In All in One SEO component for WordPress versions before 4.9.9 a low severity vulnerability CVE-2026-10755 was detected. This vulnerability allows users with low-level privileges to overwrite or reset the site-wide AI integration state. To address this issue, users should upgrade All in One SEO to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10755.
Read more CMS
In Modern Event Calendar component for WordPress versions before 7.34.0 a high severity vulnerability CVE-2026-11349 was detected. This vulnerability allows attackers to extract sensitive data from the database. To address this issue, users should upgrade Modern Event Calendar to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11349.
Read more CMS
In WP Travel component for WordPress versions 11.7.1 and earlier a medium severity vulnerability CVE-2026-11868 was detected. This vulnerability allows unauthenticated users to cancel arbitrary bookings. To address this issue, users should upgrade WP Travel to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11868.
Read more CMS
In PyMdown Extensions component for Python versions from 10.0.1 until 10.21.3 a medium severity vulnerability CVE-2026-46338 was detected. This vulnerability allows attackers to read files from sibling paths that share the same base path prefix. To address this issue, users should upgrade PyMdown Extensions to version 10.21.3 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-46338.
Read more Application Development
In Argo Workflows versions prior to 3.7.15 and 4.0.6 a critical severity vulnerability CVE-2026-54526 was detected. This vulnerability allows an attacker to escalate privileges by injecting a malicious patch into a pod. To address this issue, users should upgrade Argo Workflows to version 3.7.15 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-54526.
Read more Application Development
In Centrifugo versions prior to 6.8.1 a high severity vulnerability CVE-2026-49998 was detected. This vulnerability allows an attacker to bypass authentication by reusing a key from one allowed issuer to verify a token for a different issuer. To address this issue, users should upgrade Centrifugo to version 6.8.1. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-49998.
Read more Developer Tools
In the cert-manager component for Kubernetes versions 1.18.0 through 1.19.5 and versions prior to 1.20.3 a high severity vulnerability CVE-2026-62290 was detected. This vulnerability allows an attacker to bypass DNS01 solver selectors and cause cert-manager to use ClusterIssuer DNS credentials for attacker-selected provider settings. To address this issue, users should upgrade cert-manager to version 1.19.6 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62290.
Read more Developer Tools
In Centrifugo versions prior to 6.8.4 a high severity vulnerability CVE-2026-62963 was detected. This vulnerability allows unauthenticated attackers to trigger large memory and CPU consumption. To address this issue, users should upgrade Centrifugo to version 6.8.4. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62963.
Read more Developer Tools
In Gravity Forms component for WordPress versions 2.10.4 and earlier a high severity vulnerability CVE-2026-12997 was detected. This vulnerability allows unauthenticated attackers to read the contents of arbitrary files on the server. To address this issue, users should upgrade Gravity Forms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12997.
Read more CMS