CVE-2026-12570
A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack...

CVE-2026-12971
The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server...

CVE-2026-13133
A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where...

CVE-2026-13170
The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before...

CVE-2026-13600
The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication...

4.8 CVE-2026-13701
The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before...

7.5 CVE-2026-14206
The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint...

CVE-2026-14211
The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an...

CVE-2026-14237
The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not perform a per-target...

CVE-2026-14238
The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from...

CVE-2026-14293
The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving...

CVE-2026-14860
The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side...

CVE-2026-14941
The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability...

CVE-2026-15047
The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting...

CVE-2026-15229
The Pinpoint Booking System WordPress plugin through 2.9.9.6.9 does not validate the booking price...

CVE-2026-15237
The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership...

CVE-2026-15238
The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating...

CVE-2026-16257
The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its...

CVE-2026-16298
The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request,...

CVE-2026-16299
The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset...

CVE-2026-16949
The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before...