Skip to content
OpenAdvisories

Archive

19 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /19 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-11551 Public exploit

    Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover

    The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possib…

    WPMU DEV Branda – White Label & Branding, Free Login Page Customizer Web / CMS
  • High 7.8
    CVE-2026-52910 Public exploit

    bpf: Free reuseport cBPF prog after RCU grace period.

    In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] The repro sets up a UDP reuseport group with a cBPF prog and replaces it with a new…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.3
    CVE-2026-49230 Public exploit

    Apache APISIX: Authentication bypass in jwe-decrypt

    Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache APISIX: from 3.8.0 through 3.16.0. Users are recommended to upgr…

    Apache Software Foundation Apache APISIX
  • Critical 9.8
    CVE-2026-7515 Public exploit

    BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style

    The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server…

    betterdocs BetterDocs Pro Web / CMS
  • Critical 9.1
    CVE-2026-8713 Public exploit Scanner template

    Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value

    The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function in all versions up to, and including, 3.15.3. This makes it possible for unauthenticated attac…

    ThemeFusion Avada (Fusion) Builder Web / CMS
  • Medium 6.5
    CVE-2026-11989 Public exploit

    Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

    The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.7 via the upload_attachment. This makes it possible for una…

    bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation Web / CMS
  • Critical 9.1
    CVE-2025-62821 Public exploit

    Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return su…