2026

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_ta

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 1

The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission aga

The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is appli

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 1

The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress s

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 1

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.

The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted throu

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 1

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a diff

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauth

The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI

The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints tha

The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that c

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-upda

The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public

The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration befo

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied pos

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative templa

The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user las

The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its less

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of board

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk a

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link s

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the mo

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protect

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks

The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used to

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during t

The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the database

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it a

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode_content' para

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Refl

The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versi

The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Fie

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename o

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures becau

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with a

EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and camp

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file