2026

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ

NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-na

The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, wh

Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2

Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vul

When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional

When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an addi

The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embed

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boun

In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'u

The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity used to enforce its o

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is char

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payme

The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notif

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages ad

A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Stover Ninja

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te

The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the integrity of its cart-r

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any authorization check on a l

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before u

The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a pag

The Wava Payment Plugin WordPress plugin before 0.3.10 does not perform any authorisation, nonce or origin verification

The Wava Payment Plugin WordPress plugin before 0.3.10 does not verify the authenticity of incoming payment-provider not

The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF c

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timest

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking o

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route,

The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG be

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns th

The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its RE

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the p

The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly acc

The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before compa

The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an additiona

The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a J

The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating

The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key befor

The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored

The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object befor

The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it

The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force

The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before ch