A deserialization of untrusted data vulnerability (CWE-502) exists in the WP Chill Strong Testimonials plugin, allowing object injection. This affects versions up to and including 3.3.12. The vulnerability has a high severity with a CVSS score of 8.8, indicating potential for significant confidentiality, integrity, and availability impact. No patch or remediation details are currently provided.
CVE-2026-109895 is a high-severity DOM-based Cross-site Scripting (XSS) vulnerability in Arraytics Booktics software versions up to 1.0.29. It arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in the context of the victim's browser. This can lead to partial confidentiality, integrity, and availability impacts. No patch or remediation information is currently provided.
A stored cross-site scripting (XSS) vulnerability exists in NSquared Simply Schedule Appointments through version 1.6.12.35. This vulnerability allows an attacker to inject malicious scripts that are executed in the context of users' browsers when they view affected pages. The flaw is due to improper neutralization of input during web page generation.
CVE-2026-109894 is a critical SQL Injection vulnerability in Arraytics Booktics affecting versions up to 1.0.29. It allows an attacker to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. The vulnerability has a high CVSS score of 9.3, indicating network exploitable, no privileges required, no user interaction, with high confidentiality impact and low availability impact. No patch or remediation information is currently available.
An Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows privilege escalation. This vulnerability affects OttoKit versions up to and including 1.1.40. The vulnerability has a critical CVSS score of 9.8, indicating it can be exploited remotely without user interaction to gain high confidentiality, integrity, and availability impact.
An authentication bypass vulnerability (CVE-2026-110883) exists in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat, affecting versions up to 6.1.5. This flaw allows attackers to bypass authentication mechanisms, leading to authentication abuse. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
A code injection vulnerability (CWE-94) exists in HivePress through version 1.7.32. This flaw allows an attacker with low privileges to inject code remotely without user interaction, potentially leading to high confidentiality impact. The vulnerability has a CVSS 3.1 base score of 6.5 (medium severity). No official patch or remediation information is currently available.
An Incorrect Privilege Assignment vulnerability (CWE-266) exists in Hamid Alinia's Login with phone number component, allowing privilege escalation. This affects versions up to 1.8.77. The vulnerability has a high severity with a CVSS score of 8.1, indicating network attack vector, high complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability. No patch or remediation information is provided.
A missing authorization vulnerability in Kit (formerly ConvertKit) versions up to 3.4.6 allows attackers to exploit incorrectly configured access control security levels. This vulnerability can lead to unauthorized information disclosure and modification but does not affect availability. The CVSS score is 6.5, indicating a medium severity. No patch or remediation information is currently provided.
An authorization bypass vulnerability exists in the WP E-Signature Electronic Signature Add-on for Fluent Forms (signature-fluent-contract-forms-add-on) due to incorrectly configured access control security levels. This flaw allows an attacker to bypass authorization by manipulating a user-controlled key. The vulnerability affects versions up to and including 2.0.5. It has a CVSS 3.1 score of 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is high confidentiality loss without integrity or availability impact. No patch or remediation information is currently available.
libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborting the client or overwriting stack memory in NDEBUG builds.
librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer than four trailing bytes to crash the client.
librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes.
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past heap arrays, crashing applications such as AbiWord.
wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like AbiWord.
libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite database file, to crash the process or corrupt heap memory on 32-bit builds.
Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name. Attackers can register a persisted custom model through POST /v1/model_registrations/{model_type} with names like ..\..\evil to overwrite configuration or data files writable by the Xinference process.
Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own authorization code opened during a victim's pending login, causing Gitify to display attacker-controlled notifications as the victim's own.