2026

Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of s

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Key Softwar

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the

A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions

A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions

When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit

NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input

NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful expl

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed enviro

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciou

NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code i

NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code inj

NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A

Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an

The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for Wor

The WP All Export plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to SQL Injection in all versi

The Bookster – WordPress Appointment Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘raw’ pa

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication

The Brevo - Email, SMS, Web Push, Chat, and more. plugin for WordPress is vulnerable to authorization bypass due to type

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of t

The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 v

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of d

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Incorre

The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The WPNakama – Team and multi-Client Collaboration, Editorial and Project Management plugin for WordPress is vulnerable

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to unauthorized arbitrary shortcode execution in all ve

The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_events' s

The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check i

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ce_venue_name' parameter

The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 v

The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.

The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via setting

The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized license key deletion due t

The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi

The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and ac

The EventPrime plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization checks

A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the lib

A security vulnerability has been detected in ggreer the_silver_searcher up to 2.2.0. The impacted element is the functi

The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Missing Authorization in all versions u

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injec

The Private Comment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Label text' setting in al