|
2026-07-28
|
CVE-2026-65898
|
CVE-2026-65898 - DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig
|
3.1 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65899
|
CVE-2026-65899 - DOMPurify before 3.4.9 Trusted Types Policy State Contamination
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65900
|
CVE-2026-65900 - DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65901
|
CVE-2026-65901 - DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65902
|
CVE-2026-65902 - DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65903
|
CVE-2026-65903 - DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65904
|
CVE-2026-65904 - DOMPurify before 3.4.4 Cross-Site Scripting via IN_PLACE mode
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65911
|
CVE-2026-65911 - DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65912
|
CVE-2026-65912 - DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65913
|
CVE-2026-65913 - DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-65914
|
CVE-2026-65914 - DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization
|
4.0 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-15037
|
CVE-2026-15037 - XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization
|
4.0 (LOW)
|
|
|
2026-07-28
|
CVE-2026-65906
|
CVE-2026-65906 - JetBrains TeamCity Kotlin DSL Sandbox Escape Code Execution
|
3.1 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65907
|
CVE-2026-65907 - JetBrains TeamCity Remote Code Execution Vulnerability
|
3.1 (CRITICAL)
|
|
|
2026-07-28
|
CVE-2026-65908
|
CVE-2026-65908 - JetBrains PyCharm Arbitrary Code Execution
|
3.1 (HIGH)
|
|
|
2026-07-27
|
CVE-2026-65512
|
CVE-2026-65512 - WordPress WP Activity Log plugin <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65514
|
CVE-2026-65514 - WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65516
|
CVE-2026-65516 - WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
|
3.1 (HIGH)
|
PHP
|
|
2026-07-27
|
CVE-2026-65518
|
CVE-2026-65518 - WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65519
|
CVE-2026-65519 - WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65521
|
CVE-2026-65521 - WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65522
|
CVE-2026-65522 - WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65524
|
CVE-2026-65524 - WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65525
|
CVE-2026-65525 - WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
|
3.1 (MEDIUM)
|
PHP
|
|
2026-07-27
|
CVE-2026-65526
|
CVE-2026-65526 - WordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability
|
3.1 (HIGH)
|
PHP
|