CVE-2026-97468

Apache CXF 's STSTokenValidator and Security Token Service (STS) are vulnerable to an authentication bypass because they cache validated security tokens using a weak, non-cryptographic 32-bit hash (Java Arrays.hashCode/hashCode() ). A remote attacker can craft a security token, such as a Username...

CVE-2026-86463

The Apache CXF FIQL query parser contains a vulnerability where the search pattern for operators can become stuck when processing long strings without an operator. This flaw causes the parser to consume excessive CPU time , potentially leading to a Denial of Service (DoS) or significant performan...

CVE-2026-79650

The Apache CXF OIDC relying-party component is vulnerable to an open redirect (CWE-601) where users can be redirected to an attacker-controlled URL after successful authentication. The root cause is that attacker-controlled state parameters are preserved and used as redirect targets without verif...

CVE-2026-78384

A vulnerability exists in Apache CXF (specifically the org.apache.cxf:cxf-core component) where the CompressionUtils.inflate() function fails to enforce an output-size cap when decompressing DEFLATE data. A remote attacker can exploit this by submitting a small, crafted payload that expands into ...

CVE-2026-73179

The Apache CXF JPA OAuth2 authorization code grant provider is vulnerable to a race condition due to non-atomic find-then-delete operations on a shared relational database under READ_COMMITTED isolation. A remote attacker can exploit this to obtain multiple valid access tokens from a single autho...

CVE-2026-71575

The Apache CXF framework is vulnerable in the OidcClientCodeRequestFilter component due to an inoperative max_age authentication-freshness check. The root cause is a unit mismatch between milliseconds and seconds combined with an inverted comparison polarity . This flaw allows relying parties usi...

CVE-2026-18194

IBM App Connect Enterprise version 13.0.x is vulnerable to a clickjacking attack (CWE-1021) due to missing anti-clickjacking controls. A remote attacker could perform unauthorized actions by exploiting the improper restriction of rendered UI layers. To remediate this vulnerability, IBM recommends...

CVE-2026-93947

The Shinetheme Traveler WordPress theme is vulnerable to a Blind SQL Injection (CWE-89) in versions 3.2.9 and below . The root cause is the improper neutralization of special elements used in SQL commands. This vulnerability allows an attacker to execute unauthorized SQL queries, potentially lead...

CVE-2026-94158

The bkninja Gloria Admin Panel WordPress plugin (versions

CVE-2026-96334

The ThemeGrill User Registration WordPress plugin (versions

CVE-2026-94167

The Extend Themes Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.9.3 . Exploitation of this flaw could allow an attacker to ...

CVE-2026-94161

The ThemeGoods Grand Restaurant WordPress theme (versions prior to 7.0.11 ) is vulnerable to Reflected Cross-site Scripting (XSS) . This issue is caused by the Improper Neutralization of Input During Web Page Generation (CWE-79), allowing an attacker to execute scripts in a user's browser. No spe...

CVE-2026-94170

The Heateor Support Sassy Social Share WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) (CWE-79) in versions up to and including 3.3.79 . This flaw stems from the improper neutralization of input during web page generation . While specific exploitation details and remediatio...

CVE-2026-94503

The PX-lab Zombify WordPress plugin (versions n/a through 1.7.7 ) is vulnerable to an Unrestricted Upload of File with Dangerous Type (CWE-434). This vulnerability allows an attacker to upload a web shell to the web server, potentially leading to unauthorized access and control. No specific remed...

CVE-2026-94159

The KlbTheme Total Donations WordPress plugin (versions

CVE-2026-94664

The PDF for Contact Form 7 WordPress plugin (versions 7.1.0 and below ) is vulnerable to a Path Traversal vulnerability (CWE-22). This flaw allows an attacker to perform an Arbitrary File Download , potentially exposing sensitive files on the server. Exploitation details regarding specific vector...

CVE-2026-96607

The Basix NEX-Forms nex-forms-express-wp-form-builder WordPress plugin (versions n/a through 9.3.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . This flaw is caused by the improper neutralization of input during web page generation . While the documents confirm the existence of the vu...

CVE-2026-94666

The ZealousWeb Generate PDF using Contact Form 7 WordPress plugin (versions n/a through 4.2.1 ) is vulnerable to a Path Traversal vulnerability. This flaw allows an attacker to perform an Arbitrary File Download , potentially exposing sensitive files on the server. No specific remediation steps o...

CVE-2026-96332

The yalla ya! Simple Payment (simple-payment) WordPress plugin, versions n/a through 2.5.4 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The vulnerability is caused by the improper neutralization of input during web page generation. This allows an attacker to execute malicious s...

CVE-2026-94667

The Crocoblock JetReviews WordPress plugin (versions up to and including 3.1.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This is caused by the improper neutralization of input during web page generation . The vulnerability allows an attacker to inject malicious scripts that are store...