CVE-2026-13042 | RPB Chessboard Plugin up to 8.1.2 on WordPress Comment Content cross site scripting
A vulnerability was found in RPB Chessboard Plugin up to 8.1.2 on WordPress. It has been declared as problematic. The
Read MoreSecurity
03
CVE-2026-15306 | rextheme Product Feed Manager for WooCommerce Plugin up to 7.6.1 on WordPress Search cross site scripting
A vulnerability was found in rextheme Product Feed Manager for WooCommerce Plugin up to 7.6.1 on WordPress. It has been
Read MoreCVE-2026-15013 | cyberlord92 SAML Single Sign On Plugin up to 5.4.3 on WordPress SAML Signature Verification mo_saml_cast_key SignatureMethod weak password hash
A vulnerability categorized as problematic has been discovered in cyberlord92 SAML Single Sign On Plugin up to 5.4.3 on WordPress.
Read MoreCVE-2026-36590 | EMQ NanoMQ 0.24.9 QoS Database broker_tcp.c nni_qos_db_set denial of service
A vulnerability identified as critical has been detected in EMQ NanoMQ 0.24.9. This impacts the function nni_qos_db_set of the file
Read MoreCVE-2026-15921 | nvm-sh nvm up to 0.40.5 Alias File index.tab NVM_DIR path traversal
A vulnerability labeled as critical has been found in nvm-sh nvm up to 0.40.5. Affected is an unknown function of
Read More
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysis breaks down the
Read MoreCVE-2026-1609 | Red Hat Keycloak JWT Authorization Grant Processing improper authorization
A vulnerability categorized as problematic has been discovered in Red Hat Keycloak. Impacted is an unknown function of the component
Read MoreCVE-2026-49353 | decolua 9router up to 0.4.45 Dashboard src/dashboardGuard.js isLocalRequest improper authentication
A vulnerability was found in decolua 9router up to 0.4.45 and classified as very critical. The affected element is the
Read MoreCVE-2026-38753 | Busybox 1.38.0 AWK editors/awk.c awk_sub use after free
A vulnerability was found in Busybox 1.38.0. It has been classified as critical. The impacted element is the function awk_sub
Read MoreCVE-2026-62361 | knadh listmonk up to 6.1.x Export subscribers.go QuerySubscribersForExport injection
A vulnerability was found in knadh listmonk up to 6.1.x. It has been declared as critical. This affects the function
Read More