2026

The YayPricing WordPress plugin before 3.5.7 does not perform capability checks on several of its REST API routes, rely

The OTP Login With Phone Number, OTP Verification WordPress plugin before 1.8.71 does not limit the number of OTP verifi

The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied conte

The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputtin

The Membership Plugin – Kadence Memberships plugin for WordPress (formerly Restrict Content) is vulnerable to password r

The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `shouttext` POST paramete

The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This i

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-C

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the Si

In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to cat

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni

pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential d

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerabil

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerabi

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni

The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPre

In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An au

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects so

A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/

The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inclu

The VikRentItems – Flexible Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches f

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of t

The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Inje

A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/e

A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the co

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the fil

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via direc

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strc

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown fun

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /go

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/u

A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFil

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a d

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a d

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the fin

A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the fu

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This imp

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Program

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the con

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vul

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView o

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attacke