2026

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensiti

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local att

Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execut

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds me

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write ou

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bo

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers t

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular exp

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard d

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM relate

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data a

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attac

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with

The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its ac

The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and d

All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) i

The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQ

The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries,

The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, al

The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded thr

The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed

The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and

The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter befor

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the a

The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a se

The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the acc

The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user

The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password

The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connecto

The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowin

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any au

The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth s

The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before

The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its booking-modif

The Salon Booking System WordPress plugin through 10.31.0 does not verify that a requested booking belongs to the calle

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and

The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restric

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amoun

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the Pa

The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before o

The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data writ

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing u

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthen

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, wh

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer reco