2026

The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a us

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing

The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked func

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by

mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a

The FIOSSHMLPGCNF ioctl(2) operation configures the page size for a largepage shared memory object. This is intended to

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty loc

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputtin

The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network be

The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restr

The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored s

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin bef

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3

The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through i

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before p

The Booking for Appointments and Events Calendar WordPress plugin before 9.8 does not verify that an authenticated empl

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before r

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check (rel

The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership in

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can exec

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), which maps permissions

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unva

Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows unauthenticated attackers t

Kimai versions before 2.56.0 fail to restrict the config() Twig function in sandboxed invoice and export templates, allo

Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints

Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PA

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_pro

Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new t

@better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) con

GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated use

LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in int

CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file.

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A m

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was st

The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would

The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket b

When a process calls execve(2) to execute a setuid or setgid image, hwpmc(4) is supposed to detach PMCs owned by unprivi

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 ac

Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versio

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device mo

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive In