2026

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the fil

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown funct

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown functi

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown f

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unk

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affe

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unkn

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndD

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulat

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metag

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter

A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affec

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name s

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allo

The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist f

The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attem

The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the

A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated att

A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injectio

A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functiona

The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate

The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, p

The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment

The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total ar

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming paymen

The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the s

The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record b

The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking durat

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator

The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected co

The Easy Appointments WordPress plugin before 3.12.28 does not correctly validate shortcode input in one of its block-re

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a

The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-base

The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications,

The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of inco

The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent

The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A mal

The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payme

The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transact

The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price value against the actual product price

The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to b

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from

In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in o

When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issue

The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dy

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.

Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an unauthenti