CVE-2026-125780

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Acowebs Woocommerce Custom Product Addons Pro woo-custom-product-addons-pro allows Path Traversal.This issue affects Woocommerce Custom Product Addons Pro: from n/a through 5.9.0...

CVE-2026-125449

Deserialization of Untrusted Data vulnerability in Mamunur Rashid Testimonial Slider testimonial-slider-and-showcase allows Object Injection.This issue affects Testimonial Slider: from n/a through 3.0.2...

CVE-2026-124259

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Franky Events Made Easy events-made-easy allows Reflected XSS.This issue affects Events Made Easy: from n/a through 3.3.5...

CVE-2026-124755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field advanced-custom-fields-font-awesome allows Stored XSS.This issue affects Advanced Custom Fields: Font Awesome Field: from n/a through 6.1.4...

CVE-2026-125764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This issue affects e2pdf: from n/a through 1.32.65...

CVE-2026-125769

Incorrect Privilege Assignment vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Privilege Escalation.This issue affects Advanced Form Integration: from n/a through 2.11.3...

CVE-2026-124254

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Exactly WWW LLC EWWW Image Optimizer ewww-image-optimizer allows Stored XSS.This issue affects EWWW Image Optimizer: from n/a through 8.9.1...

CVE-2026-125813

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Survey Maker survey-maker allows Reflected XSS.This issue affects Survey Maker: from n/a through 5.2.4.3...

CVE-2026-125832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows SQL Injection.This issue affects WP Data Access: from n/a through 5.5.92...

CVE-2026-125791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iWorks Orphans sierotki allows Stored XSS.This issue affects Orphans: from n/a through 3.4.6...

CVE-2026-125805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through 2.8.204...

CVE-2026-125828

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP BookIt bookit allows Stored XSS.This issue affects BookIt: from n/a through 2.6.0.7...

CVE-2026-124270

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through 9.3.3...

CVE-2026-125443

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denishua WPJAM Basic wpjam-basic allows DOM-Based XSS.This issue affects WPJAM Basic: from n/a through 7.1.2...

CVE-2026-125789

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Stored XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.20...

CVE-2026-124995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michal Jaworski Track, Analyze & Optimize by WP Tao wp-tao allows Stored XSS.This issue affects Track, Analyze & Optimize by WP Tao: from n/a through 1.3.1...

CVE-2026-122662

Deserialization of Untrusted Data vulnerability in Barn2 Plugins Document Library Pro document-library-pro allows Object Injection.This issue affects Document Library Pro: from n/a before 4.2.2...

CVE-2026-125857

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-125775

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affects CRM Perks Forms: from n/a through 1.1.8...

CVE-2026-125790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Stored XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.20...

CVE-2026-129482

OkHttp versions through 5.5.1 are vulnerable to a certificate pinning bypass due to an improper certificate validation flaw in the CertificatePinner component. The root cause is that Pin.matchesHostname fails to normalize hostnames ending with a trailing dot , causing the system to skip required ...

CVE-2026-129483

Cyrus SASL versions through 2.1.28 are vulnerable to an authentication bypass in the SRP server mechanism. The flaw exists because the srp_server_mech_step2 function fails to reject client public values A that are multiples of N . An unauthenticated network client can exploit this by sending A eq...

CVE-2026-129453

A heap-based buffer overflow vulnerability exists in the DrayTek Vigor2960 (version 1.5.1.6) within the File Existence Check component. The issue is located in the check_file_exist function of the /cgi-bin/mainfunction.cgi file, where manipulating the upload_name argument can trigger the overflow...

CVE-2026-129477

Versions of Assimp through 6.0.6 are vulnerable to a path traversal flaw in the glTF and glTF2 importers. The root cause is the improper limitation of pathnames when processing buffers[].uri values. An attacker can provide a crafted glTF model containing '..' segments or absolute paths within the...

CVE-2026-129479

The Assimp library (versions through 6.0.6 ) is vulnerable to an integer overflow in the OgreBinarySerializer::ReadSubMesh function. An attacker can provide a crafted Ogre binary .mesh file with a large index count, causing the 32-bit buffer size to wrap. This leads to a segmentation fault in aiM...

CVE-2026-129478

The Assimp library (versions through 6.0.6 ) is vulnerable to a heap out-of-bounds read within the glTFCommon::Util::ParseDataURI function. The root cause is the incorrect storage of a data offset in a signed char , which allows attackers to provide a crafted glTF file with a raw data URI startin...

CVE-2026-129480

The Assimp library versions through 6.0.6 are vulnerable to a heap out-of-bounds read in the MD2Importer::InternReadFile function. The root cause is an unvalidated stored frameSize header field within the .md2 file format. An attacker can provide a specially crafted .md2 file with a non-zero keyf...

CVE-2026-129467

GeoPulse versions 1.5.0 through 2.3.0 are affected by an Insecure Direct Object Reference (IDOR) vulnerability in the GET /api/v1/places/geocoding/{id} endpoint. This flaw allows authenticated users to access other users' private location data by enumerating sequential reverse_geocoding_location ...

CVE-2026-129468

Netcccyun dnsmgr versions 2.18 through 2.21 are susceptible to a missing authorization vulnerability within the POST /cloudflare/get_domain_default_line endpoint. This flaw allows restricted sub-users or single-domain logins to iterate the domain_id parameter, enabling them to enumerate panel dom...

CVE-2026-129469

The software course-tencent-cloud prior to version 2.0.2 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. The flaw exists in the /api/refund/confirm endpoint, where unauthenticated attackers can view other users' refund previews by supplying an order serial number (sn)....

CVE-2026-129452

The DrayTek Vigor2960 (version 1.5.1.6 ) is vulnerable to a remote command injection vulnerability in the set_table function of the /cgi-bin/mainfunction.cgi file. This flaw occurs when the jsondata argument is improperly handled, allowing an attacker to execute arbitrary commands remotely. The e...

CVE-2026-129451

The DrayTek Vigor2960 (versions up to 1.5.1.6 ) is vulnerable to a path traversal flaw in the app_guest_export function of the /cgi-bin/mainfunction.cgi file. This vulnerability occurs due to improper manipulation of the filename argument, allowing for remote attacks. Public exploits have been pu...

CVE-2026-129450

A path traversal vulnerability exists in the DrayTek Vigor2960 (version 1.5.1.6) within the sub_1E084 function of the /cgi-bin/mainfunction.cgi?action=doWebBackup file. Attackers can exploit this by manipulating the option argument to access files outside the intended directory. This vulnerabilit...

CVE-2026-129449

The DrayTek Vigor2960 router (up to version 1.5.1.6 ) is vulnerable to a command injection flaw. The issue resides in the sub_14914 function within the /cgi-bin/mainfunction.cgi file, where improper handling of the swmconfigupload argument allows for remote execution. This vulnerability has been ...

CVE-2026-129445

A security flaw exists in the D-Link DIR-850L running firmware version FW1.20WWb03 . The vulnerability affects an unknown function within the Console Login component, specifically involving the file /usr/sbin/consolepwd . Exploiting this flaw allows an attacker to obtain hard-coded credentials vi...

CVE-2026-82663

The Give - Peer-to-Peer plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 2.9.5 . The root cause is the plugin's failure to properly verify user authorization when performing specific actions. An unauthenticated attacker who knows or discovers an ex...

CVE-2026-82568

The Give - Peer-to-Peer plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 2.9.3 . The flaw exists because of insufficient escaping on the user-supplied 'sort' parameter and a lack of sufficient preparation on the existing SQL query. Unauthenticat...

CVE-2026-129349

Apache Shiro versions through 3.0.0 are vulnerable to an authentication bypass when using DefaultLdapRealm (or JndiLdapRealm ) with authenticationCachingEnabled set to true. The root cause is the default installation of AllowAllCredentialsMatcher , which accepts any credentials for a user who has...

CVE-2026-129444

The D-Link DSL-6740C (version 20131126 ) is vulnerable to a flaw in the FTP Daemon component. Specifically, an unknown function within the file /etc/templates/ftpd/ftpd_conf.php allows for the manipulation of hard-coded credentials . This vulnerability can be exploited remotely to compromise the ...

CVE-2026-129443

The itsourcecode Airline Reservation System 1.0 contains a SQL injection vulnerability within an unknown function of the /admin/manage_user.php file. The flaw is triggered by the manipulation of the ID argument , potentially allowing for remote exploitation. The documents indicate that an exploit...

CVE-2026-124671

The Burst Statistics WordPress plugin, versions prior to 3.7.5 , contains a vulnerability where it fails to enforce the specific date range of a shared report. This allows any individual with the share link to access and read analytics statistics for the entire period retained by the site, rather...

CVE-2026-124673

The Burst Statistics WordPress plugin (versions prior to 3.7.5 ) is vulnerable to unauthorized information disclosure. The plugin fails to verify if a reported page view belongs to published content and does not check the post status before including titles and links in its public statistics outp...

CVE-2026-127048

The Custom Block Builder WordPress plugin before version 3.0.0 contains a vulnerability where it fails to properly deny unauthorized requests to its REST routes . Because permission checks return a non-error response, WordPress treats the access as granted. This allows unauthenticated users to pe...

CVE-2026-114451

The Kadence Memberships WordPress plugin (versions prior to 4.0.6 ) is vulnerable to an unauthenticated table collation downgrade. The flaw exists because the plugin fails to perform proper authorization or CSRF checks before executing a schema-altering database maintenance routine via the 'rcp-a...

CVE-2026-123707

The WPGraphQL WordPress plugin before version 2.27.1 is vulnerable to a content disclosure flaw. The plugin fails to restrict access to posts set to custom non-public post statuses , which allows users with the Contributor role and above to read the content of other users' posts in those statuses...

CVE-2026-110989

The RegistrationMagic WordPress plugin (versions 5.2.3.1 - 6.1.0.3 ) is vulnerable to unauthenticated user profile modification. The root cause is a failure to verify ownership of a submitted email address before updating the associated WordPress user account. This allows an unauthenticated attac...

CVE-2026-114452

The Kadence Memberships WordPress plugin (versions 3.2.17 through 4.0.5 ) contains an Insecure Direct Object Reference (IDOR) vulnerability. The flaw stems from a failure to verify that a membership referenced in a saved-card payment request actually belongs to the requesting user. This allows su...

CVE-2026-110984

The RegistrationMagic WordPress plugin, in versions prior to 6.1.0.4 , is vulnerable to SQL injection . The flaw occurs because the plugin fails to properly sanitize and escape the rm_fromdate and rm_dateupto parameters before including them in a SQL statement. This vulnerability could allow high...

CVE-2026-103361

The Payment Gateway via Valitor for WooCommerce WordPress plugin, in versions prior to 1.9.41 , contains a vulnerability where it fails to properly validate the authenticity of payment callbacks. The root cause is the use of a hard-coded default verification secret shipped with the plugin; if a s...

CVE-2026-110960

The Auth Armor WordPress plugin (version 1.0.3 and below) is vulnerable to an unauthenticated account takeover . The flaw exists because several handlers accessible to logged-out users do not require authentication, leading to the leakage of stored API credentials . An unauthenticated attacker ca...