2026

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate th

A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggre

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handl

A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as

If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a

An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistenc

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leadin

A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a deni

Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the

By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressi

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a deni

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a deni

The Emailchef plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_li

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block_id at

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Ext

A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to c

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service

A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By cr

The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and incl

The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and inclu

The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_r

The Posts map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' shortcode attribute in al

The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests'

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' (buzz_c

The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in

The SlideShowPro SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `slideShowProSC`

The Text Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ts` shortcode in a

The CI HUB Connector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `ci

The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.

The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-bu

The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to a

The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.

The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i

The TextP2P Texting Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and in

The HTTP Headers plugin for WordPress is vulnerable to External Control of File Name or Path leading to Remote Code Exec

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to a

The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up

The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ

The WPMK Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in

The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1.

The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.

The Call To Action Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in

The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5. This is

The Inquiry Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Twittee Text Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribut

The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppw_cta_box' shortcode in

The Easy Social Photos Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper_class'