2026

The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it

The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session

The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input

The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them

The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the respons

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded f

The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook requests, as its signature check alwa

Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and incl

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggrega

The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX acti

The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registrat

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved ext

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing

The MainWP Child WordPress plugin before 6.1.2 does not verify the requester's identity in its site-registration reques

The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-suppl

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file commo

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker t

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with ar

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into t

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.exter

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file s

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserN

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_q

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS netwo

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who contr

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/mod

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of t

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and i

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functio

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thre

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows una

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated onl

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid optio

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IO

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock ac

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive c

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complete()

In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU sync from per-netns .ex

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPse

In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Acc

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS co