2026

A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/inc

A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the fil

A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/

A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in t

A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run

A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code o

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom

Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrect

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser

Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con

Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-e

A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a m

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Perf

A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php.

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the c

Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly C

Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhispe

Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-liv

Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allo

Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calcul

Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly

User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser ba

Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authent

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remot

An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the app

An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Requ

A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services com

The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it,

The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order ma

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to

A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the

The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of it

An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The dom

A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_

A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulat

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of t

A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/fing

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functio

A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability i

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the fun

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts t