2026

The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_displa

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the P

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the I

The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Sit

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated atta

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 39

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, SubprocessSandbox in all modes (BASIC, STRICT, NETWORK

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any tok

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connect

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-contr

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command s

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a

PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, the get_all_user_threads function constructs raw SQL q

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to ve

Mesop is a Python-based UI framework that allows users to build web applications. From version 1.2.3 to before version 1

Emlog is an open source website building system. In versions 2.6.2 and prior, a SQL injection vulnerability exists in in

Emlog is an open source website building system. In versions 2.6.2 and prior, a Local File Inclusion (LFI) vulnerability

Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra (default docker-compose de

Emlog is an open source website building system. In versions 2.6.2 and prior, a path traversal vulnerability exists in t

Emlog is an open source website building system. Prior to version 2.6.8, there is a stored cross-site scripting (XSS) vu

Emlog is an open source website building system. Prior to version 2.6.8, the backend upgrade interface accepts remote SQ

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

Hirschmann HiLCOS OpenBAT and BAT450 products contain a firewall bypass vulnerability in IPv6 IPsec deployments that all

Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authenticatio

Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorizat

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the w

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in t

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated