2026

The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthentica

A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemo

A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/we

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/de

A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_w

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the

The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and in

The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User

A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/conn

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_wo

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_ses

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_pars

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request o

A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the fil

A flaw has been found in go-sonic sonic up to 1.1.4. The affected element is the function FetchTheme of the file service

A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m

A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decom

A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::Inse

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access req

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 expose two featur

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore i

Signal K Server is a server application that runs on a central hub in a boat. An unauthenticated information disclosure

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown function

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown fu

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include f

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape th

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_h

Signal K Server is a server application that runs on a central hub in a boat. A Denial of Service (DoS) vulnerability in

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticate

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/C

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /a

Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implem

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX

A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apac

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipul

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Server-Side Request Forger

The All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs - My Sticky Elements plugin f

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Versions prior to 0.24.5 have a Heap-Use-After-Fre

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results

A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an un

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the fi

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubern

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provid

In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username e