In Keycloak in affected versions a medium severity vulnerability CVE-2025-68833 was detected. This vulnerability allows an attacker unauthorized access to resources. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-68833.
Read more Security
In Grafana versions prior to 12.4.0 a medium severity vulnerability CVE-2026-17033 was detected. This vulnerability allows an authenticated attacker to submit a malicious alert containing a controlled URL. To address this issue, users should upgrade Grafana to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-17033.
Read more Data Analytics
In CM Map Locations – Visualize and share your locations in a few clicks component for WordPress versions 2.1.8 and earlier a high severity vulnerability CVE-2026-16601 was detected. This vulnerability allows attackers to upload arbitrary files. To address this issue, users should upgrade CM Map Locations – Visualize and share your locations in a few clicks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16601.
Read more CMS
In 6Storage Rentals component for WordPress versions up to and including 2.27.0 a critical severity vulnerability CVE-2026-16249 was detected. This vulnerability allows unauthenticated attackers to log in as any existing user, including administrators. To address this issue, users should upgrade 6Storage Rentals to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16249.
Read more CMS
In WooCommerce File Approval component for WooCommerce versions 10.7 and earlier a high severity vulnerability CVE-2026-28171 was detected. This vulnerability allows an unauthenticated attacker to arbitrarily delete files. To address this issue, users should upgrade WooCommerce File Approval to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-28171.
Read more E-commerce
In Page Builder CK component for Joomla versions 3.6.5 and earlier a critical severity vulnerability CVE-2026-77994 was detected. This vulnerability allows an attacker to execute arbitrary SQL commands. To address this issue, users should upgrade Page Builder CK to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77994.
Read more CMS
In Notification Master component for WordPress versions 1.7.1 and earlier a high severity vulnerability CVE-2026-28153 was detected. This vulnerability allows unauthenticated attackers to bypass access controls. To address this issue, users should upgrade Notification Master to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-28153.
Read more CMS
In Page Builder CK component for Joomla versions earlier than 3.6.5 a medium severity vulnerability CVE-2026-77993 was detected. This vulnerability allows attackers to execute arbitrary web scripts. To address this issue, users should upgrade Page Builder CK to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77993.
Read more CMS
In BookStack versions prior to 26.05.4 a high severity vulnerability CVE-2026-82450 was detected. This vulnerability allows an authenticated user with “Import Content” and “Create Books” permissions to execute arbitrary code on the server, leading to Remote Code Execution (RCE). This occurs due to inadequate file validation within the portable ZIP import functionality. An attacker can bypass image extension validation by embedding a PHP polyglot file with a .php filename disguised as a book cover inside the ZIP archive. Because these files are subsequently stored in the public web root, the uploaded malicious script can be triggered and executed via unauthenticated web requests. To address this issue, users should upgrade BookStack to version 26.05.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-82450.