8.8 CVE-2026-0551
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in...

8.8 CVE-2026-16149
The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up...

6.5 CVE-2026-18027
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for...

9.9 CVE-2026-78050
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C...

5.3 CVE-2026-78051
A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown...

4.3 CVE-2026-78054
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is...

7.8 CVE-2026-78136
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode...

4.3 CVE-2026-78055
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0....

6.3 CVE-2026-78056
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5....

6.3 CVE-2026-78057
A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5....

4.3 CVE-2026-78059
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects...

4.3 CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown...

6.3 CVE-2026-78061
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig...

7.3 CVE-2026-78062
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function...

7.4 CVE-2026-78063
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName...

CVE-2026-13598
The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account...

4.3 CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of...

2.7 CVE-2026-77003
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the...

7.1 CVE-2026-77115
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup...

4.3 CVE-2026-77116
Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through...

8.5 CVE-2026-10053
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1...