2026

The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outputting it back in the

The Logo Slider WordPress plugin before 4.9.0 does not validate and escape some of its slider options before outputting

The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthentica

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the

The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User

A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/conn

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the fil

A flaw has been found in go-sonic sonic up to 1.1.4. The affected element is the function FetchTheme of the file service

A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m

A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decom

A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::Inse

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access req

Signal K Server is a server application that runs on a central hub in a boat. An unauthenticated information disclosure

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include f

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape th

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipul

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Server-Side Request Forger

The All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs - My Sticky Elements plugin f

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Versions prior to 0.24.5 have a Heap-Use-After-Fre

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results

A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an un

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provid

In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username e