2026

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticat

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System exec

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/te

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of

A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability i

A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file ad

In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or wr

A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file na

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi

A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component

The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify produc

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when return

The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a S

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using

The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticate

The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-impor

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending me

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action

The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an un

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the conten

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its

The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthent

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration bef

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, whic

The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in

The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrat

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to acc

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token i

The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz ext

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action befo

The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload

The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads an

The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserializa

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable

A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 a