In the Git provider component for Apache Airflow versions 0.4.0 and earlier a high severity vulnerability CVE-2026-58065 was detected. This vulnerability allows a man-in-the-middle attacker to intercept credentials and inject malicious content. To address this issue, users should upgrade the Git provider to version 0.4.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58065.
Read more Data Analytics
In Avada (Fusion) Builder component for WordPress versions 3.15.5 and earlier a medium severity vulnerability CVE-2026-12536 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Avada (Fusion) Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12536.
Read more CMS
In Database for Contact Form 7, WPforms, Elementor forms WordPress plugin component for WordPress versions before 1.5.2 a medium severity vulnerability CVE-2026-12081 was detected. This vulnerability allows unauthenticated users to inject arbitrary PHP objects. To address this issue, users should upgrade Database for Contact Form 7, WPforms, Elementor forms WordPress plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12081.
Read more CMS
In User Registration & Membership component for WordPress versions before 5.2.2 a high severity vulnerability CVE-2026-11963 was detected. This vulnerability allows any authenticated user to change another user’s WordPress role and membership tier. To address this issue, users should upgrade User Registration & Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11963.
Read more CMS
In Tutor LMS component for WordPress versions before 3.9.13 a medium severity vulnerability CVE-2026-12271 was detected. This vulnerability allows authenticated users to modify and force-complete other students’ quiz attempts. To address this issue, users should upgrade Tutor LMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12271.
Read more CMS
In Breeze Cache component for WordPress versions before 2.5.6 a medium severity vulnerability CVE-2026-10551 was detected. This vulnerability allows an attacker to inject arbitrary HTML attributes in the final HTML output. To address this issue, users should upgrade Breeze Cache to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10551.
Read more CMS
In User Registration & Membership component for WordPress versions before 5.2.2 a critical severity vulnerability CVE-2026-11964 was detected. This vulnerability allows unauthenticated attackers to forge a payment-approved event and activate a paid membership without completing a real payment. To address this issue, users should upgrade User Registration & Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11964.
Read more CMS
In NATS versions prior to 2.14.3 and 2.12.12 a medium severity vulnerability CVE-2026-58214 was detected. This vulnerability allows authenticated users to bypass subscription permissions and access sensitive metadata. To address this issue, users should upgrade NATS to version 2.12.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58214.
Read more Application Development
In Zeek versions before 8.0.9 a high severity vulnerability CVE-2026-60109 was detected. This vulnerability allows unauthenticated remote attackers to cause a denial of service. To address this issue, users should upgrade Zeek to version 8.0.9 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60109.
Read more Security