In league/commonmark component for PHP versions before 2.6.0 a high severity vulnerability CVE-2024-58382 was detected. This vulnerability allows attackers to cause denial of service. To address this issue, users should upgrade league/commonmark to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-58382.
Read more Web DevelopmentIn Apache ActiveMQ versions prior to 5.19.11 a high severity vulnerability CVE-2026-74761 was detected. This vulnerability allows an authenticated client to spoof their clientId when removing a durable topic subscription. To address this issue, users should upgrade Apache ActiveMQ to version 5.19.11 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74761.
Read more Developer ToolsIn the Portworx Operator component for OpenShift a high severity vulnerability CVE-2026-15140 was detected. This vulnerability allows a user with limited permissions to escalate privileges within the Kubernetes cluster. To address this issue, users should upgrade Portworx Operator to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15140.
Read more Developer ToolsIn Rara One Click Demo Import component for WordPress versions before 1.3.5 a high severity vulnerability CVE-2026-26212 was detected. This vulnerability allows an attacker to achieve remote code execution. To address this issue, users should upgrade Rara One Click Demo Import to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-26212.
Read more CMSIn IP2Location Country Blocker component for WordPress versions before 2.45.0 a medium severity vulnerability CVE-2026-82530 was detected. This vulnerability allows unauthenticated attackers to bypass IP-based access restrictions. To address this issue, users should upgrade IP2Location Country Blocker to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-82530.
Read more CMSIn EDD Product Catalog Feed by PixelYourSite component for WordPress versions 1.0.2 and earlier a high severity vulnerability CVE-2026-9331 was detected. This vulnerability allows authenticated attackers to delete arbitrary option values. To address this issue, users should upgrade EDD Product Catalog Feed by PixelYourSite to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9331.
Read more CMS