Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.3 CVE-2026-9016

Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action_CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in al...

qriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors CVE
MEDIUM 5.3 CVE-2026-8839

MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints_CVE-2026-8839

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and i...

chrisvrichardson MapPress Maps for WordPress CVE
MEDIUM 4.3 CVE-2026-8611

Klamra Paycal for Aspaclaria <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter_CVE-2026-8611

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4...

klamra22 Klamra Paycal for Aspaclaria CVE
MEDIUM 4.3 CVE-2026-7624

SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations_CVE-2026-7624

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.4.16. This is du...

cifi SEO Plugin by Squirrly SEO CVE
HIGH 8.1 E2D2E062-090F-

Exploit for Improper Input Validation in Apache Activemq_E2D2E062-090F-5A3A-84ED-306A6EC90608

CVE-2026-42588 – Apache ActiveMQ Jolokia Remote Code Execution Vulnerability Exploitation Criticality level: 🔴 High risk CVSS 4.0: 8.1 Vulnerabili...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.9 B89B9C6A-46E4-

Exploit for Path Traversal in Open-Emr Openemr_B89B9C6A-46E4-5543-976C-1B968B942D25

CVE-2026-24849 OpenEMR Authenticated Arbitrary File Read EtherFax disposeDoc Proof-of-concept exploit for CVE-2026-24849, an authenticated path-tra...

N/A N/A GITHUBEXPLOIT
HIGH 8.8 MS:CVE-2026-10928

Chromium: CVE-2026-10928 Script injection in Headless_MS:CVE-2026-10928

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
HIGH 8.8 MS:CVE-2026-11086

Chromium: CVE-2026-11086 Insufficient validation of untrusted input in Dawn_MS:CVE-2026-11086

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
HIGH 8.8 MS:CVE-2026-11305

Chromium: CVE-2026-11305 Use after free in PDFium_MS:CVE-2026-11305

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
MEDIUM 6.5 MS:CVE-2026-10981

Chromium: CVE-2026-10981 Insufficient validation of untrusted input in Codecs_MS:CVE-2026-10981

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE