2026

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the applic

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows lo

Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the applica

CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the applicatio

CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submi

Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supply

Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputti

VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the applicatio

BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application b

NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash

NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the

Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the applic

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providi

A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the

A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file apps/ad

A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function ask of the fi

A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. Affected is the function exec of the file /src

A weakness has been identified in PbootCMS up to 3.2.12. This impacts the function alert_location of the file apps/home/

The JetFormBuilder plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, a

A security flaw has been discovered in PbootCMS up to 3.2.12. This affects an unknown function of the file core/function

The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2.

The Review Map by RevuKangaroo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings

The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including

The Pre* Party Resource Hints plugin for WordPress is vulnerable to SQL Injection via the 'hint_ids' parameter of the pp

The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cat', 'nocat', and 'text

The fyyd podcast shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fyyd-podcast', 'f

The Ecover Builder For Dummies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter

The WordPress PayPal Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'donate' shortco

The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'naam' parameter in al

The Ad Short plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ad' shortcode's 'client' attribu

The Show Posts list – Easy designs, filters and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all

The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of

The WP Games Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [game] shortcode in all ver

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0

The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3.

The Sheets2Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titles' shortcode attribute

The Paypal Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'amount' and 'name' short

The Smarter Analytics plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.

The Sherk Custom Post Type Displays plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' sh

The e-shot form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inclu

The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,

The REST API TO MiniProgram plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to

The Wikilookup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Popup Width' setting in all ve

The Comment SPAM Wiper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' setting in al

The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `arv_lb[me