CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- thorsten phpmyfaqphpMyFAQ before 4.1.6 Remote Code Execution via Configuration API9.4 Critical
- thorsten phpmyfaqphpMyFAQ before 4.1.6 Path Traversal via category image deletion8.6 High
- siyuan-note siyuanSiYuan before v3.7.2 Stored XSS to RCE via title-img IAL9.3 Critical
- siyuan-note siyuanSiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass9.3 Critical
- erlang erts, otp, erlang\/otp +2 moreBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding8.2 High
- erlang otp, erlang\/otp, erlang\/public key +2 moreDenial of service via exponential certificate policy tree growth in path validation8.7 High
- erlang otpMegaco flex scanner buffer overflow via oversized property parm name8.3 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication9.1 Critical
- astrbotdevs astrbotAstrBotDevs AstrBot astr_main_agent.py authorization5.3 Medium
- erlang erts, otp, erlang\/otp +2 moreHeap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder5.1 Medium
- hdfgroup hdf5NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag5.2 Medium
- hdfgroup hdf5Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field4.0 Medium
- hdfgroup hdf5HDF5 SOHM List Index Heap Buffer Overflow5.5 Medium
- erlang otpRelative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass4.8 Medium
- erlang erts, otp, erlang\/otp +2 moreepmd permanent DoS via EMFILE on accept(2) in erts6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain8.7 High
- ericsson packet core controller (pcc)Path traversal Vulnerability4.8 Medium
- ericsson packet core controller (pcc)Use of Hard-coded Credentials Vulnerability5.1 Medium
- nitroshare nitroshare-desktopNitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server8.7 High
- ericsson packet core controller (pcc)Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability4.8 Medium
- mattermost, mattermost server +1 moreMattermost Server Denial of Service via Animated GIF Emoji Upload6.5 Medium
- mattermost, mattermost server +1 moreDenial of service via unbounded document content extraction in Mattermost Server4.3 Medium
- ericsson packet core controller (pcc)Generation of Error Message Containing Sensitive Information Vulnerability6.8 Medium
- ericsson packet core controller (pcc)Improper Neutralization of Special Elements used in an OS Command Vulnerability8.5 High
- shufflehound gillionWordPress Gillion theme <= 4.13 - Broken Access Control vulnerability5.3 Medium
- easy digital downloads digital downloads, syed balkhi easy digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability4.9 Medium
- acowebs checkout field editor for woocommerce – checkout managerWordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ht plugins insert headers and footers code – ht scriptWordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp chill gallery photoblocksWordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- 100plugins open user mapWordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yaycommerce yaypricingWordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability5.4 Medium
- tim strifler exclusive addons elementorWordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability5.3 Medium
- themeisle feedzyWordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- sayontan photonic gallery & lightbox for flickr, smugmug & othersWordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shapedplugin llc location weatherWordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jgwhite33 wp google review sliderWordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jgwhite33 wp google review sliderWordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability7.6 High
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability5.0 Medium
- nexcess event ticketsWordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability5.3 Medium
- chrisvrichardson mappress maps for wordpressWordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability5.3 Medium
- themeisle orbit fox by themeisleWordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpdeveloper betterdocsWordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- miniorange wordpress social login and registerWordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpcenter affiliatexWordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- tyche softwares abandoned cart lite for woocommerceWordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themeum kirkiWordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability6.8 Medium
- thrive themes coupon leads versionWordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability6.5 Medium
- yoomoney юkassa для woocommerceWordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability6.5 Medium
- themewant rt mega menu – mega menu builder for elementor & gutenbergWordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability6.5 Medium
- Show moreLoading…