Latest Vulnerabilities
Latest Found
The latest vulnerability announcements
- CVE-2026-21489 - iccDEV has Out-of-bounds Read and Integer Underflow (Wrap or Wraparound)
- CVE-2026-21488 - iccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination
- CVE-2025-14552 - MediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode
- CVE-2025-9318 - Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
- CVE-2025-9637 - Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
- CVE-2025-9294 - Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion
- CVE-2025-13964 - LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification
- CVE-2025-5919 - Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
- CVE-2025-13766 - MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion
- CVE-2025-12067 - Table Field Add-on for ACF and SCF <= 1.3.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content
CISA Advisories
The latest advisories from CISA
- WHILL Model C2 Electric Wheelchairs and Model F Power Chairs
- CISA Releases Two Industrial Control Systems Advisories
- CISA Adds One Known Exploited Vulnerability to Catalog
- CISA Releases One Industrial Control Systems Advisory
- CISA Adds One Known Exploited Vulnerability to Catalog
- NIST and CISA Release Draft Interagency Report on Protecting Tokens and Assertions from Tampering Theft and Misuse for Public Comment
- CISA Adds One Known Exploited Vulnerability to Catalog
- CISA and Partners Release Update to Malware Analysis Report BRICKSTORM Backdoor
- Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products
- CISA Releases Nine Industrial Control Systems Advisories
