409357 matches found
CVE-2026-103636
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103635
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
CVE-2026-103513
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
CVE-2026-103501
Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...
CVE-2026-1061389
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...
CVE-2026-106139
In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) versions 2.5.0 through 16.2.0 are vulnerable to Cross-Site Scripting (XSS) via the default Chart tooltip. The root cause is that the single-point and shared tooltips render formatted point values as raw HTML without proper encoding. An at...
CVE-2026-106138
The In Progress® KendoReact (@progress/kendo-react-charts) component versions 1.1.0 through 16.2.0 are vulnerable to Cross-Site Scripting (XSS) . The root cause is that the default Chart tooltip renders formatted point values as raw HTML without proper encoding in both single-point and shared too...
CVE-2026-108506
The ZTE Z80 Ultra is affected by an unauthorized access vulnerability caused by inadequate access control and a lack of robust invocation authentication on its system interfaces. Specifically, third-party applications can utilize reflection to call these interfaces and retrieve sensitive informat...
CVE-2026-108505
ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information...
CVE-2026-107657
The HivePress WordPress plugin (versions ≤ 1.7.31 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the < parameter. The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attackers to inject arbitrary web scripts. For the vulnerability to be ex...
CVE-2026-4791
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 8.2.36 . The root cause is insufficient input sanitization and output escaping on user-supplied attributes within the logout-url shortcode's 'button'...
CVE-2026-104722
The Listdom: AI-powered Business Directory with Classifieds Ads Listings WordPress plugin is vulnerable to arbitrary file deletion in versions up to and including 6.1.2 . The root cause is insufficient file path validation within the LSD_Menus_IX_CSV::import function, specifically involving the i...
CVE-2026-91136
The Divi Plus plugin for WordPress (versions up to and including 2.4.0 ) is vulnerable to Arbitrary File Read via the svg_image parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. The vulnerability stems from the SVGAnimatorController::index_permission callback returning ...
CVE-2026-93951
The WordPress Zeinet theme (versions
CVE-2026-93746
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 5.0.2 . The flaw exists in the print_document_from_the_mail_link handler, which validates access...
CVE-2026-97340
The Avada | Website Builder For WordPress & WooCommerce theme (versions up to and including 7.16.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue resides in the Fusion_Social_Icon::get_markup() function, where social link contact-method fields (such as author_facebook) are emitt...
CVE-2026-103478
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.2.6 . The flaw stems from insufficient input sanitization and output escaping involving the checkout[billing][phone] parameter, as we...
CVE-2026-104759
The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to an Authentication Bypass in versions up to and including 44.1 . The root cause is located in Id_Token_Service_Deprecated::process_openidconnect_token(), which utilizes the incompatible W...
CVE-2026-102291
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in versions up to and including 6.3.1 . The root cause is the unfiltered substitution of a user's display_name into the page markup, which is subsequently processed ...
CVE-2026-104728
The AutomatorWP WordPress plugin (versions up to and including 5.8.4 ) is vulnerable to an authorization bypass leading to sensitive information disclosure. The root cause is the plugin's failure to properly verify user permissions when executing the wp_ajax_automatorwp_fluentform_get_forms AJAX ...
CVE-2026-96653
The WP Directory Kit plugin for WordPress (versions
CVE-2026-102774
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 1.12.1 . The flaw exists in the Community Post Content due to insufficient input sanitization and output escaping. Specificall...
CVE-2026-97396
The Email Marketing for WordPress and WooCommerce – Retainful plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.10 . The flaw originates from insufficient input sanitization and output escaping within the 'data' parameter of the /updateOptions REST ...
CVE-2026-96765
The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) in all versions up to and including 44.1 . The root cause is insufficient input sanitization and output escaping of the id_token paramet...
CVE-2026-100178
The WPAdverts – Classifieds Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.3.4 . The root cause is insufficient input sanitization and output escaping specifically involving the 'adverts_location' parameter. This flaw allows unauthent...
CVE-2026-101921
The WPForms WordPress plugin (versions up to and including 2.0.2.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the 'query_var' Smart Tag parameter. An unauthenticated attacker can inject arbitrary web sc...
CVE-2026-104803
The WPCOM Member plugin for WordPress (versions up to and including 1.7.27 ) is vulnerable to an Authentication Bypass via the uuid and code parameters of the social-login callback handler. The root cause is a lack of nonce validation, OAuth state verification, and per-visitor namespace isolation...
CVE-2026-100147
The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.16.0.5 . The root cause is insufficient input sanitization and output escaping involving the shipping_first_name parameter. This fl...
CVE-2026-101920
The Molongui Authorship WordPress plugin (versions up to and including 5.2.12 ) is vulnerable to Unauthenticated Stored DOM-Based Cross-Site Scripting . The flaw exists in the 'comment (href attribute inside comment content)' parameter due to insufficient input sanitization and output escaping. U...
CVE-2026-96662
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress is vulnerable to unauthenticated SQL Injection in all versions up to and including 5.7.2 . The root cause is insufficient escaping on the booking[service_id] parameter combined with a lack of sufficient preparation o...
CVE-2026-96278
The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 9.3.03.002 . The root cause is insufficient input sanitization and output escaping within the REQUEST_URI Session History functionality. Specifically, the esc_url_raw() ...
CVE-2026-96563
The Motors – Car Dealership & Classified Listings plugin for WordPress (versions up to and including 1.4.123 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the 'stm_f_s' parameter. This flaw allows authenticat...
CVE-2026-108504
The ZTE Z80 Ultra product contains an unauthorized information disclosure vulnerability due to insufficient access control for methods within the framework. An attacker can exploit this flaw to read device-related information . No specific remediation steps or exploit details are provided in the ...
CVE-2026-62045
The Booklovers WordPress theme (versions
CVE-2026-62046
The Gutentype theme for WordPress (versions
CVE-2026-93945
The Axiomthemes Balance WordPress theme (versions
CVE-2026-93942
The ThemeREX Group Dwell WordPress theme (versions
CVE-2026-93943
The Convex WordPress theme by ThemeREX Group, versions up to and including 1.16.0 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which can allow an attacker to execute arbitrary code or perform unauthorized actions. The vulnerability ...
CVE-2026-93944
The ThemeREX Group Camelia WordPress theme (versions
CVE-2026-93937
The WordPress Hygia theme (versions
CVE-2026-93938
The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...
CVE-2026-93940
The ThemeREX Group Greeny WordPress theme (versions
CVE-2026-93941
The ThemeREX Group Edema WordPress theme is affected by a PHP Object Injection vulnerability (CWE-502) in versions up to and including 1.2.2.2 . The root cause is the deserialization of untrusted data , which allows an attacker to achieve object injection. This vulnerability has a CRITICAL base s...
CVE-2026-93934
The ThemeREX Group Partiso WordPress theme is vulnerable to a PHP Object Injection vulnerability in versions up to and including 1.1.13 . This issue stems from the deserialization of untrusted data , which can allow an attacker to inject objects into the application. The impact is rated as CRITIC...
CVE-2026-93935
The ThemeREX Group Let's Play WordPress theme (versions
CVE-2026-93936
The WordPress IPharm theme (versions
CVE-2026-93930
The WordPress Tantra theme (versions
CVE-2026-93932
The Smart Casa WordPress theme, developed by ThemeREX Group , is vulnerable to a PHP Object Injection flaw in versions 1.0.12 and below. This vulnerability stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary code or manipulate application logic. T...