2026

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys end

SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the getAttributeViewKeysByID endpoint t

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing

AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eigh

The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu

The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to

CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge in

Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowin

NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, S

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authen

Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. A

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure ar

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to en

gonic versions before 0.22.0 fail to validate administrator privileges in the startScan endpoint, allowing any authentic

Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any a

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skippi

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to creat

BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authe

BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing auth

BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_fo

The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'custom_settings' Shortco

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formData[

The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including

The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input be

The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allo

The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before

The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute

The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management RES

The VikWidgetsLoader WordPress plugin before 1.12.0 does not sanitise or escape a block attribute before outputting it

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include

The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before out

The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allo

The Bold Page Builder WordPress plugin before 5.9.8 does not sanitise and escape several shortcode attributes before out

The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTM

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it

The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, all

The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting the

The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is c

The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redi

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its c

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6.

The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not properly sanitise and escape a

The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a se

The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-

The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15