2026

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files ext

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custo

The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLeng

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tc

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_req

The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5.

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attack

Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impe

### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value un

Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read acc

Inefficient Algorithmic Complexity vulnerability in ash-project ash_paper_trail allows a user who can submit a large arr

Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read acc

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a t

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of t

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processin

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versio

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and i

Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f

iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.

KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verificati

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication,

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content

Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in

pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.val

pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-p

pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the

pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token vali

pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoint

The cohttp package before 6.3.0 for OCaml allows directory traversal.

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller c

The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in toke

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attacker

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lac

Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer h

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that al

Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrep

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first throu

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file