In Quix Page Builder component for Joomla versions 6.2.1 and earlier a medium severity vulnerability CVE-2026-60029 was detected. This vulnerability allows authenticated users to perform a stored cross-site scripting (XSS) attack. To address this issue, users should upgrade Quix Page Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60029.
Read more CMS
In Quix Page Builder component for Joomla versions before 6.2.1 a high severity vulnerability CVE-2026-60030 was detected. This vulnerability allows authenticated users to upload media files regardless of their media management permissions. To address this issue, users should upgrade Quix Page Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60030.
Read more CMS
In Wazuh versions prior to 4.14.5 a high severity vulnerability CVE-2026-28220 was detected. This vulnerability allows an authenticated actor to execute arbitrary code on the master node. To address this issue, users should upgrade Wazuh to version 4.14.5 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-28220.
Read more Security
In HAProxy versions 3.2.x through 3.3.2 a low severity vulnerability CVE-2026-26080 was detected. This vulnerability allows an attacker to cause a denial of service. To address this issue, users should upgrade HAProxy to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-26080.
Read more Application Development
In HAProxy Community Edition versions 3.0 through 3.3.2 a medium severity vulnerability CVE-2026-26081 was detected. This vulnerability allows remote attackers to cause a denial of service. To address this issue, users should upgrade HAProxy to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-26081.
Read more Application Development
In EGroupware affected versions a high severity vulnerability CVE-2026-27823 was detected. This vulnerability allows an authenticated attacker to execute arbitrary commands on the server. To address this issue, users should upgrade EGroupware to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-27823.
Read more Communication
In Quix Page Builder component for Joomla versions 6.2.1 and earlier a high severity vulnerability CVE-2026-60026 was detected. This vulnerability allows an authenticated user to execute arbitrary PHP code. To address this issue, users should upgrade Quix Page Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60026.
Read more CMS
In Unlimited Elements For Elementor component for WordPress versions before 2.0.11 a high severity vulnerability CVE-2026-10081 was detected. This vulnerability allows unauthenticated attackers to inject malicious scripts into pages displaying Google Reviews. To address this issue, users should upgrade Unlimited Elements For Elementor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10081.
Read more CMS
In Reviews Feed component for WordPress versions before 2.6.5 a medium severity vulnerability CVE-2026-10724 was detected. This vulnerability allows unauthenticated attackers to execute arbitrary shortcodes. To address this issue, users should upgrade Reviews Feed to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10724.
Read more CMS