NPM: markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

NPM: markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options regression since 14.0 vulnerability discovered by ? in WordPress Npm markdown-it versions = 14.1.0, 14.3.3...

NPM: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

NPM: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled vulnerability discovered by ? in WordPress Npm markdown-it versions 14.3.3...

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm launch-editor versions = 2.14.1...

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm vite versions = 6.4.3...

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm vite-plus versions = 1.0.0...

NPM: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

NPM: launch-editor: fs.existsSync existence check can be bypassed on Windows vulnerability discovered by ? in WordPress Npm launch-editor versions = 2.14.1...

NPM: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

NPM: launch-editor: fs.existsSync existence check can be bypassed on Windows vulnerability discovered by ? in WordPress Npm vite versions = 6.4.3...

NPM: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

NPM: launch-editor: fs.existsSync existence check can be bypassed on Windows vulnerability discovered by ? in WordPress Npm vite-plus versions = 1.0.0...

NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows

NPM: launch-editor: escapeCmdArgs omits % escaping on Windows vulnerability discovered by ? in WordPress Npm vite-plus versions = 1.0.0...

NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows

NPM: launch-editor: escapeCmdArgs omits % escaping on Windows vulnerability discovered by ? in WordPress Npm launch-editor versions = 2.14.1...

NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows

NPM: launch-editor: escapeCmdArgs omits % escaping on Windows vulnerability discovered by ? in WordPress Npm vite versions = 6.4.3...

NPM: ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

NPM: ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship viewRole is not applied to the general public vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

NPM: ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Path traversal in uploadfs

NPM: ApostropheCMS: Path traversal in uploadfs vulnerability discovered by ? in WordPress Npm uploadfs versions 1.28.0...

NPM: ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

NPM: ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection XSS vulnerability discovered by ? in WordPress Npm sanitize-html versions = 2.17.7, 2.18.0...

NPM: ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

NPM: ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL sas: true vulnerability discovered by ? in WordPress Npm uploadfs versions = 1.25.0, 1.28.0...

NPM: ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers

NPM: ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

NPM: ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

NPM: ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

NPM: ApostropheCMS: Incomplete CVE-2026-53606: meta http-equiv=refresh content still ships javascript: / data: URLs vulnerability discovered by ? in WordPress Npm sanitize-html versions 2.18.0...

NPM: ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

NPM: ApostropheCMS: :id/locales REST route omits the public-API authorization gate its sibling read routes enforce unauthenticated doc-existence + locale metadata disclosure vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Page REST API authorization bypass

NPM: ApostropheCMS: Page REST API authorization bypass vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

NPM: ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Cross-domain session token in URL confers session takeover

NPM: ApostropheCMS: Cross-domain session token in URL confers session takeover vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization

NPM: ApostropheCMS: Same-parent page reorder in @apostrophecms/page move re-ranks a restricted parent's children without create authorization vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

NPM: ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

NPM: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

NPM: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting content render vulnerability discovered by ? in WordPress Npm sanitize-html versions 2.18.0...

NPM: follow-redirects array-form headers bypass cross-origin credential stripping

NPM: follow-redirects array-form headers bypass cross-origin credential stripping vulnerability discovered by ? in WordPress Npm follow-redirects versions = 1.16.0, 1.16.1...

NPM: follow-redirects sensitiveHeaders regex escaping can expose credential headers

NPM: follow-redirects sensitiveHeaders regex escaping can expose credential headers vulnerability discovered by ? in WordPress Npm follow-redirects versions = 1.16.0, 1.16.1...

WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation vulnerability

Authenticated Author+ Limited Privilege Escalation vulnerability discovered by pbsec in WordPress Plugin Profile Builder versions = 4.0.3...

WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ssophiz in WordPress Plugin WP User Manager versions = 2.9.25...

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.9.7...

WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Booktics versions = 1.0.30...

WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin Rootblox versions = 1.0.7...

WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Deva Parekh in WordPress Plugin SureCart versions = 4.9.5...

WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ayukiab in WordPress Plugin VikRentCar versions = 1.4.8...

WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Deva Parekh in WordPress Plugin Meta Box – WordPress Custom Fields Framework versions = 5.15.2...

WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Deva Parekh in WordPress Plugin Seriously Simple Podcasting versions = 3.17.0...

WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Deva Parekh in WordPress Plugin Seriously Simple Podcasting versions = 3.17.0...

NPM: Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

NPM: Hono: serveStatic decodes the request path a second time, leading to bypass of middleware on static paths vulnerability discovered by ? in WordPress Npm hono versions = 4.12.4, 4.13.11...

NPM: markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes

NPM: markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes vulnerability discovered by ? in WordPress Npm markdown-it versions 14.3.2...

WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ayukiab in WordPress Plugin Brizy versions 2.8.23...

WordPress DiviGear Carousel plugin <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Austin Ginder in WordPress Plugin DiviGear Carousel versions = 5.2.0...

WordPress Document Gallery plugin 4.1-5.1.1 - Unauthenticated Document Thumbnail Replacement vulnerability

Unauthenticated Document Thumbnail Replacement vulnerability discovered by Artus KG in WordPress Plugin Document Gallery versions 4.1-5.1.1...

WordPress BDM Digital Payment Gateway plugin 1.2.7-1.3.12 - Unauthenticated Payment Confirmation Forgery vulnerability

Unauthenticated Payment Confirmation Forgery vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin BDM Digital Payment Gateway versions 1.2.7-1.3.12...

WordPress Coinbase Commerce Payment Gateway for WooCommerce plugin <= 1.4.1 - Unauthenticated Webhook Signature Bypass vulnerability

Unauthenticated Webhook Signature Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Coinbase Commerce Payment Gateway for WooCommerce versions = 1.4.1...

WordPress WP Photo Album Plus plugin < 9.2.11.002 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Photo Album Plus versions 9.2.11.002...

WordPress WP User Manager plugin 2.9-2.9.19 - Unauthenticated Account Creation vulnerability

Unauthenticated Account Creation vulnerability discovered by Sanjorn Keeratirungsan in WordPress Plugin WP User Manager versions 2.9-2.9.19...

WordPress EventON - Subscriber plugin <= 1.4.5 - Unauthenticated SQL Injection vulnerability

WordPress EventON - Subscriber plugin = 1.4.5 - Unauthenticated SQL Injection vulnerability discovered by Austin Ginder in WordPress Plugin EventON - Subscriber versions = 1.4.5...