CVE-2026-9065 - SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameter

CVE-2026-9059 - NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderb

CVE-2026-6405 - The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Req

CVE-2026-5200 - The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugi

CVE-2026-7385 - The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email a

CVE-2026-6566 - The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable

CVE-2026-5776 - The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user

CVE-2026-47784 - In memcached before 1.6.42, password data for SASL password database authentication has a timing sid

CVE-2026-47783 - In memcached before 1.6.42, username data for SASL password database authentication has a timing sid

CVE-2026-44392 - Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user wi

CVE-2026-2955 - The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site

CVE-2026-9057 - A broken access control issue has been identified in the Talend Administration Center, that allows a

CVE-2026-9056 - A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An a

CVE-2026-7522 - The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion i

CVE-2026-5075 - The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'interna

CVE-2026-9010 - The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and '

CVE-2026-9003 - E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauth

CVE-2026-7637 - The Boost plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and includin

CVE-2026-7460 - mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue M

CVE-2026-24215 - NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could

CVE-2026-24214 - NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could

CVE-2026-24213 - NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could

CVE-2026-24210 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer ove

CVE-2026-24209 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path travers

CVE-2026-24208 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path travers

CVE-2026-24207 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authenticat

CVE-2026-24206 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authenticat

CVE-2026-24163 - NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could ca

CVE-2026-24160 - NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked

CVE-2026-24142 - NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized han

CVE-2025-33255 - NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could caus

CVE-2025-15369 - The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modi

CVE-2026-8685 - The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order

CVE-2026-8627 - The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SE

CVE-2026-8626 - The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Para

CVE-2026-8624 - The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin

CVE-2026-8610 - The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all

CVE-2026-8424 - The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers

CVE-2026-8423 - The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in a

CVE-2026-8420 - The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver

CVE-2026-8419 - The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

CVE-2026-8418 - The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to

CVE-2026-8038 - The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'defaul

CVE-2026-7472 - The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via t

CVE-2026-7467 - The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions

CVE-2026-7462 - The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `pa

CVE-2026-7284 - The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to p

CVE-2026-6555 - The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up

CVE-2026-6549 - The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

CVE-2026-6456 - The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up t

CVE-2026-6452 - The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v

CVE-2026-6404 - The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-S

CVE-2026-6401 - The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t

CVE-2026-6400 - The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request For

CVE-2026-6399 - The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up

CVE-2026-6397 - The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky` s

CVE-2026-6395 - The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored C

CVE-2026-6394 - The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is

CVE-2026-6391 - The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Sit

CVE-2026-6072 - The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorizati

CVE-2026-5293 - The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Sc

CVE-2026-45232 - Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the est

CVE-2026-43620 - Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv

CVE-2026-43619 - Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system ca

CVE-2026-43618 - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token deco

CVE-2026-43617 - Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's ho

CVE-2026-3985 - The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerabl