2026

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a RES

The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side,

The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on seve

The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from

The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option

The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from a REST request body

The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not perform a per-target authorizat

The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated empl

The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it o

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before settin

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to includ

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is lo

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowi

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading maliciou

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdem

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/D

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unkno

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_ex

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unkn

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of t

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class o

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_arti

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affect

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function make

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the fil

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. Th

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSyn

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.

A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the fil

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functional

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to f

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/inse

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the fil

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown functi

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handl

A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_heade

A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode o

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersiz

A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunctio

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultF

A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form