category_cve - zero redgem

Recent Advisories

Severity	ID	Title	Vendor	Product	Date	Type
HIGH 8.9	CVE-2026-10538	Improper deserialization handling in Control-M Components_CVE-2026-10538 Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out o...	BMC	Control-M/Enterprise Manager 9.0.21	Jul 1, 2026	CVE
MEDIUM 4.3	CVE-2026-10096	Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter_CVE-2026-10096 The Qi Blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.4.9 via the 'page_id' ...	qodeinteractive	Qi Blocks	Jul 1, 2026	CVE
MEDIUM 6.5	CVE-2026-12110	Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter_CVE-2026-12110 The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the '...	taskbuilder	Taskbuilder – Project Management & Task Management Tool With Kanban Board	Jul 1, 2026	CVE
MEDIUM 6.5	CVE-2026-12090	Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter_CVE-2026-12090 The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the '...	taskbuilder	Taskbuilder – Project Management & Task Management Tool With Kanban Board	Jul 1, 2026	CVE
MEDIUM 6.5	CVE-2026-11988	LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter_CVE-2026-11988 The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in ...	thimpress	LearnPress – WordPress LMS Plugin for Create and Sell Online Courses	Jul 1, 2026	CVE
MEDIUM 4.3	CVE-2026-11981	GiveWP <= 4.15.3 - Cross-Site Request Forgery_CVE-2026-11981 The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3 This is due to missing nonce v...	stellarwp	GiveWP – Donation Plugin and Fundraising Platform	Jul 1, 2026	CVE
MEDIUM 6.4	CVE-2026-11380	JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting_CVE-2026-11380 The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.21. This is due ...	jetmonsters	JetWidgets For Elementor	Jul 1, 2026	CVE
HIGH 7.5	CVE-2026-1239	Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint_CVE-2026-1239 The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to unauthorized access of data due to a missing a...	kstover	Ninja Forms – The Contact Form Builder That Grows With You	Jul 1, 2026	CVE
HIGH 7.5	CVE-2026-14193	DVP80ES300T – Improper Validation of Array Index Vulnerability_CVE-2026-14193 DVP80ES300T with Improper Validation of Array Index Vulnerability	deltaww	DVP80ES300T	Jul 1, 2026	CVE
HIGH 7.4	CVE-2026-12579	AS228T – Authentication Bypass Vulnerability_CVE-2026-12579 AS228T with Authentication Bypass Vulnerability	deltaww	AS228T	Jul 1, 2026	CVE