CVE-2026-93971

An information disclosure vulnerability was identified in aiyiyi121 SxDevOps versions 1.0 and 1.1, located in an unknown function of the file backend/sxdevops/settings.py . The weakness can be exploited remotely without authentication, leading to a low confidentiality impact (CVSS 3.1: 5.3 Medium...

CVE-2026-93970

aiyiyi121 SxDevOps (versions 1.0/1.1) contains a hard-coded credentials vulnerability in the file backend/sxdevops/settings.py within the Settings Handler component. The flaw is exploitable remotely over the network with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) with ...

CVE-2026-93969

SxDevOps (by aiyiyi121) versions 1.0 and 1.1 contain a hard-coded credential vulnerability in the ensure_default_superuser function within rbac/services.py. An unauthenticated remote attacker can leverage this to gain unauthorized access, resulting in low impact on confidentiality, integrity, and...

CVE-2026-93968

aiyiyi121 SxDevOps versions 1.0 and 1.1 are affected by an improper privilege management vulnerability in the update function of the UserSerializer component (file backend/rbac/serializers.py). A remote attacker with high privileges can manipulate the update function to alter user privileges, res...

CVE-2026-93967

CVE-2026-93967 affects aiyiyi121 SxDevOps 1.0/1.1 , a DevOps platform. The vulnerability is a command injection in the function generate_host_task within the file backend/aiops/services.py (component: Command Handler). Manipulating the command argument allows an authenticated remote user to injec...

CVE-2026-92423

The Meow Gallery WordPress plugin before 5.5.5 fails to perform a proper capability check or restrict results to the requesting user's own posts in the fetch_posts function, allowing authenticated users with Author-level access or above to disclose the titles, authors, dates, and statuses of othe...

CVE-2026-92422

The Meow Gallery WordPress plugin (versions before 5.5.5 ) contains an unsanitized input vulnerability in the load_gallery_collection REST route. A user-supplied value is concatenated into a shortcode string and passed to the WordPress shortcode parser without proper sanitization, allowing unauth...

CVE-2026-92541

CVE-2026-92541 affects the Import and export users and customers WordPress plugin in versions prior to 2.5.2 . The plugin fails to enforce the promote_users capability in its front-end import functionality, enabling users who only hold the create_users capability to change the role of existing us...

CVE-2026-92965

The TikTok WordPress plugin (versions 1.2.0 through 1.4.1 ) suffers from an unauthenticated OAuth code redemption flaw. The plugin fails to verify that a request is authorized before processing a sign-in code supplied in the URL. Because the code is matched loosely—triggering on URLs that merely ...

CVE-2026-92410

CVE-2026-92410 affects the Sign-up Sheets WordPress plugin prior to version 2.4.0 . The plugin does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing an attacker to delete sign-up records by sending a forged request that is processed within the session of a ...

CVE-2026-92540

The Import and export users and customers WordPress plugin before 2.5.2 contains a privilege escalation flaw in its CSV import functionality. The plugin fails to correctly enforce the promote_users capability (via the caller_can_promote_users function) when assigning roles, allowing a user with o...

CVE-2026-87840

CVE-2026-87840 affects the Tripzzy WordPress plugin in versions before 1.5.1 . The plugin fails to perform any capability or ownership checks on its administrative booking-management actions, which are exposed to unauthenticated users and gated only by a token the plugin issues to any anonymous v...

CVE-2026-87839

Tripzzy WordPress plugin versions before 1.5.1 expose an AJAX action to unauthenticated users that lacks both authorization checks and validation of the target object's identifier. An unauthenticated attacker can therefore permanently delete arbitrary comments on a site, resulting in a HIGH (7.5)...

CVE-2026-87067

CVE-2026-87067 affects the Forminator Forms WordPress plugin in versions before 1.57.2.1 . The root cause is an unrestricted PHP object deserialization of a value taken from an XML-RPC request , which allows an attacker to instantiate arbitrary classes. An authenticated user holding the plugin's ...

CVE-2026-87068

The Forminator Forms WordPress plugin prior to 1.57.2.1 contains an authenticated privilege escalation vulnerability. When a registration form is nested inside an imported quiz, the role validation enforced elsewhere is bypassed, allowing a user with quiz import capability to publish a publicly r...

CVE-2026-81654

The NextGEN Gallery WordPress plugin (versions before 4.5.0 ) contains a missing capability check when saving image sizing settings. A user granted only the plugin's gallery-management capability by an administrator can modify settings that apply site-wide , without holding the required options c...

CVE-2026-81653

NextGEN Gallery (Photo Gallery, Sliders, Proofing and) WordPress plugin versions before 4.5.0 contain an Insecure Direct Object Reference (IDOR) flaw: the plugin does not verify that the user acting on an image actually owns the gallery it belongs to. Any user granted the plugin's gallery-managem...

CVE-2026-84223

CVE-2026-84223 affects the Kirki WordPress plugin versions 6.0.0 through 6.3.0 . The plugin fails to sanitize uploaded SVG files while making them uploadable site-wide. An attacker with author-level access or higher can upload an SVG containing JavaScript , which is then served from the site's ow...

CVE-2026-82842

The SAML Single Sign On WordPress plugin (before 6.0.0 ) fails to honour the configured criterion for linking an incoming SSO identity to a WordPress account, always resolving the identity by login name instead. An attacker who can have the site's identity provider assert a login name of their ch...

CVE-2026-85017

Unlimited Elements For Elementor is a WordPress plugin that, in versions before 2.0.20 , fails to perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it. This allows authenticated attackers with subscriber-level access to inject arbitrary PHP obje...