2026

Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to

Backend users with file download permissions were able to download files from the fallback storage of the file abstracti

Backend users with write access to the form_definition database table were able to directly create, update, or delete fo

TYPO3's cache frontend (VariableFrontend) and persistent key-value store (Registry) deserialized PHP payloads without in

The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requir

Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission ch

Backend users were able to move records to a different page without having edit permissions on the source page. This iss

Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they w

Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in

Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks

Backend users with file write permissions were able to upload form definition files with mixed-case extensions (e.g., .F

Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on fold

Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, whi

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordP

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a pas

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a bina

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not p

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly s

A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Run

SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/u

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions),

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4

The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored

The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions 7.0 to 7.0.10.

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in th

The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a c

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying i

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache An

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issu

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: throu

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: throu

Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following')

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Ap

Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Answer: throu

The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and in

Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when Raise

A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SD

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attack

Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availabi

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect ser

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect ser

Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may

Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availab

Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect av