Skip to content
OpenAdvisories

Archive

20 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /20 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-25441

    thesystem 1.0 Command Injection via run_command endpoint

    thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_command endpoint. Attackers can send POST requests with shell commands in the command …

    kostasmitroglou thesystem
  • Critical 9.8
    CVE-2026-2635

    MLflow Use of Default Password Authentication Bypass Vulnerability

    MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists…

    MLflow MLflow mlflow PyPI
  • Critical 9.4
    CVE-2026-27112

    Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

    Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted …

    akuity kargo github.com/akuity/kargo Go
  • Critical 10.0
    GHSA-gv8r-9rw9-9697

    Traefik affected by TLS ClientAuth Bypass on HTTP/3

    ### Summary There is a potential vulnerability in Traefik managing HTTP/3 connections. More details in the [CVE-2025-68121](https://nvd.nist.gov/vuln/detail/CVE-2025-68121). ## Patches - https://github.com/traefik/traefik/releases/tag/v2.11.37 - https://githu…

    github.com/traefik/traefik github.com/traefik/traefik/v2 github.com/traefik/traefik/v3 Go
  • Critical 9.3
    CVE-2026-25896

    fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

    fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (.) in a DOCTYPE entity name is treated as a regex wildcard during entity replace…

    NaturalIntelligence fast-xml-parser renovate prism Debian Ubuntu Wolfi npm
  • Critical 9.1
    CVE-2019-25444

    Fiverr Clone Script 1.2.2 SQL Injection via page Parameter

    Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract…

    Phpscriptsmall Fiverr Clone Script
  • Critical 9.2
    CVE-2026-2333

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.

    Owl opds
  • Critical 9.8
    CVE-2026-25715

    Jinan USR IOT Technology Limited (PUSR) USR-W610 Weak Password Requirements

    The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty credentials over the web management interface and Telnet service. This effectively …

    Jinan USR IOT Technology Limited (PUSR) USR-W610
  • Critical 9.3
    CVE-2026-24956

    WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL Injection.This issue affects Download Manager Addons for Elementor: from n/a t…

    Shahjada Download Manager Addons for Elementor
  • Critical 9.8
    CVE-2026-22384

    WordPress Applay - Shortcodes plugin <= 3.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from n/a through <= 3.7.

    leafcolor Applay - Shortcodes
  • Critical 9.8
    CVE-2025-69405

    WordPress Lorem Ipsum | Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum | Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects Lorem Ipsum | Books & Media Store: from n/a through <= 1.2.11.

    ThemeREX Lorem Ipsum | Books & Media Store
  • Critical 9.9
    CVE-2025-69403

    WordPress Bravis Addons plugin <= 1.3.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Bravis-Themes Bravis Addons bravis-addons allows Using Malicious Files.This issue affects Bravis Addons: from n/a through <= 1.3.0.

    Bravis-Themes Bravis Addons
  • Critical 9.8
    CVE-2025-69404

    WordPress Extreme Store theme <= 1.5.10 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through <= 1.5.10.

    ThemeREX Extreme Store
  • Critical 9.8
    CVE-2025-69382

    WordPress Themesflat Elementor plugin <= 1.0.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a through <= 1.0.1.

    Themesflat Themesflat Elementor
  • Critical 9.8
    CVE-2025-69371

    WordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through <= 1.6.1.

    AncoraThemes KindlyCare
  • Critical 9.8
    CVE-2025-69370

    WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through <= 2.5.5.

    ThemeGoods Capella
  • Critical 9.8
    CVE-2025-69372

    WordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through <= 1.6.2.

    AncoraThemes SevenHills
  • Critical 9.3
    CVE-2025-69337

    WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Wolmart Core wolmart-core allows Blind SQL Injection.This issue affects Wolmart Core: from n/a through <= 1.9.6.

    don-themes Wolmart Core
  • Critical 9.3
    CVE-2025-69366

    WordPress Emerce Core plugin <= 1.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue affects Emerce Core: from n/a through <= 1.8.

    TeconceTheme Emerce Core
  • Critical 9.3
    CVE-2025-69365

    WordPress Uroan Core plugin <= 1.4.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4.

    TeconceTheme Uroan Core
  • Critical 9.8
    CVE-2025-69329

    WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through < 1.4.1.

    Jthemes Prestige
  • Critical 9.3
    CVE-2025-69310

    WordPress Woodly Core plugin <= 1.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue affects Woodly Core: from n/a through <= 1.4.

    TeconceTheme Woodly Core
  • Critical 9.3
    CVE-2025-69309

    WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a through <= 1.2.8.

    TeconceTheme Saasplate Core
  • Critical 9.3
    CVE-2025-69308

    WordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue affects Nestbyte Core: from n/a through <= 1.2.

    TeconceTheme Nestbyte Core
  • Critical 9.3
    CVE-2025-69304

    WordPress Allmart plugin <= 1.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1.

    TeconceTheme Allmart
  • Critical 9.3
    CVE-2025-69307

    WordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue affects Medinik Core: from n/a through <= 1.3.6.

    TeconceTheme Medinik Core
  • Critical 9.3
    CVE-2025-69306

    WordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue affects Electio Core: from n/a through <= 1.4.

    TeconceTheme Electio Core
  • Critical 9.3
    CVE-2025-69305

    WordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affects Crete Core: from n/a through <= 1.4.3.

    TeconceTheme Crete Core
  • Critical 9.8
    CVE-2025-69301

    WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through <= 5.6.11.

    ThemeGoods PhotoMe
  • Critical 9.3
    CVE-2025-69295 Public exploit

    WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affects Coven Core: from n/a through <= 1.3.

    TeconceTheme Coven Core
  • Critical 9.8
    CVE-2025-68541

    WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0.

    Bold Themes Ippsum
  • Critical 9.9
    CVE-2025-68549

    WordPress Wiguard theme < 2.0.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1.

    Zozothemes Wiguard
  • Critical 9.8
    CVE-2025-67996

    WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.

    Bold Themes Nestin
  • Critical 9.8
    CVE-2025-67995

    WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.

    LoftOcean PatioTime
  • Critical 9.8
    CVE-2025-67997

    WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.

    Bold Themes Travelicious
  • Critical 9.9
    CVE-2025-67979

    WordPress WPForms Google Sheet Connector plugin <= 4.0.1 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Code Injection.This issue affects WPForms Google Sheet Connector: from n/a through <= 4.0.1.

    westerndeal WPForms Google Sheet Connector
  • Critical 9.5
    CVE-2026-21627 Public exploit

    Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

    The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.

    tassos.gr Novarain/Tassos Framework (plg_system_nrframework) EngageBox Advanced Custom Fields
  • Critical 9.8
    CVE-2025-10970

    SQLi in Kolay Software's Talentics

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection. This issue affects Talentics: through 20022026. NOTE: The vendor was contacted early about this dis…

    Kolay Software Talentics
  • Critical 9.3
    CVE-2026-26065

    calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution

    calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers (both 132-byte and 202-byte header variants) that allow arbitrary file writes wi…

    Kovid Goyal calibre calibre calibre Debian Ubuntu
  • Critical 9.3
    CVE-2026-26064

    calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution

    calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below contain a Path Traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows, this le…

    Kovid Goyal calibre calibre calibre Debian Ubuntu