417868 matches found
CVE-2026-62026
The MIGHTYminnow Dashboard Notes WordPress plugin (versions up to and including 1.0.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. No specific exploit information or reme...
CVE-2026-94060
The Bracketweb Voldor WordPress theme (versions
CVE-2026-94062
The Fuelthemes Werkstatt WordPress theme (versions ≤ 4.8.3 ) is vulnerable to a PHP Local File Inclusion (LFI) flaw. The root cause is the Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98). This vulnerability allows an attacker to include local files on the server...
CVE-2026-94058
The Bracketweb Treck WordPress theme (versions
CVE-2026-94059
The WordPress Ogency theme is vulnerable to a Reflected Cross-site Scripting (XSS) vulnerability in versions up to and including 1.0.0 . The root cause is the improper neutralization of input during web page generation , which allows an attacker to reflect malicious scripts in the victim's browse...
CVE-2026-94061
The Designthemes Whistle - Sports Club WordPress theme (versions
CVE-2026-103413
Apache Camel Karavan versions 4.0.0 through 4.22.0 are vulnerable to an improper input validation flaw during deployment. The software unmarshals a project's kubernetes.yaml and applies all contained resources to the cluster without restricting resource kinds, rejecting security-sensitive pod opt...
CVE-2026-103412
Apache Camel Karavan versions from 3.18.0 before 4.22.1 are vulnerable to a path traversal vulnerability. The application's project file API uses project file names verbatim as path segments when writing to a working copy for a Git commit. By providing a name containing ../ sequences, an authenti...
CVE-2026-86405
The Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module is affected by an improper verification of cryptographic signature vulnerability. This flaw allows for Signature Spoofing due to improper validation within the module. The vulnerability specifically affects version...
CVE-2026-103220
The Affinity by Canva application, in versions prior to 3.3.1 (October 2026 release), is vulnerable to an out-of-bounds block-array read. The root cause is inadequate bounds checking when parsing raster image data within Affinity document files, which can lead to an out-of-bounds read and the der...
CVE-2026-101130
The Affinity by Canva application (versions prior to 3.3.1 , October 2026 release) is vulnerable to a heap buffer over-read due to inadequate bounds checking when parsing arrays of strings in Affinity document files. Specifically, the flaw exists in Kernel::InSerialiser::LoadTypes involving a pro...
CVE-2026-101094
The Affinity by Canva application, prior to version 3.3.1 (October 2026 release), contains an unbounded over-read vulnerability in Story::GlyphString::Add . The issue stems from the software's failure to correctly handle incomplete UTF-8 character sequences while parsing text within Affinity docu...
CVE-2026-96396
The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an integer overflow leading to a heap-based buffer overflow . The flaw occurs because the application does not safely calculate the size of an image buffer when generating QuickLook thumbna...
CVE-2026-96395
The Affinity by Canva app for macOS (versions prior to 3.3.1 ) is vulnerable to a heap memory disclosure due to an unchecked palette index in the QuickLook extensions . This flaw occurs because the application fails to perform adequate bounds checking when generating QuickLook thumbnails and prev...
CVE-2026-96394
The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an out-of-bounds heap read (CWE-126). The root cause is a failure to validate image dimensions against the size of pixel data when generating QuickLook thumbnails and previews of Affinity d...
CVE-2026-96393
The Affinity by Canva app (versions prior to 3.3.1 , October 2026 release) is vulnerable to an out-of-bounds pointer dereference caused by inadequate bounds checking during the parsing of Affinity document files. Specifically, the vulnerability exists in the Raster::Region::~Region component. A t...
CVE-2026-85531
The OpenCart Virtual POS Module by Sipay Electronic Money and Payment Services Inc. is vulnerable to a payment validation bypass due to improper verification of cryptographic signatures. This flaw allows for Signature Spoofing by improper validation, affecting versions 26.8.2 before 26.9.1 . The ...
CVE-2026-62028
The Before After Image Comparison – Image comparison for WP WordPress plugin (versions
CVE-2026-8374
The SwitchBot Door Lock Series is affected by a vulnerability involving the misuse and misconfiguration of cryptographic algorithms during Bluetooth communication. An attacker can exploit a manipulated communication protocol to bypass the electronic lock and gain access to security controls. The ...