Topic
43 articles
Threat IntelCVE-2026-122006 in The activestorage gem (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.1.4.1 and l
Threat IntelCVE-2026-120518 in The BuddyPress XProfile Image Field plugin for Wor (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-120534 in The Advanced Custom Fields (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution. Patch: Vendor securit
CMS SecurityCVE-2026-86596 in The s2Member plugin for WordPress is vulnerable to (Code Injection) allows remote attackers to trigger arbitrary code execution. Patch: V
Threat IntelCVE-2026-102435 in The Ultra Addons for Contact Form 7 plugin for Wor (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2025-11969 in The System REST APIs do not correctly enforce acce (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2026-120307 in The Beta9 worker serves the sandbox file API from (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: V
Threat IntelCVE-2026-109220 in The PDF Invoice for WooCommerce + Drag and Drop Te (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-116557 in The WP Booking System - Booking Calendar plugin fo (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch
Threat IntelCVE-2026-89270 in The Popup Builder – Create highly converting, mobi (Missing Authorization) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-116512 in The Project Manager – AI Powered Project Managemen (Unrestricted File Upload) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-119096 in The Uncanny Toolkit for LearnDash plugin for WordP (Authentication Bypass) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-103882 in The Acadlix LMS – AI Quiz Maker, Online Exam & Cou (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-118235 in The SimpleForm – Form Maker to Chat Apps with Quiz (Unrestricted File Upload) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-114278 in The che-machine-exec service constructs a shell co (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
CMS SecurityCVE-2026-84999 in The Pie Register Premium plugin for WordPress is v (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution
CMS SecurityCVE-2026-92885 in The Qode Membership plugin for WordPress is vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
CMS SecurityCVE-2026-115214 in The Datawiza Proxy Auth Plugin WordPress plugin b (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-107861 in The system control service on affected Kiloview E3 (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P