Severity: Critical (CVSS 10) Affected Systems: Affected products listed by OpenCVE and the vendor advisory Overview miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band... A critical vulnerability identified as CVE-2026-77770 has been disclosed. The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA ... Read More »
Severity: High (CVSS 8.1) Affected Systems: Redhat Enterprise Linux Overview Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code exe... A high vulnerability identified as CVE-2026-18147 has been disclosed. A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) ... Read More »
Severity: High (CVSS 8.8) Affected Systems: Dalibo Postgresql Anonymizer Overview PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain... A high vulnerability identified as CVE-2026-19633 has been disclosed. PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary ... Read More »
Severity: High (CVSS 8.8) Affected Systems: Scriptsbundle Nokri – Job Board Wordpress Theme; Wordpress Wordpress Overview Nokri – Job Board WordPress Theme A high vulnerability identified as CVE-2025-9049 has been disclosed. The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a ... Read More »
