🚨 CVE-2026-75962
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable without authentication on WordPress Multisite installations with public registration enabled, as WordPress accepts email addresses containing numeric HTML character references that Post SMTP's stricter validator rejects, persisting the attacker-controlled address verbatim to the email log via the failed-send exception message.
🎖@cveNotify
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable without authentication on WordPress Multisite installations with public registration enabled, as WordPress accepts email addresses containing numeric HTML character references that Post SMTP's stricter validator rejects, persisting the attacker-controlled address verbatim to the email log via the failed-send exception message.
🎖@cveNotify
🚨 CVE-2026-97300
Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.
🎖@cveNotify
Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.
🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Event Solution Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-102778
Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share mini page of the front end) can link the article the image was shared from when the option "Share article links" is on. It took the address of the article from the shared link and printed it into the page without checking or escaping it; with the link type "Image Page with Redirect" it followed the address at once. A prepared link could therefore run a script in the page, in the session of the visitor who opened it, or send the visitor to another web site. Nothing on the server is changed or read by the server.
🎖@cveNotify
Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share mini page of the front end) can link the article the image was shared from when the option "Share article links" is on. It took the address of the article from the shared link and printed it into the page without checking or escaping it; with the link type "Image Page with Redirect" it followed the address at once. A prepared link could therefore run a script in the page, in the session of the visitor who opened it, or send the visitor to another web site. Nothing on the server is changed or read by the server.
🎖@cveNotify
www.svenbluege.de
Event Gallery - A gallery component for Joomla!
Event Gallery - A responsive Joomla! Gallery component plus a cart system for your images.
🚨 CVE-2026-102777
Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos account. The task took the address to fetch from the request without checking it and asked for no form token. A prepared page on another web site could therefore make the server send the access token of the account to any address, or fetch addresses inside the server's network, in the name of a logged in administrator; a back-end user with the permission "Manage" could do the same directly. The token is valid for about an hour and reaches what the picker session of the account reaches.
🎖@cveNotify
Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos account. The task took the address to fetch from the request without checking it and asked for no form token. A prepared page on another web site could therefore make the server send the access token of the account to any address, or fetch addresses inside the server's network, in the name of a logged in administrator; a back-end user with the permission "Manage" could do the same directly. The token is valid for about an hour and reaches what the picker session of the account reaches.
🎖@cveNotify
www.svenbluege.de
Event Gallery - A gallery component for Joomla!
Event Gallery - A responsive Joomla! Gallery component plus a cart system for your images.
🚨 CVE-2026-105701
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute code on the server. The exploit requires the attacker to first create a form with malicious email_settings via the REST API endpoint, then trigger form submission to execute the injected Twig expressions.
🎖@cveNotify
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute code on the server. The exploit requires the attacker to first create a form with malicious email_settings via the REST API endpoint, then trigger form submission to execute the injected Twig expressions.
🎖@cveNotify
ACPT
ACPT Changelog — Version History
Full version history for ACPT: new features, bug fixes, and improvements across every release of the WordPress custom post types framework.
🚨 CVE-2026-105776
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
🎖@cveNotify
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
🎖@cveNotify
GitHub
GitHub - bhagya3929/Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL: A website for IOCL for the purpose of monitoring…
A website for IOCL for the purpose of monitoring and tracking the employees in and out of department premise - bhagya3929/Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL
🚨 CVE-2026-105778
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
🎖@cveNotify
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
🎖@cveNotify
GitHub
Tenda-AC5v3-BOF/blog.md at main · raisecnull/Tenda-AC5v3-BOF
report. Contribute to raisecnull/Tenda-AC5v3-BOF development by creating an account on GitHub.
🚨 CVE-2026-25263
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
🎖@cveNotify
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
🎖@cveNotify
🚨 CVE-2026-25267
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
🎖@cveNotify
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
🎖@cveNotify
🚨 CVE-2026-25269
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
🎖@cveNotify
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
🎖@cveNotify
🚨 CVE-2026-25270
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
🎖@cveNotify
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
🎖@cveNotify
🚨 CVE-2026-25272
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
🎖@cveNotify
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
🎖@cveNotify
🚨 CVE-2026-25273
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
🎖@cveNotify
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
🎖@cveNotify
🚨 CVE-2026-25274
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
🎖@cveNotify
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
🎖@cveNotify
🚨 CVE-2026-25291
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
🎖@cveNotify
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
🎖@cveNotify
🚨 CVE-2026-25302
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
🎖@cveNotify
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
🎖@cveNotify
🚨 CVE-2026-57537
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
🎖@cveNotify
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
🎖@cveNotify
🚨 CVE-2026-57545
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
🎖@cveNotify
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
🎖@cveNotify
🚨 CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
🎖@cveNotify
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
🎖@cveNotify
🚨 CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
🎖@cveNotify
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
🎖@cveNotify
🚨 CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers.
🎖@cveNotify
Memory Corruption when executing system service routines due to improper handling of user input buffers.
🎖@cveNotify