CVE-2026-118638 | Mapster WP Maps Plugin up to 2.0.5 on WordPress authorization
A vulnerability classified as problematic was found in Mapster WP Maps Plugin up to 2.0.5 on WordPress. Impacted is an
Read MoreSecurity
03
CVE-2026-110042 | Paystack Payment Forms for Paystack Plugin up to 4.0.5 on WordPress information disclosure
A vulnerability, which was classified as problematic, has been found in Paystack Payment Forms for Paystack Plugin up to 4.0.5
Read MoreCVE-2026-110808 | Essential Addons for Elementor Plugin up to 6.8.7 on WordPress Registration Form privileges management
A vulnerability, which was classified as problematic, was found in Essential Addons for Elementor Plugin up to 6.8.7 on WordPress.
Read MoreCVE-2026-118437 | BuddyForms Plugin up to 2.10.0 on WordPress Attachment file inclusion
A vulnerability has been found in BuddyForms Plugin up to 2.10.0 on WordPress and classified as critical. This affects an
Read MoreCVE-2026-118184 | Premium Packages Plugin up to 7.2.1 on WordPress authorization
A vulnerability was found in Premium Packages Plugin up to 7.2.1 on WordPress and classified as critical. This impacts an
Read MoreCVE-2026-119977 | WordPress up to 7.1.3 on WordPress Upgrade code injection
A vulnerability was found in WordPress on WordPress. It has been classified as critical. Affected is an unknown function of
Read MoreCVE-2026-118147 | Microsoft Visual Studio input validation
A vulnerability classified as critical has been found in Microsoft Visual Studio. Affected by this issue is some unknown functionality.
Read MoreCVE-2026-120135 | Apache Thrift TProtocolUtil.skip recursion
A vulnerability classified as critical was found in Apache Thrift. This affects the function TProtocolUtil.skip. Such manipulation leads to uncontrolled
Read More
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post
Read MoreCVE-2026-110176 | Drupal File Force Download Extension up to 7.1.2 File Download hook_file_download access control
A vulnerability was found in Drupal File Force Download Extension up to 7.1.2 and classified as problematic. This vulnerability affects
Read More