Skip to content
OpenAdvisories

Archive

20 July 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-13156 Public exploit

    MailerSend - Official SMTP Integration < 1.0.8 - Settings Deletion and Plugin Deactivation via CSRF

    The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it verifies the manage_options capability but ignores the nonce), so an attacker can trick a logged-in administrator into visiting a crafted page t…

  • Medium 6.9
    CVE-2026-51385 Public exploit

    An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code …