CVE-2026-59557

CVE-2026-59557 relates to the WordPress Events Made Easy plugin, affected versions

CVE-2026-59556

CVE-2026-59556 : Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (versions

CVE-2026-59552

CVE-2026-59552 concerns the WordPress plugin 3D Flipbook PDF Viewer & Embedder (versions

CVE-2026-59553

CVE-2026-59553 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Product Feed Manager plugin, affecting versions ≤ 7.6.1. The Connected documents confirm the affected software (WordPress Product Feed Manager plugin) and the vulnerability class (XSS) with the s...

CVE-2026-59551

The CVE-2026-59551 entry concerns the WordPress plugin rtMedia for WordPress, BuddyPress and bbPress (versions up to 4.7.10). The issue is a SQL Injection vulnerability in subscriber handling within this plugin. Public details in the provided documents specify affected software and the underlying...

CVE-2026-59549

Affected software: WordPress plugin rtMedia for WordPress, BuddyPress and bbPress (versions <= 4.7.10). Vulnerability: Unauthenticated SQL Injection. Root cause/impact: SQL injection that does not require authentication; CVSS metrics in the external record indicate high confidentiality impact ...

CVE-2026-59550

CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions

CVE-2026-59548

The CVE concerns WordPress Byteflows Travel & Hotel Booking plugin, version

CVE-2026-59539

CVE-2026-59539 affects the WordPress plugin Paid Member Subscriptions (versions

CVE-2026-59546

CVE-2026-59546 concerns the WordPress plugin Hide My WP Ghost (versions

CVE-2026-59538

CVE-2026-59538 affects the WordPress GamiPress plugin up to version 7.9.7, with an unauthenticated SQL Injection vulnerability. The issue is triggered by unauthenticated access and is exploitable over the network with low complexity and no user interaction. CVSS 3.1 metrics indicate a CRITICAL ba...

CVE-2026-59537

The CVE concerns the WordPress plugin Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce (

CVE-2026-59536

WordPress CoCart – Headless ecommerce plugin

CVE-2026-59535

CVE-2026-59535 affects WordPress Thrive Product Manager plugin

CVE-2026-59534

The CVE-2026-59534 entry concerns the WordPress plugin Post My CF7 Form (versions

CVE-2026-59533

The CVE concerns the WordPress Relevanssi Light plugin (versions <= 1.2.2). It describes an unauthenticated SQL injection vulnerability in this plugin, with CVSS v3.1 indicating a CRITICAL base score (9.3) and HIGH confidentiality impact. The affected component is the Relevanssi Light plugin f...

CVE-2026-59531

CVE-2026-59531 applies to the WordPress Falcon – WordPress Optimizations & Tweaks plugin, version

CVE-2026-59532

The CVE concerns the WordPress Booking and Rental Manager plugin for WooCommerce (versions

CVE-2026-59530

CVE-2026-59530 affects the WordPress Stripe For WooCommerce plugin (versions

CVE-2026-59528

CVE-2026-59528 concerns the WordPress plugin ShipTime: Discounted Shipping Rates (versions

CVE-2026-59529

The CVE-2026-59529 entry concerns the WordPress Ebook Store plugin versions ≤ 6.19 with an unauthenticated sensitive data exposure vulnerability. Provided details indicate an external attacker can access sensitive data without authentication (CVSS v3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A...

CVE-2026-59527

The CVE-2026-59527 entry describes an unauthenticated SQL Injection in the WordPress MapSVG plugin, affected versions 8.14.0 and earlier. The issue originates from MapSVG’s handling of inputs in vulnerable components, allowing a remote attacker to manipulate queries and potentially access or modi...

CVE-2026-15003

CVE-2026-15003 affects the GNU Binutils linker. A heap-buffer-overflow read (CWE-125) occurs when processing a crafted 32-bit XCOFF object file, enabling an out-of-bounds memory read. This may cause information disclosure of heap data and a Denial of Service through linker crash. No specific vers...

CVE-2026-17514

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-65876

CVE-2026-65876 affects the Joomla extension from joomshaper.com, specifically the SP Page Builder pre-6.7.1. The vulnerability arises from improper validation of catid parameters in the loadMoreArticles endpoint, yielding an unauthenticated SQL injection. The CVSS 4.0 vector indicates network acc...

CVE-2026-65877

CVE-2026-65877 affects the Joomla extension SP Page Builder (

CVE-2026-65879

CVE-2026-65879 affects the Joomla SP Page Builder by joomshaper.com, with versions

CVE-2026-65766

CVE-2026-65766 affects the Joomla extension SP Page Builder by joomshaper.com, where unauthenticated SQL injection is possible due to improper validation of order parameters in the Dynamic Content endpoint in versions earlier than 6.7.1. The vulnerability enables an attacker to leverage an SQL in...

CVE-2026-65878

CVE-2026-65878 concerns the Joomla Extension from joomshaper.com, specifically SP Page Builder versions earlier than 6.7.1. The issue arises from improper path validation and ACL checks, creating a vector for authenticated users to perform arbitrary file deletion via the media manager. This is an...

CVE-2026-17513

CVE-2026-17513 affects ggml-org whisper.cpp; the issue lies in ggml_ftype_to_ggml_type in ggml/src/ggml.c where manipulation of the ftype argument leads to a reachable assertion. Reportedly requires local access; the project was informed via an issue but has not responded. No remediation or explo...

CVE-2026-47678

Technical details for CVE-2026-47678 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2026-55214

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-55214.

CVE-2026-53625

Technical details for CVE-2026-53625 are not publicly provided in the supplied documents; no affected products, impact, or remediation are specified. Monitor for updates from authoritative sources.

CVE-2026-52848

Technical details for CVE-2026-52848 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-53610

Technical details for CVE-2026-53610 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are disclosed. Monitor for updates.

CVE-2026-53629

Technical details for CVE-2026-53629 are not publicly available in the supplied documents. Monitor for updates.

CVE-2026-47679

Technical details for CVE-2026-47679 are not publicly available in the provided documents; no affected products, vectors, or remediation are described. Monitor for updates.

CVE-2026-57152

Technical details are not publicly available in the provided documents. The CVE entry is reserved/no details; no affected products, versions, or impact are disclosed. Monitor for updates.

CVE-2026-61511

Affected software: vBulletin 5.x (up to 5.7.5) and 6.x (up to 6.2.1).Vulnerability: eval injection in vB5_Template_Runtime::runMaths() within template runtime, allowing unauthenticated remote PHP code execution via crafted input in pagenav[pagenumber].Cause: insufficiently restrictive regex filte...

CVE-2026-17512

The CVE-2026-17512 entry concerns ggml-org whisper.cpp (version 1.8.4-58). The vulnerability affects the function log_mel_spectrogram in src/whisper.cpp and enables an out-of-bounds read. Access is locally exploitable, requiring that the attacker run code on the affected host. A pull request to f...

CVE-2026-59690

The CVE-2026-59690 entry concerns a Missing Authorization vulnerability across Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant. An authenticated attacker with low privileges can perform privileged administrative operations via th...

CVE-2026-59689

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF suffer an Incorrect Authorization vulnerability that allows an authenticated attacker with low privileges to escalate to root on the affected appliance, potentially leading to full system compromise. Acco...

CVE-2026-59688

The CVE-2026-59688 entry describes an OS Command Injection in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF. An authenticated user with high privileges can execute arbitrary OS commands on the affected appliance via the backup restore functi...

CVE-2026-59687

OS Command Injection in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary OS commands via the Geo Location management interface (and via backup restore in some disclosures), poten...

CVE-2026-59686

Technical details for CVE-2026-59686 are not publicly available in the provided documents; monitor for updates from vendors for affected products and fixes.

CVE-2026-56538

Technical details about CVE-2026-56538 are not publicly available in the provided documents; no specifics on affected components, versions, root cause, or remediation are given. Monitor for updates.

CVE-2026-56537

HCL Connections is affected by CVE-2026-56537, a information disclosure vulnerability caused by improper handling of request data. The issue is labeled as a LOW-severity concern (CVSS v3.1: 3.5) with network attack vector, low attack complexity, and user interaction required. It could allow an au...

CVE-2026-12991

CVE-2026-12991 affects Ghost Robotics Vision 60 with APK v5.5.0. Root cause: lack of cryptographic integrity/authentication for communications. An attacker on the local network can use ARP spoofing and selective traffic blocking to intercept and modify packets between the operator and the robot, ...

CVE-2026-12990

CVE-2026-12990 describes an access-control vulnerability in Ghost Robotics’ Vision 60 mobile app (APK v5.5.0). The issue allows multiple simultaneous sessions without proper client validation or session integrity checks, enabling a modified app to connect during an active legitimate session. Impa...

CVE-2026-12989

CVE-2026-12989 describes a lack of authentication in Ghost Robotics' Vision 60 mobile app (APK v5.5.0). An unauthenticated attacker on the device’s internal Wi‑Fi can access the web administration interface and HTTP API, bypassing authorization to view real‑time camera feeds, control robot moveme...