In Traefik versions prior to v2.11.51, v3.6.22, and v3.7.6 a critical severity vulnerability CVE-2026-54763 was detected. This vulnerability allows attackers to bypass authentication by using underscore-variant header names. To address this issue, users should upgrade Traefik to version 2.11.51 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-54763.
Read more Security
In vLLM versions 0.22.0 to 0.23.0 a medium severity vulnerability CVE-2026-55646 was detected. This vulnerability allows an attacker to cause a denial of service through memory exhaustion by uploading an oversized audio file. To address this issue, users should upgrade vLLM to version 0.24.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-55646.
Read more Machine Learning
In Pillow component for Python versions prior to 12.3.0 a medium severity vulnerability CVE-2026-55798 was detected. This vulnerability allows an attacker to inject arbitrary commands. To address this issue, users should upgrade Pillow to version 12.3.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-55798.
Read more Application Development
In Notifications for Forms & WordPress Actions component for WordPress versions before 2.6 a high severity vulnerability CVE-2024-6228 was detected. This vulnerability allows authenticated users with subscriber-level access to include and execute arbitrary local PHP files. To address this issue, users should upgrade Notifications for Forms & WordPress Actions to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-6228.
Read more CMS
In AllCoach component for WordPress versions before 1.0.2 a high severity vulnerability CVE-2026-10830 was detected. This vulnerability allows unauthenticated attackers to reset the password of arbitrary accounts and take over the site. To address this issue, users should upgrade AllCoach to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10830.
Read more CMS
In Ultimate Member component for WordPress versions before 2.12.0 a high severity vulnerability CVE-2026-11766 was detected. This vulnerability allows authenticated users with Subscriber-level access to store and execute malicious JavaScript on user profiles. To address this issue, users should upgrade Ultimate Member to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11766.
Read more CMS
In Simple Membership component for WordPress versions before 4.7.5 a high severity vulnerability CVE-2026-11855 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Simple Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11855.
Read more CMS
In FileOrganizer component for WordPress versions before 1.2.0 a high severity vulnerability CVE-2026-11962 was detected. This vulnerability allows an authenticated attacker to achieve remote code execution. To address this issue, users should upgrade FileOrganizer to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11962.
Read more CMS
In TinyPNG – JPEG, PNG & WebP image compression component for WordPress versions 3.6.13 and earlier a high severity vulnerability CVE-2026-7311 was detected. This vulnerability allows authenticated attackers to delete arbitrary files on the server, which can lead to remote code execution. To address this issue, users should upgrade TinyPNG – JPEG, PNG & WebP image compression to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-7311.
Read more CMS