2026

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch

The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flip

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its RES

The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or post-visibility chec

The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, all

The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, all

The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets

The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding the

The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthen

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properl

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validat

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check u

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restric

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in use

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.27 does not verify that a PayPal order supplied i

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not scope o

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, al

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions

The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rende

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unkno

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the fun

A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the fu

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/

A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load

Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexO

A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function Paginatio

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design tha

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary c

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a

A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the fil

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affecte

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provide

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify tran

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass secur

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify serve

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unau

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive informatio

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due t

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260