CVE ID :CVE-2026-78262 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :Unauthenticated PHP Object Injection in WP Project Manager Severity: 9.8 | CRITICAL Visit the link for more…
CVE-2026-77337 – CakePHP: Potential Authentication bypass with CookieAuthenticator
CVE ID :CVE-2026-77337 Published : Aug. 24, 2026, 10:17 p.m. | 2 hours, 17 minutes ago Description :CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications….
CVE-2026-8445 – justhtml before 1.12.0 Sanitizer Bypass via Markdown
CVE ID :CVE-2026-8445 Published : Aug. 23, 2026, 2:16 p.m. | 10 hours, 17 minutes ago Description :justhtml versions are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g….
CVE-2026-7808 – justhtml before 1.16.0 Multiple Security Issues via Sanitization
CVE ID :CVE-2026-7808 Published : Aug. 23, 2026, 2:16 p.m. | 10 hours, 17 minutes ago Description :justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or…
CVE-2026-5388 – justhtml before 1.15.0 Multiple Security Issues
CVE ID :CVE-2026-5388 Published : Aug. 23, 2026, 2:16 p.m. | 10 hours, 17 minutes ago Description :justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True),…
CVE-2026-78155 – Untrusted Search Path in StackGres
CVE ID :CVE-2026-78155 Published : Aug. 23, 2026, 10:16 a.m. | 14 hours, 18 minutes ago Description :privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges…
CVE-2026-10053 – Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) in GitLab
CVE ID :CVE-2026-10053 Published : Aug. 23, 2026, 10:16 a.m. | 14 hours, 18 minutes ago Description :GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before…
CVE-2026-78050 – Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow
CVE ID :CVE-2026-78050 Published : Aug. 23, 2026, 12:16 a.m. | 17 minutes ago Description :A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file…
CVE-2026-16149 – Security Hardener <= 2.4.4 – Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite
CVE ID :CVE-2026-16149 Published : Aug. 23, 2026, 12:16 a.m. | 17 minutes ago Description :The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including,…
CVE-2026-0551 – PPWP – Password Protect Pages <= 1.9.18 – Authenticated (Contributor+) PHP Object Injection via post_protection_roles
CVE ID :CVE-2026-0551 Published : Aug. 23, 2026, 12:16 a.m. | 17 minutes ago Description :The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions…