2026

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenti

WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attacker

WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attack

WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticat

Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the usernam

Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete

GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malic

WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated at

Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to

LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary co

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structur

Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that al

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attacker

PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary

Zuz Music 2.1 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject m

Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQ

PDF Signer 3.0 contains a server-side template injection vulnerability that allows unauthenticated attackers to execute

Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL

WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated atta

All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute

Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in i

This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic

A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are pro

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the sys

A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/r

A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflo

A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the libra

HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site script

HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to

HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing s

HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an ar

A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user t

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMembe

A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_

Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: b

Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrar

The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems t

The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall l

The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary

In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Galler

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Mani

Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. T

Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rl

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This iss

A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_featu

Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: be