CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
The Brizy – Page Builder plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) in versions up to 2.8.11. The issue arises from missing nonce verification for unauthenticated form submissions and insufficient handling of FileUpload fields, allowing attackers to inject malicious scripts.
The ARMember – Membership Plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to and including 4.0.60. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
A vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01, affecting the auto_update_firmware function in the firmware update component. Manipulation of the str argument leads to buffer overflow, which can be exploited remotely.
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to and including 1.7.1057. The issue is due to insufficient validation of user-supplied URLs in the render_csv_data() function.
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 4.2.2. The vulnerability arises from the use of eval() on user-supplied Display Logic expressions, allowing for bypass.
The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due to the use of PHP's maybe_unserialize() function on the attacker-controlled 'args' POST parameter, which lacked proper verification and validation before deserialization.
The PixelYourSite Pro plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to 12.5.0.1. Unauthenticated attackers can send requests to arbitrary locations, allowing them to query and modify information from internal services.
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via Consent field hidden inputs in versions up to 2.10.0. The issue arises from a flawed state validation mechanism that improperly sanitizes input.
The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to 2.10.0. The issue arises from insufficient input validation and output escaping of product names in Repeater fields.
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. The issue arises from insufficient input validation and output escaping on Hidden Product field values, allowing unauthenticated attackers to inject scripts.
The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to 2.10.0. This is due to insufficient input validation and output escaping in the SingleProduct field when used inside a Repeater field.
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient validation and output escaping of Product Option field values, allowing raw unsanitized data to be stored in the database.
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.8. The issue arises from an incomplete blocklist that incorrectly restricts capability meta keys for subsites in a Multisite network.
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmg_save_provider_config AJAX action in all versions up to and including 1.8. This allows authenticated attackers with Subscriber-level access and above to update SMTP settings and redirect mail.
A vulnerability in Argo CD versions 3.2.0 through 3.2.10 and 3.3.0 through 3.3.8 allows reading cleartext Kubernetes Secret data via the ServerSideDiff feature.
A security vulnerability has been found in libssh2 up to version 1.11.1 in the userauth_password function of src/userauth.c. Manipulation of the username_len/password_len arguments leads to an integer overflow. The attack can be launched remotely.
A vulnerability was detected in Flux159 mcp-game-asset-gen version 0.1.0, affecting the function image_to_3d_async in the file src/index.ts of the MCP Interface component. Manipulation of the argument statusFile results in path traversal.
A vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to version 0.1.0, affecting the execute_command function in the src/index.ts file of the MCP Interface component. Manipulation leads to OS command injection.
A vulnerability in mtrudel bandit allows for remote denial of service via memory exhaustion, enabling unauthorized users to send an unbounded number of continuation frames. The issue occurs in the handle_frame/3 method, which lacks size limits for accumulated data.