Skip to content
OpenAdvisories

Archive

14 January 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-0594 Public exploit Scanner template

    List Site Contributors <= 1.1.8 - Reflected Cross-Site Scripting via alpha

    The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'alpha' parameter in versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenti…

  • Medium 4.6
    CVE-2025-67399 Public exploit

    An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive …