Browse CVEs

CRITICAL 9.8 CVE-2026-16060 The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the contents of an uploaded archive, re… No fix yet Fix from $2,3002026-08-03 MEDIUM 6.5 CVE-2026-16057 The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gati… No fix yet Fix from $1,6002026-08-03 MEDIUM 6.1 CVE-2026-15931 The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthenticated payment approval reque… No fix yet Fix from $1,6002026-08-03 CRITICAL 9.4 CVE-2026-15930 The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value … No fix yet Fix from $2,3002026-08-03 MEDIUM 6.1 CVE-2026-15383 The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauth… No fix yet Fix from $1,6002026-08-03 CRITICAL 9.8 CVE-2026-12872 The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload action with any authenticatio… No fix yet Fix from $2,3002026-08-03 CRITICAL 9.1 CVE-2026-14557 The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-ver… Mitigation only Fix from $2,3002026-08-03 MEDIUM 6.5 CVE-2026-15254 The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing short… No fix yet Fix from $1,6002026-08-03 MEDIUM 6.1 CVE-2026-13340 The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz extension, even though it regist… No fix yet Fix from $1,6002026-08-03 CRITICAL 9.1 CVE-2026-12965 The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, a… No fix yet Fix from $2,3002026-08-03 HIGH 8.1 CVE-2025-15672 The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unaut… No fix yet Fix from $1,9502026-08-03 MEDIUM 5.5 CVE-2026-6695 A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image f… Enterprise Linux No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-6694 A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) imag… No fix yet Fix from $1,6002026-08-03 MEDIUM 5.4 CVE-2026-18584 A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of … No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20498 In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a ma… Mt6991 Firmware No fix yet Fix from $1,6002026-08-03 HIGH 7.8 CVE-2026-20495 In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with U… Mt7925 Firmware No fix yet Fix from $1,9502026-08-03 MEDIUM 6.0 CVE-2026-20497 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Mt6989 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20494 In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor h… Mt6890 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20492 In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User executio… Mt6990 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20491 In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution priv… Mt2735 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.7 CVE-2026-20486 In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious … Mt8910 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20485 In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… Mt6993 Firmware No fix yet Fix from $1,6002026-08-03 HIGH 7.7 CVE-2026-20483 In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no… Mt8893 Firmware No fix yet Fix from $1,9502026-08-03 MEDIUM 6.5 CVE-2026-20482 In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with… Mt8532 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20481 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Mt6989 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20480 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution p… Mt6880 Firmware No fix yet Fix from $1,6002026-08-03 HIGH 7.5 CVE-2026-20479 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to… Mt2735 Firmware No fix yet Fix from $1,9502026-08-03 MEDIUM 5.5 CVE-2026-20478 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution p… Mt2735 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20477 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Mt8910 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20476 In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privile… Mt6988 Firmware No fix yet Fix from $1,6002026-08-03