July 2026

YAMCS yamcs-core 5.12.7 – No Rate Limiting According to Exploit-DB, yamcs yamcs-core 5.12.7 – no rate limiting. The development comes…

Notepad++ 8.9.6 – Arbitrary Code Execution According to Exploit-DB, notepad++ 8.9.6 – arbitrary code execution. The development comes amid ongoing…

WordPress OrderConvo 14 – Path Traversal According to Exploit-DB, wordpress orderconvo 14 – path traversal. The development comes amid ongoing…

Drupal Core 10.5.5 – Error-Based SQL Injection According to Exploit-DB, drupal core 10.5.5 – error-based sql injection. The development comes…

WordPress Contest Gallery 28.1.4 – Unauthenticated Blind SQL Injection According to Exploit-DB, wordpress contest gallery 28.1.4 – unauthenticated blind sql…

OpenEMR 7.0.2 – Arbitrary File Read According to Exploit-DB, openemr 7.0.2 – arbitrary file read. The development comes amid ongoing…

WordPress Plugin WPZOOM Portfolio 1.4.21 – Reflected Cross-Site Scripting (XSS) According to Exploit-DB, wordpress plugin wpzoom portfolio 1.4.21 – reflected…

Windows Defender (MsMpEng.exe) – Race Condition According to Exploit-DB, windows defender (msmpeng.exe) – race condition. The development comes amid ongoing…

KNX visualisering – Broken Access Control According to Exploit-DB, knx visualisering – broken access control. The development comes amid ongoing…

KeepInMind 0.8.4.2 – Stored XSS According to Exploit-DB, keepinmind 0.8.4.2 – stored xss. The development comes amid ongoing regulatory scrutiny…