Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.2 CVE-2026-10749

Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData_CVE-2026-10749

The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied seria...

Unknown Post Duplicator CVE
HIGH 7.5 CVE-2026-10735

ShapedPlugin Multiple Pro Plugins – Backdoor via Compromised Vendor Update Server_CVE-2026-10735

Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommer...

Unknown smart-post-show-pro 4.0.1 CVE
MEDIUM 5.4 CVE-2026-10531

AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute_CVE-2026-10531

The AI Share & Summarize WordPress plugin before 2.0.4 does not sanitise and escape some of its shortcode attributes before outputting them in a pa...

Unknown AI Share & Summarize CVE
MEDIUM 5.3 CVE-2026-56761

hono – HTML Injection via Improper JSX Attribute Name Handling in SSR_CVE-2026-56761

hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using ...

hono hono CVE
MEDIUM 4.8 CVE-2026-56370

ImageMagick – Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact_CVE-2026-56370

ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artif...

ImageMagick ImageMagick CVE
MEDIUM 6.3 CVE-2026-56368

ImageMagick – Memory Leak in Raw Pixel Data Coders_CVE-2026-56368

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not prope...

ImageMagick ImageMagick CVE
MEDIUM 5.1 CVE-2026-56358

n8n – Stored Cross-Site Scripting in Form Trigger Node_CVE-2026-56358

n8n before 1.123.25 (1.x) and before 2.11.2 (2.x), with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in th...

n8n n8n CVE
MEDIUM 5.3 CVE-2026-56351

n8n – SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes_CVE-2026-56351

n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to in...

n8n n8n CVE
MEDIUM 6.9 CVE-2026-56338

Capgo – Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint_CVE-2026-56338

Capgo before 12.128.2 contains a denial of service vulnerability in the /auth/v1/otp endpoint that prevents email verification for two-factor authe...

Capgo Capgo CVE
MEDIUM 6.9 CVE-2026-56337

Capgo – Information Disclosure via Unauthenticated RPC Function exist_app_v2_CVE-2026-56337

Capgo before 12.128.2 contains an information disclosure vulnerability in the public.exist_app_v2 RPC function that allows unauthenticated attacker...

Capgo Capgo CVE