The root cause is insufficient input sanitization and output escaping within the display name field. An authenticated attacker with Subscriber-level access or ...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin (all versions up to and including 4.13.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when handling Facebook Comment Messages via v-html in...

CVE-2026-95670

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.0 . The root cause is insufficient input sanitization and output escaping within the Log URL via /goto/{base64} Redirect functionality. This flaw allows unauthenti...

CVE-2026-96871

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.4.2 . The root cause is insufficient input sanitization and output escaping involving the 'data_type' parameter. This allows unauthenticated attackers to inject arbitrary w...

CVE-2026-100107

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.9.2 . The root cause is insufficient input sanitization and output escaping associated with the 'comment' parameter , specifically involving an SVG Comment Conte...

CVE-2026-97342

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.6.5.4 . The root cause is insufficient input sanitization and output escaping within the 'choice' Post Meta via the Insert/Update Post Act...

CVE-2026-103426

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.31.4 . The vulnerability exists because of insufficient input sanitization and output escaping of the '_rt' parameter . An unauthenticated attacker can inject arbit...

CVE-2026-102002

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 3.2.6 . The root cause lies in the 'otter_form_widget_filter' parameter, which allows authenticated attackers with ...

CVE-2026-96566

The Newsletter – Send awesome emails from WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 9.4.0 . The root cause is insufficient input sanitization and output escaping within the 'np1' Custom Field Parameter . Unauthenticated attackers can i...

CVE-2026-97641

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.28.3 . The root cause is insufficient input sanitization and output escaping within the Comment Content feature. This flaw allows unauthenticated attacker...

CVE-2026-100182

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.10 . The root cause is insufficient input sanitization and output escaping involving Cross-Origin postMessage to the Admin Editor. An unauthenticated attacker can t...

CVE-2026-12951

The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection in versions up to and including 5.0.18 . The flaw exists in the order_by parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint. The root cause is the direct concatenation of user-supplied input i...

CVE-2026-102772

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.13.1 . The root cause is insufficient input sanitization and output escaping within the parameter (e.g., kl_code, kl_post_code). This flaw allows unauthenticated attackers to in...

CVE-2026-95817

The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.6.0 . The root cause is insufficient input sanitization and output escaping within the Comment Content functionality. This allows unauthenticated attackers to in...

CVE-2026-97336

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.13.0 . The root cause is insufficient input sanitization and output escaping within the 'file_list' Field Type . This allows unauthenticated attackers to inject arbitrary web scr...

CVE-2026-93880

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 13.2.0 . The root cause is insufficient input sanitization and output escaping involving the '{{GET:}}' Dynamic Placeholder . Specifica...

CVE-2026-96578

The GSpeech TTS – WordPress Text To Speech Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.22.0 . The root cause is insufficient input sanitization and output escaping within the Comment Content functionality. Specifically, an mXSS-sty...

CVE-2026-96567

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.1.7 . The root cause is insufficient input sanitization and output escaping of the 'post_id' parameter, which stores malicious payloads in form-submitted post meta . Unauth...

CVE-2026-97663

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.122.0 . The root cause is insufficient input sanitization and output escaping of the Comment Author Name. This allows unauthenticated attackers to inj...

CVE-2026-96539

The WordPress Ultimate Member plugin (versions

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...

CVE-2026-17507

The Bouncy Castle for Java library (before version 1.86 ) contains a vulnerability in the MLS implementation (org.bouncycastle.mls). The root cause is a signed to unsigned conversion error where an RFC 9420 uint32 leaf_index is stored as a signed integer. Because values with the top bit set decod...

CVE-2026-103604

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to a denial of service via CPU exhaustion due to inefficient algorithmic complexity. The issue resides in the X.509 distinguished name string conversion within the X509Name.ToString and IetfUtilities....

CVE-2026-103603

In Legion of the Bouncy Castle Inc. bc-csharp before version 2.7.0 , a memory allocation vulnerability exists in the HSS/LMS signature code (HssPublicKeyParameters , HssSignature ). An unauthenticated remote attacker can trigger a denial of service via memory exhaustion by providing an HSS public...

CVE-2026-103602

The bc-csharp library by Legion of the Bouncy Castle Inc. versions before 2.7.0 is vulnerable to improper certificate validation in the PkixNameConstraintValidator component. The root cause is a failure to remove the RFC 1034 root-label trailing dot during comparison between names and constraints...

CVE-2026-103601

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to an issue where unverified plaintext is released in the CCM (CcmBlockCipher ) and DSTU 7624 CCM (KCcmBlockCipher ) AEAD modes. The root cause is that the decryption process writes recovered plaintex...

CVE-2026-103600

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to a denial of service due to uncontrolled recursion in the ASN.1 parser (Asn1InputStream , Asn1StreamParser ). An unauthenticated remote attacker can provide a crafted ASN.1 encoding with deeply nest...

CVE-2026-63578

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in the PbeUtilities.GenerateCipherParameters function. This is caused by the allocation of resources without limits during password-based private-key decrypti...

CVE-2026-63577

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. contains an improper certificate validation flaw in the PkixNameConstraintValidator.WithinDNSubtree check. The root cause is that the validator identifies the first Relative Distinguished Name (RDN) of a constraint...

CVE-2026-63576

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) contains an improper certificate validation vulnerability in the PkixNameConstraintValidator (specifically the ExtractHostFromURL function). The root cause is that the software extracts the host from a URI using st...

CVE-2026-63575

The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a Denial of Service (DoS) attack due to a loop with an unreachable exit condition in the Pkcs12ParametersGenerator component. An attacker can provide a PKCS#12 (PFX) file or a PKCS#8 encrypted private key using a P...