In User Registration & Membership component for WordPress versions before 5.2.2 a high severity vulnerability CVE-2026-11963 was detected. This vulnerability allows any authenticated user to change another user’s WordPress role and membership tier. To address this issue, users should upgrade User Registration & Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11963.
Read more CMS
In Tutor LMS component for WordPress versions before 3.9.13 a medium severity vulnerability CVE-2026-12271 was detected. This vulnerability allows authenticated users to modify and force-complete other students’ quiz attempts. To address this issue, users should upgrade Tutor LMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12271.
Read more CMS
In NATS versions prior to 2.14.3 and 2.12.12 a medium severity vulnerability CVE-2026-58214 was detected. This vulnerability allows authenticated users to bypass subscription permissions and access sensitive metadata. To address this issue, users should upgrade NATS to version 2.12.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58214.
Read more Application Development
In Zeek versions before 8.0.9 a high severity vulnerability CVE-2026-60109 was detected. This vulnerability allows unauthenticated remote attackers to cause a denial of service. To address this issue, users should upgrade Zeek to version 8.0.9 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60109.
Read more Security
In OpenWebUI versions before 0.10.0 a high severity vulnerability CVE-2026-59214 was detected. This vulnerability allows attackers to execute server-side code through configured tools via authenticated same-origin requests. To address this issue, users should upgrade OpenWebUI to version 0.10.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59214.
Read more Security
In AcyMailing component for Joomla versions before 10.11.1 a high severity vulnerability CVE-2026-56292 was detected. This vulnerability allows unauthorized database access and data leakage. To address this issue, users should upgrade AcyMailing to version 10.11.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56292.
Read more CMS
In guardrails-detectors component for OpenShift in older versions a medium severity vulnerability CVE-2026-15154 was detected. This vulnerability allows a remote attacker to cause a denial of service. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15154.
Read more Developer Tools
In Django versions 6.0 before 6.0.7 and 5.2 before 5.2.16 a medium severity vulnerability CVE-2026-53878 was detected. This vulnerability allows for potential header injection attacks. To address this issue, users should upgrade Django to version 5.2.16 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-53878.
Read more Application Development
In Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode component for WordPress versions 6.20.2 and earlier a medium severity vulnerability CVE-2025-14785 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-14785.
Read more CMS