CVEs
Browse the synced catalog, newest first.
- CVE-2026-73471Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsingGStreamer gst-plugins-good
- CVE-2026-97848Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitizationRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-97367Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeoverRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-96547Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.rolesRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-96460Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2Red Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-92856Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraintsRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-19688Keycloak-services: keycloak-services: admin api missing audience checkRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-96447Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebindingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-118239AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth CallbackAutomatorWP
- CVE-2026-118188PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content DisclosurePublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2026-118187PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDORPublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2026-118186PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision WorkflowPublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2026-118167MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience OverrideMC4WP: Mailchimp for WordPress
- CVE-2026-115673Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author EmailAnti-Spam, Spam FireWall by CleanTalk
- CVE-2026-113615GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLiGS JWT Authentication for WP REST API
- CVE-2026-110813Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Name InjectionAdvanced Custom Fields
- CVE-2026-92396Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_cssShopEngine Gutenberg WooCommerce Builder Blocks Addon
- CVE-2026-87784Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permissionCool Media Filter
- CVE-2026-86606iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parseriubenda | All-in-one Compliance for GDPR / CCPA Cookie Cons…
- CVE-2026-12967WCFM Membership < 2.12.1 - Subscriber+ Payment Verification BypassWCFM Membership
- CVE-2026-120408All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post MetaAll-in-One Video Gallery
- CVE-2026-119259All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta WriteAll-in-One Video Gallery
- CVE-2026-118639Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key DisclosureSurfer
- CVE-2026-118045Ever Accounting < 2.3.3 - Accounting Manager+ Arbitrary File Deletion via CSV ImportEver Accounting
- CVE-2026-116533Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' ParameterStatic Snapshot
- CVE-2026-115230WHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password ResetWHIZZ
- CVE-2026-114427GutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSSGutenKit
- CVE-2026-113584Real Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Updateplacester
- CVE-2026-110955Wurdey <= 1.0.0 - Unauthenticated Administrator Authentication BypassWurdey
- CVE-2026-110532Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' ParameterMail Mage