2026

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it ma

The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it

The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data b

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowin

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy

The Custom Menu Wizard Widget WordPress plugin through 3.3.1 does not sanitize and escape several shortcode attributes b

The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a us

The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting

The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deser

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type v

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL qu

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the str

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Ap

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a

The Booking for Appointments and Events Calendar WordPress plugin before 9.8.1 does not verify that a payment was actua

The WebTotem Backups WordPress plugin before 1.1.0 does not validate a user-supplied file path, does not check the capab

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication resp

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 b

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESM

QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping

starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an emp

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation s

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is conf

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 c

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one au

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-know

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later revert

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list o

A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Refe

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exch

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication co

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in

When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party admin

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface

A routing rule selects between two different authentication mechanisms for the same downstream service based on the valu

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path o

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without valid

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shel

A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate e

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and