CVE ID :CVE-2026-80196 Published : Aug. 25, 2026, 11:19 p.m. | 1 hour, 16 minutes ago Description :Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after password changes…
CVE-2026-80195 – Kimai before 2.63.0 Team Membership Removal via API
CVE ID :CVE-2026-80195 Published : Aug. 25, 2026, 11:19 p.m. | 1 hour, 16 minutes ago Description :Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint…
CVE-2026-78284 – WordPress MasterStudy LMS plugin <= 3.7.42 – Arbitrary File Deletion vulnerability
CVE ID :CVE-2026-78284 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :Unauthenticated Arbitrary File Deletion in MasterStudy LMS Severity: 8.6 | HIGH Visit the link for more details,…
CVE-2026-78267 – WordPress TranslatePress plugin <= 3.3.2 – Privilege Escalation vulnerability
CVE ID :CVE-2026-78267 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :Unauthenticated Privilege Escalation in TranslatePress Severity: 9.8 | CRITICAL Visit the link for more details, such as…
CVE-2026-78265 – WordPress The Events Calendar plugin <= 6.17.2 – PHP Object Injection vulnerability
CVE ID :CVE-2026-78265 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :Unauthenticated PHP Object Injection in The Events Calendar Severity: 9.8 | CRITICAL Visit the link for more…
CVE-2026-78262 – WordPress WP Project Manager plugin <= 4.0.6 – PHP Object Injection vulnerability
CVE ID :CVE-2026-78262 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :Unauthenticated PHP Object Injection in WP Project Manager Severity: 9.8 | CRITICAL Visit the link for more…
CVE-2026-77337 – CakePHP: Potential Authentication bypass with CookieAuthenticator
CVE ID :CVE-2026-77337 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications….
CVE-2026-8445 – justhtml before 1.12.0 Sanitizer Bypass via Markdown
CVE ID :CVE-2026-8445 Published : Aug. 23, 2026, 2:16 p.m. | 10 hours, 17 minutes ago Description :justhtml versions are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g….
CVE-2026-7808 – justhtml before 1.16.0 Multiple Security Issues via Sanitization
CVE ID :CVE-2026-7808 Published : Aug. 23, 2026, 2:16 p.m. | 10 hours, 17 minutes ago Description :justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or…
CVE-2026-5388 – justhtml before 1.15.0 Multiple Security Issues
CVE ID :CVE-2026-5388 Published : Aug. 23, 2026, 2:16 p.m. | 10 hours, 17 minutes ago Description :justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True),…