Skip to content
OpenAdvisories

Archive

18 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /18 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-40948

    Apache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager

    The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login / login-callback flow, and did not use PKCE. An attacker with a Keycloak account in the same realm could deliv…

    Apache Software Foundation Apache Airflow Providers Keycloak apache-airflow-providers-keycloak PyPI
  • Medium 6.4
    CVE-2026-2986

    Contextual Related Posts <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes'

    The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping. This makes it possible for …

    ajay Contextual Related Posts Web / CMS
  • Medium 6.4
    CVE-2026-0894

    Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode

    The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_block shortcode in all versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping on user s…

    vanderwijk Content Blocks (Custom Post Widget) Web / CMS
  • Medium 5.4
    CVE-2026-2505

    Categories Images <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'z_taxonomy_image' Shortcode

    The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode. This is due to the shortcode rendering path passing attacker-controlled class input into a f…

    elzahlan Categories Images Web / CMS
  • Medium 4.0
    CVE-2026-41254

    Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed…

    littlecms little cms color engine openjdk11 openjdk-17 Debian Ubuntu Azure Linux Alpine
  • Medium 6.9
    CVE-2026-41253

    In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working…

    iTerm2 iTerm2
  • Medium 6.4
    CVE-2026-6048

    Flipbox Addon for Elementor <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Attributes

    The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flipbox widget's button URL `custom_attributes` field in all versions up to, and including, 2.1.1 due to insufficient validation of custom attribute name…

    dragwyb Flipbox Addon for Elementor Web / CMS
  • Medium 6.4
    CVE-2026-4801

    Page Builder Gutenberg Blocks <= 3.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data

    The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and including, 3.1.16 due to insufficient output escaping of event titles, descriptions, and loca…

    GoDaddy Page Builder Gutenberg Blocks – CoBlocks Web / CMS
  • Medium 6.5
    CVE-2026-40491

    gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall

    gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnerable to a Path Traversal attack within the extractall functionality. When extracting a maliciously crafted ZIP or TAR archive, the library fails to sanitize or validate t…

    wkentaro gdown gdown gdown Debian Ubuntu PyPI
  • Medium 6.8
    CVE-2026-40490

    AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirects

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled (followRedirect(true)), versions of AsyncHttpClient prior to 3.0.9 and 2.14.5 forward Auth…

    AsyncHttpClient async-http-client druid tez Debian Ubuntu Wolfi Maven
  • Medium 6.4
    CVE-2026-1559

    Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter

    The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin_place_id' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    Youzify Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress Web / CMS
  • Medium 6.1
    CVE-2026-1838

    Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter

    The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_id' parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…

    prasunsen Hostel Web / CMS
  • Medium 4.8
    CVE-2026-40593

    ChurchCRM: Stored XSS in UserEditor.php via Login Name Field

    ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the User Editor (UserEditor.php) renders stored usernames directly into an HTML input value attribute without applying htmlspecialchars(). An administrator can save a username c…

    ChurchCRM CRM