In Database for Contact Form 7, WPforms, Elementor forms WordPress plugin component for WordPress versions before 1.5.2 a medium severity vulnerability CVE-2026-12081 was detected. This vulnerability allows unauthenticated users to inject arbitrary PHP objects. To address this issue, users should upgrade Database for Contact Form 7, WPforms, Elementor forms WordPress plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12081.
Read more CMS
In User Registration & Membership component for WordPress versions before 5.2.2 a high severity vulnerability CVE-2026-11963 was detected. This vulnerability allows any authenticated user to change another user’s WordPress role and membership tier. To address this issue, users should upgrade User Registration & Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11963.
Read more CMS
In Tutor LMS component for WordPress versions before 3.9.13 a medium severity vulnerability CVE-2026-12271 was detected. This vulnerability allows authenticated users to modify and force-complete other students’ quiz attempts. To address this issue, users should upgrade Tutor LMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12271.
Read more CMS
In AcyMailing component for Joomla versions before 10.11.1 a high severity vulnerability CVE-2026-56292 was detected. This vulnerability allows unauthorized database access and data leakage. To address this issue, users should upgrade AcyMailing to version 10.11.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56292.
Read more CMS
In guardrails-detectors component for OpenShift in older versions a medium severity vulnerability CVE-2026-15154 was detected. This vulnerability allows a remote attacker to cause a denial of service. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15154.
Read more Developer Tools
In NATS versions prior to 2.14.3 and 2.12.12 a medium severity vulnerability CVE-2026-58214 was detected. This vulnerability allows authenticated users to bypass subscription permissions and access sensitive metadata. To address this issue, users should upgrade NATS to version 2.12.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58214.
Read more Application Development
In Zeek versions before 8.0.9 a high severity vulnerability CVE-2026-60109 was detected. This vulnerability allows unauthenticated remote attackers to cause a denial of service. To address this issue, users should upgrade Zeek to version 8.0.9 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60109.
Read more Security
In OpenWebUI versions before 0.10.0 a high severity vulnerability CVE-2026-59214 was detected. This vulnerability allows attackers to execute server-side code through configured tools via authenticated same-origin requests. To address this issue, users should upgrade OpenWebUI to version 0.10.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59214.
Read more Security
In AMP for WP – Accelerated Mobile Pages component for WordPress versions 1.1.12 and earlier a high severity vulnerability CVE-2026-6101 was detected. This vulnerability allows attackers to write arbitrary files to the server. To address this issue, users should upgrade AMP for WP – Accelerated Mobile Pages to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-6101.
Read more CMS