Tag: 2026-02-19

14 Attack Reports | 383 Vulnerabilities

Attack reports

Android threats using GenAI usher in a new era

ESET researchers have discovered PromptSpy, the first known Android malware to abuse generative AI in its execution flow. This malware uses Google's Gemini AI to analyze screen content and provide instructions for UI manipulation, allowing it to adapt to various devices and layouts. PromptSpy's mai…
android
remote access
gemini
generative ai
vnc
argentina
2026-02-19
accessibility service
promptspy
vncspy
Published: February 19, 2026
Downloadable IOCs: 1

Zero-day in Dell RecoverPoint for Virtual Machines (CVE-2026-22769)

A critical zero-day vulnerability in Dell RecoverPoint for Virtual Machines has been discovered and actively exploited. The flaw, identified as CVE-2026-22769, allows attackers to gain root-level access on affected systems. China-linked threat actor UNC6201 has been leveraging this vulnerability in…
backdoor
vulnerability
china
zero-day
brickstorm
patch
vmware
CVE-2026-22769
grimbolt
slaystyle
2026-02-19
dell
recoverpoint
root access
Published: February 19, 2026
Linked vulnerabilities : CVE-2026-22769 (CVSS 10.0)
Downloadable IOCs: 5

2025 Cloud Threat Hunting and Defense Landscape

The report outlines key cloud security threats for 2025, highlighting exploitation of misconfigurations, cloud abuse, ransomware, credential theft, and third-party risks. Threat actors are increasingly leveraging legitimate cloud services for malicious purposes, including using AI/ML capabilities. …
ransomware
cloud security
acr stealer
threat landscape
credential abuse
fatalrat
lamehug
2026-02-19
ai/ml exploitation
cloud-native attacks
misconfigurations
saltwater
seaside
seaspy
third-party risk
Published: February 19, 2026
Linked vulnerabilities : CVE-2025-0282 (CVSS 9.0), CVE-2024-3400, CVE-2021-26855, CVE-2023-3519, CVE-2021-26858, CVE-2021-26857, CVE-2021-27065, CVE-2025-61882 (CVSS 9.8), CVE-2021-43798, CVE-2023-2868, CVE-2023-7102
Downloadable IOCs: 3

Banners, Bots and Butchers: The AI-Driven Long Con in Asia

This intelligence report details a hybrid cryptocurrency investment scam campaign targeting users in Asia, particularly Japan. The scam combines malvertising techniques to attract victims with pig butchering tactics using AI-powered chatbots for sustained engagement. Victims are lured through socia…
social engineering
malvertising
cryptocurrency
pig butchering
japan
asia
investment scam
domain generation
2026-02-19
ai chatbots
Published: February 19, 2026
Downloadable IOCs: 0

DNS Used to Hide Fake Investment Platform Schemes

Savvy Seahorse, a DNS threat actor, employs sophisticated techniques to lure victims into fake investment platforms through Facebook ads. They use DNS CNAME records to create a traffic distribution system, enabling dynamic IP address updates and evasion of detection. The campaigns target multiple l…
domain generation algorithm
geofencing
facebook ads
dns abuse
investment scams
cname records
traffic distribution system
2026-02-19
Published: February 19, 2026
Downloadable IOCs: 0

Uncovering Malicious Cryptocurrency Scam Domains and Hacked YouTube Channels

Infoblox security researchers have discovered a group of malicious domains hosting cryptocurrency scams, some linked to hacked YouTube channels. The domains, initially registered under CryptDesignBot, frequently change registrars to conceal information. They use lookalike domains to impersonate leg…
phishing
lookalike domains
session hijacking
2026-02-19
cryptocurrency scams
hacked youtube channels
protective dns
ytstealer
Published: February 19, 2026
Downloadable IOCs: 0

ClickFix in action: how fake captcha can encrypt an entire company

The report details a malware attack on a large Polish organization involving fake CAPTCHA techniques. It describes the initial infection vector, where users were tricked into running malicious code through a Windows+R shortcut. The analysis covers two main malware families: Latrodectus (version 2.3…
ransomware
side-loading
persistence
latrodectus
clickfix
malware analysis
c2 communication
fake captcha
2026-02-19
supper
Published: February 19, 2026
Downloadable IOCs: 17

Fake Homebrew Pages Deliver Cuckoo Stealer via ClickFix | macOS Threat Hunting Analysis

A sophisticated malware campaign targeting macOS users has been discovered, utilizing typosquatted domains impersonating the Homebrew package manager. The attack, dubbed ClickFix, exploits users' trust in command-line installation processes. Victims are tricked into executing malicious curl command…
typosquatting
infostealer
cryptocurrency
persistence
macos
cuckoo stealer
credential harvesting
c2
clickfix
2026-02-19
homebrew
Published: February 19, 2026
Linked vulnerabilities : CVE-2026-25253 (CVSS 8.8)
Downloadable IOCs: 5

The Curious Case of the Triton Malware Fork

A malicious fork of the MacOS app Triton was discovered on GitHub, containing Windows-targeted malware disguised as the legitimate application. The attacker modified the repository, redirecting download links to a ZIP file hosting the malware. Analysis revealed sophisticated evasion techniques, ant…
malware
windows
macos
open-source
github
triton
2026-02-19
code-hosting
fork
triton malware fork
Published: February 19, 2026
Downloadable IOCs: 3

Invitation to Trouble: The Rise of Calendar Phishing Attacks

A new phishing tactic involving fake Microsoft and Google Calendar invites has been identified, aimed at stealing login credentials. These sophisticated attacks mimic designs from well-known platforms, exploiting routine business activities like scheduling meetings. Threat actors use email spoofing…
social engineering
credential theft
microsoft
email spoofing
2026-02-19
calendar phishing
corporate targeting
fake invitations
google
Published: February 19, 2026
Downloadable IOCs: 7

Arkanix Stealer targets a variety of data, offers a MaaS referral program

Arkanix Stealer, a newly discovered malware operating under a Malware-as-a-Service model, targets a wide range of user data including cryptocurrencies, gaming, and online banking information. The stealer, available in both Python and C++ versions, offers configurable features and employs various te…
python
infostealer
cryptocurrency
c++
maas
browser data theft
gaming
arkanix stealer
2026-02-19
chromelevator
Published: February 19, 2026
Downloadable IOCs: 10

(Don't) TrustConnect: It's a RAT in an RMM hat

A new malware-as-a-service (MaaS) called TrustConnect has been discovered masquerading as a legitimate remote monitoring and management (RMM) tool. The malware, classified as a remote access trojan (RAT), uses a fake business website as its command and control center and MaaS portal. Priced at $300…
cybercrime
malware-as-a-service
email campaigns
remote access trojan
c2 infrastructure
digital signatures
rmm abuse
2026-02-19
docconnect
trustconnect
trustconnect rat
Published: February 19, 2026
Downloadable IOCs: 10

Uncovering Malicious OAuth Campaigns in Entra ID

This analysis reveals the growing threat of malicious OAuth applications in Microsoft Entra ID, which attackers use for persistence and privilege escalation. The report details how these apps blend in with legitimate integrations, making detection challenging. It describes the creation of OAuth App…
phishing
cloud security
oauth
application impersonation
2026-02-19
consent abuse
entra id
identity security
Published: February 19, 2026
Downloadable IOCs: 2

When your IPTV app terminates your savings

A new Android banking Trojan named Massiv has been discovered, posing a significant threat to mobile banking users. This malware allows remote control of infected devices and enables Device Takeover attacks, leading to fraudulent transactions from victims' accounts. Massiv is distributed through si…
side-loading
android
banking trojan
device takeover
overlay attacks
remote control
iptv
2026-02-19
massiv
Published: February 19, 2026
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-15586

10.0
    Ogp
  • Website
Published: February 19, 2026

CVE-2026-2731

10.0
    Dynamicweb
  • Dynamicweb
Published: February 19, 2026

CVE-2025-12107

10.0
    Wso2
  • Identity Server
Published: February 19, 2026

CVE-2026-26030

9.9
    Microsoft
  • Semantic Kernel
Published: February 19, 2026

CVE-2025-12882

9.8
    Wordpress
  • Clasifico Listing
Published: February 19, 2026

CVE-2025-13563

9.8
    Lizza
  • Lizza Lms Pro
Published: February 19, 2026

CVE-2025-13851

9.8
    Buyent
  • Classified
Published: February 19, 2026

CVE-2026-0926

9.8
    Prodigy
  • Prodigy Commerce
Published: February 19, 2026

CVE-2026-1405

9.8
    Wordpress
  • Slider Future Plugin
Published: February 19, 2026

CVE-2026-1994

9.8
    Wordpress
  • S2member
Published: February 19, 2026

CVE-2026-23542

9.8
    Themegoods
  • Grand Restaurant
Published: February 19, 2026

CVE-2026-23549

9.8
    Magepeopleteam
  • Wp Evently
Published: February 19, 2026

CVE-2025-8350

9.8
    Inrove
  • Bieticaret Cms
Published: February 19, 2026

CVE-2025-9953

9.8
    Database Software Training Consulting Ltd
  • Databank Accreditation Software
Published: February 19, 2026

CVE-2025-71243

9.3
    Spip
  • Saisies
Published: February 19, 2026

CVE-2026-24834

9.3
    Kata-Containers
  • Kata-Containers
Published: February 19, 2026

CVE-2026-26339

9.3
    Hyland
  • Alfresco Transformation Service
Published: February 19, 2026

CVE-2026-2409

9.3
    Delinea
  • Cloud Suite
Published: February 19, 2026

CVE-2026-27476

9.3
    Rustfly
  • Rustfly
Published: February 19, 2026

CVE-2026-26016

9.2
    Pterodactyl
  • Panel
Published: February 19, 2026

CVE-2026-27475

9.2
    Spip
  • Spip
Published: February 19, 2026

CVE-2025-13590

9.1
    Wso2
  • Api Control Plane
  • Api Manager
  • Traffic Manager
  • Universal Gateway
Published: February 19, 2026

CVE-2026-2686

8.9
    Seccn
  • Dingcheng G10
Published: February 19, 2026

CVE-2025-12821

8.8
    Wordpress
  • Newsblogger
Published: February 19, 2026

CVE-2025-12845

8.8
    Tablesome
  • Contact Form Db
Published: February 19, 2026

CVE-2025-13603

8.8
    Wordpress
  • Wp Audio Gallery
Published: February 19, 2026

CVE-2025-4521

8.8
    Wordpress
  • Idonate
Published: February 19, 2026

CVE-2026-0912

8.8
    Wordpress
  • Toret Manager
Published: February 19, 2026

CVE-2026-0974

8.8
    Wordpress
  • Orderable
Published: February 19, 2026

CVE-2026-23544

8.8
    Codetipi
  • Valenti
Published: February 19, 2026

CVE-2026-26358

8.8
    Dell
  • Unisphere For Powermax
Published: February 19, 2026

CVE-2026-26359

8.8
    Dell
  • Unisphere For Powermax
Published: February 19, 2026

CVE-2026-26337

8.8
    Hyland
  • Alfresco Transformation Service
Published: February 19, 2026

CVE-2026-26063

8.8
    Cedi
  • Cedipay
Published: February 19, 2026

CVE-2026-26318

8.8
    Systeminformation
  • Systeminformation
Published: February 19, 2026

CVE-2026-25535

8.7
    Parallax
  • Jspdf
Published: February 19, 2026

CVE-2026-25998

8.7
    Strongswan
  • Strongman
Published: February 19, 2026

CVE-2026-26336

8.7
    Hyland
  • Alfresco
Published: February 19, 2026

CVE-2026-26314

8.7
    Ethereum
  • Go-Ethereum
  • Geth
Published: February 19, 2026

CVE-2026-26323

8.6
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-2274

8.5
    Google
  • Appsheet
Published: February 19, 2026

CVE-2026-26280

8.4
    Systeminformation
  • Systeminformation
Published: February 19, 2026

CVE-2026-21535

8.2
    Microsoft
  • Teams
Published: February 19, 2026

CVE-2026-26360

8.1
    Dell
  • Unisphere For Powermax
Published: February 19, 2026

CVE-2026-26362

8.1
    Dell
  • Unisphere For Powermax
Published: February 19, 2026

CVE-2026-22267

8.1
    Dell
  • Powerprotect Data Manager
Published: February 19, 2026

CVE-2026-25755

8.1
    Mozilla
  • Jspdf
Published: February 19, 2026

CVE-2026-25940

8.1
    Jspdf
  • Jspdf
Published: February 19, 2026

CVE-2025-4960

7.8
    Epson
  • Installnavi
Published: February 19, 2026

CVE-2026-26200

7.8
    Hdfgroup
  • Hdf5
Published: February 19, 2026

CVE-2026-25378

7.6
    Nelio
  • Nelio Ab Testing
Published: February 19, 2026

CVE-2026-25418

7.6
    Bitpressadmin
  • Bit Form
Published: February 19, 2026

CVE-2026-27013

7.6
    Fabricjs
  • Fabric.Js
Published: February 19, 2026

CVE-2026-26322

7.6
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2025-11754

7.5
    Wordpress
  • Gdpr Cookie Consent
Published: February 19, 2026

CVE-2025-12707

7.5
    Wordpress
  • Library Management System
Published: February 19, 2026

CVE-2026-25474

7.5
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-25326

7.5
    Cmsmasters
  • Cmsmasters Content Composer
Published: February 19, 2026

CVE-2026-27052

7.5
    Villanteam
  • Sales Countdown Timer
Published: February 19, 2026

CVE-2026-1581

7.5
    Wordpress
  • Wpforo
Published: February 19, 2026

CVE-2026-2232

7.5
    Woocommerce
  • Product Table And List Builder
Published: February 19, 2026

CVE-2026-26202

7.5
    Kaleidos
  • Penpot
Published: February 19, 2026

CVE-2026-26267

7.5
    Stellar
  • Rs-Soroban-Sdk
Published: February 19, 2026

CVE-2026-26278

7.5
    Fast-Xml-Parser
  • Fast-Xml-Parser
Published: February 19, 2026

CVE-2026-27343

7.5
    Vankarwai
  • Airtifact
Published: February 19, 2026

CVE-2026-26275

7.5
    Httpsig-Hyper
  • Httpsig-Hyper
Published: February 19, 2026

CVE-2026-26316

7.5
    Openclaw
  • Openclaw
    Bluebubbles
Published: February 19, 2026

CVE-2025-9208

7.5
    Opentext
  • Web Site Management Server
Published: February 19, 2026

CVE-2026-26319

7.5
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-26321

7.5
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-26324

7.5
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-25926

7.3
    Notepad-Plus-Plus
  • Notepad\+\+
Published: February 19, 2026

CVE-2025-9062

7.3
    Me Code Informatics And Engineering Services
  • Envanty
Published: February 19, 2026

CVE-2026-26192

7.3
    Openwebui
  • Open Webui
Published: February 19, 2026

CVE-2026-26193

7.3
    Openwebui
  • Open Webui
Published: February 19, 2026

CVE-2025-12975

7.2
    Wordpress
  • Woocommerce Product Feed Manager
Published: February 19, 2026

CVE-2025-14452

7.2
    Wordpress
  • Wp Customer Reviews
Published: February 19, 2026

CVE-2025-15041

7.2
    Backwpup
  • Backwpup
Published: February 19, 2026

CVE-2026-26325

7.2
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-25232

7.1
    Gogs
  • Gogs
Published: February 19, 2026

CVE-2026-23547

7.1
    Cmsmasters
  • Cmsmasters Content Composer
Published: February 19, 2026

CVE-2026-26205

7.1
    Opa
  • Opa Envoy Plugin
Published: February 19, 2026

CVE-2026-26286

7.1
    Sillytavern
  • Sillytavern
Published: February 19, 2026

CVE-2026-26317

7.1
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2025-8054

7.1
    Opentext
  • Xm Fax
Published: February 19, 2026

CVE-2026-26320

7.1
    Openclaw
  • Openclaw
    Apple
Published: February 19, 2026

CVE-2026-26327

7.1
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-26201

7.0
    *
  • Emp3r0r
Published: February 19, 2026

CVE-2025-13672

7.0
    Opentext
  • Web Site Management Server
Published: February 19, 2026

CVE-2026-2684

6.9
    Tsinghua Unigroup
  • Electronic Archives System
Published: February 19, 2026

CVE-2026-25242

6.9
    Gogs
  • Gogs
Published: February 19, 2026

CVE-2026-2689

6.9
    Itsourcecode
  • Event Management System
Published: February 19, 2026

CVE-2026-2690

6.9
    Itsourcecode
  • Event Management System
Published: February 19, 2026

CVE-2026-2691

6.9
    Itsourcecode
  • Event Management System
Published: February 19, 2026

CVE-2025-41023

6.9
    Thesamur
  • Autogpt
Published: February 19, 2026

CVE-2026-25738

6.9
    Indico
  • Indico
    Flask-Multipass
Published: February 19, 2026

CVE-2026-26338

6.9
    Hyland
  • Alfresco Transformation Service
Published: February 19, 2026

CVE-2026-26313

6.9
    Go-Ethereum
  • Geth
Published: February 19, 2026

CVE-2026-26315

6.9
    Ethereum
  • Go-Ethereum
Published: February 19, 2026

CVE-2025-15585

6.7
    Fileflows
  • Fileflows
Published: February 19, 2026

CVE-2026-24126

6.6
    Weblate
  • Weblate
Published: February 19, 2026

CVE-2025-11725

6.5
    Aruba
  • Aruba Hispeed Cache
Published: February 19, 2026

CVE-2025-13587

6.5
    Wordpress
  • Two Factor Authentication Via Email
Published: February 19, 2026

CVE-2026-0722

6.5
    Wordfence
  • Shield Security
Published: February 19, 2026

CVE-2026-25307

6.5
    8theme
  • Xstore
  • Xstore Core
Published: February 19, 2026

CVE-2026-25368

6.5
    Codepeople
  • Calculated Fields Form
Published: February 19, 2026

CVE-2026-25372

6.5
    Kodezen
  • Academy Lms
Published: February 19, 2026

CVE-2026-25432

6.5
    Omnippet
  • Omnipress
Published: February 19, 2026

CVE-2026-25451

6.5
    Boldthemes
  • Bold Page Builder
Published: February 19, 2026

CVE-2026-25453

6.5
    Mdempfle
  • Advanced Iframe
Published: February 19, 2026

CVE-2026-25463

6.5
    Wpestate
  • Wpresidence Core
Published: February 19, 2026

CVE-2026-25472

6.5
    Themefusion
  • Fusion Builder
Published: February 19, 2026

CVE-2026-26361

6.5
    Dell
  • Unisphere For Powermax
Published: February 19, 2026

CVE-2026-27057

6.5
    Pendidesign
  • Penci Filter Everything
Published: February 19, 2026

CVE-2026-27058

6.5
    Pendidesign
  • Penci Podcast
Published: February 19, 2026

CVE-2026-27059

6.5
    Pendidesign
  • Penci Recipe
Published: February 19, 2026

CVE-2026-27069

6.5
    Pendesign
  • Soledad
Published: February 19, 2026

CVE-2026-27092

6.5
    Greg Winiarski
  • Wpadverts
Published: February 19, 2026

CVE-2026-27094

6.5
    Godaddy
  • Coblocks
Published: February 19, 2026

CVE-2026-1461

6.5
    Wordpress
  • Simple Membership
Published: February 19, 2026

CVE-2026-26057

6.5
    Skill-Scanner
  • Skill-Scanner
Published: February 19, 2026

CVE-2026-26312

6.5
    Stalw
  • Stalwart
Published: February 19, 2026

CVE-2026-27440

6.5
    Saad Iqbal
  • Mycred
Published: February 19, 2026

CVE-2025-12116

6.4
    Wordpress
  • Drift
Published: February 19, 2026

CVE-2025-12117

6.4
    Wordpress
  • Renden Theme
Published: February 19, 2026

CVE-2025-12375

6.4
    Printful
  • Integration For Woocommerce
Published: February 19, 2026

CVE-2025-12448

6.4
    Smartsupp
  • Smartsupp
Published: February 19, 2026

CVE-2025-13048

6.4
    Statcounter
  • Free Real Time Visitor Stats
Published: February 19, 2026

CVE-2025-13612

6.4
    Wordpress
  • Album And Image Gallery Plus Lightbox
Published: February 19, 2026

CVE-2025-13617

6.4
    Wordpress
  • Apollo13 Framework Extensions
Published: February 19, 2026

CVE-2025-13732

6.4
    Wordpress
  • S2member
Published: February 19, 2026

CVE-2025-13738

6.4
    Wordpress
  • Easy Table Of Contents
Published: February 19, 2026

CVE-2025-14445

6.4
    Devvn
  • Image Hotspot
Published: February 19, 2026

CVE-2025-14851

6.4
    Wordpress
  • Yamaps
Published: February 19, 2026

CVE-2025-14983

6.4
    Wordpress
  • Advanced Custom Fields Font Awesome Field Plugin
Published: February 19, 2026

CVE-2026-0549

6.4
    Wordpress
  • Groups Plugin
Published: February 19, 2026

CVE-2026-0556

6.4
    Wordpress
  • Xo Event Calendar
Published: February 19, 2026

CVE-2026-1373

6.4
    Wordpress
  • Easy Author Image
Published: February 19, 2026

CVE-2026-1646

6.4
    Wordpress
  • Advance Block Extend
Published: February 19, 2026

CVE-2026-2718

6.4
    Wordpress
  • Dealia Request A Quote
Published: February 19, 2026

CVE-2026-2711

6.3
    Zhutoutoutousan
  • Worldquant-Miner
Published: February 19, 2026

CVE-2026-22268

6.3
    Dell
  • Powerprotect Data Manager
Published: February 19, 2026

CVE-2025-11706

6.1
    Wordpress
  • Aruba Hispeed Cache
Published: February 19, 2026

CVE-2025-12451

6.1
    Wordpress
  • Easy Svg Support
Published: February 19, 2026

CVE-2025-14076

6.1
    Wordpress
  • Ixml
Published: February 19, 2026

CVE-2026-0561

6.1
    Wordpress
  • Shield Security
Published: February 19, 2026

CVE-2026-2502

6.1
    Wordpress
  • Xmlrpc Attacks Blocker
Published: February 19, 2026

CVE-2025-15562

6.1
    *
  • Api
Published: February 19, 2026

CVE-2026-24392

5.9
    Nabil Lemsieh
  • Hurrytimer
Published: February 19, 2026

CVE-2026-25343

5.9
    Veronalabs
  • Wp Sms
Published: February 19, 2026

CVE-2026-25362

5.9
    Fooplugins
  • Foogallery
Published: February 19, 2026

CVE-2026-26189

5.9
    Aquasecurity
  • Trivy-Action
Published: February 19, 2026

CVE-2026-27360

5.9
    10web
  • Photo Gallery
Published: February 19, 2026

CVE-2026-27368

5.9
    Seedprod
  • Coming Soon Page
  • Under Construction And Maintenance Mode
Published: February 19, 2026

CVE-2025-13671

5.9
    Opentext
  • Web Site Management Server
Published: February 19, 2026

CVE-2026-2738

5.6
    Openvpn
  • Ovpn-Dco-Win
Published: February 19, 2026

CVE-2026-25385

5.5
    Kaizencoders
  • Url Shortify
Published: February 19, 2026

CVE-2026-2284

5.4
    Plugin
  • News Elementor Blog Magazine
Published: February 19, 2026

CVE-2026-23804

5.4
    Bbr Plugins
  • Better Business Reviews
Published: February 19, 2026

CVE-2026-25311

5.4
    10up
  • Autoshare For Twitter
Published: February 19, 2026

CVE-2026-25322

5.4
    Publishpress
  • Publishpress Revisions
Published: February 19, 2026

CVE-2026-25337

5.4
    Wpcoachify
  • Coachify
Published: February 19, 2026

CVE-2026-25388

5.4
    Scripteo
  • Ads Pro
Published: February 19, 2026

CVE-2026-25391

5.4
    Wordpress
  • Wp Wand
Published: February 19, 2026

CVE-2026-25473

5.4
    Aa-Team
  • Wzone
Published: February 19, 2026

CVE-2026-27050

5.4
    Thimpress
  • Realpress
Published: February 19, 2026

CVE-2026-25739

5.4
    Indico
  • Indico
Published: February 19, 2026

CVE-2026-27387

5.4
    Designinvento
  • Directorypress
Published: February 19, 2026

CVE-2026-26952

5.4
    Pi-Hole
  • Pi-Hole
Published: February 19, 2026

CVE-2026-26953

5.4
    Pi-Hole
  • Pi-Hole
Published: February 19, 2026

CVE-2025-12500

5.3
    Woocommerce
  • Checkout Field Manager
Published: February 19, 2026

CVE-2025-13079

5.3
    Wordpress
  • Popup Builder
Published: February 19, 2026

CVE-2025-13113

5.3
    Accessibe
  • Accessibe
Published: February 19, 2026

CVE-2025-13842

5.3
    Wordpress
  • Breadcrumb Navxt
Published: February 19, 2026

CVE-2025-13864

5.3
    Wordpress
  • Breeze
Published: February 19, 2026

CVE-2025-13930

5.3
    Woocommerce
  • Checkout Field Manager
Published: February 19, 2026

CVE-2025-14294

5.3
    Razorpay
  • Woocommerce
Published: February 19, 2026

CVE-2025-14357

5.3
    Wordpress
  • Mega Store Woocommerce Theme
Published: February 19, 2026

CVE-2026-25229

5.3
    Gogs
  • Gogs
Published: February 19, 2026

CVE-2026-2681

5.3
    Blst
  • Blst
Published: February 19, 2026

CVE-2026-2692

5.3
    Cocoteanet
  • Cyreneadmin
Published: February 19, 2026

CVE-2026-2693

5.3
    Cocoteanet
  • Cyreneadmin
Published: February 19, 2026

CVE-2026-2704

5.3
    Openbabel
  • Open Babel
Published: February 19, 2026

CVE-2026-2705

5.3
    Openbabel
  • Open Babel
Published: February 19, 2026

CVE-2026-2706

5.3
    Code-Projects
  • Patient Record Management System
Published: February 19, 2026

CVE-2026-22422

5.3
    Wpeverest
  • Everest Forms
Published: February 19, 2026

CVE-2026-24375

5.3
    Wp Swings
  • Woo Gift Cards Lite
Published: February 19, 2026

CVE-2026-24999

5.3
    Alma
  • Alma-Gateway-For-Woocommerce
Published: February 19, 2026

CVE-2026-25000

5.3
    Kraft Plugins
  • Wheel Of Life
Published: February 19, 2026

CVE-2026-25005

5.3
    N-Media
  • Frontend File Manager
Published: February 19, 2026

CVE-2026-25315

5.3
    Hcaptcha
  • Hcaptcha-For-Wp
Published: February 19, 2026

CVE-2026-25320

5.3
    Cool Plugins
  • Elementor Contact Form Db
Published: February 19, 2026

CVE-2026-25321

5.3
    Supportcandy
  • Supportcandy
Published: February 19, 2026

CVE-2026-25324

5.3
    Expresstech
  • Quiz And Survey Master
Published: February 19, 2026

CVE-2026-25325

5.3
    Rtcamps
  • Rtmedia
    Buddypress
    Bbpress
Published: February 19, 2026

CVE-2026-25332

5.3
    Fahad Mahmood
  • Endless Posts Navigation
Published: February 19, 2026

CVE-2026-25333

5.3
    Peregrinethemes
  • Shopwell
Published: February 19, 2026

CVE-2026-25336

5.3
    Wpcoachify
  • Coachify
Published: February 19, 2026

CVE-2026-25338

5.3
    Ays
  • Ays Pro Ai Chatbot
Published: February 19, 2026

CVE-2026-25348

5.3
    Alttextai
  • Download Alt Text Ai
Published: February 19, 2026

CVE-2026-25364

5.3
    Sprout Invoices
  • Client Invoicing
Published: February 19, 2026

CVE-2026-25367

5.3
    Nootheme
  • Citi Lights
Published: February 19, 2026

CVE-2026-25374

5.3
    Raratheme
  • Spa-And-Salon
Published: February 19, 2026

CVE-2026-25384

5.3
    Wp-Lab
  • Wp-Lister Lite For Ebay
Published: February 19, 2026

CVE-2026-25386

5.3
    Elementor
  • Ally
Published: February 19, 2026

CVE-2026-25408

5.3
    Pluginrx
  • Broken Link Notifier
Published: February 19, 2026

CVE-2026-25412

5.3
    Mdempfle
  • Advanced Iframe
Published: February 19, 2026

CVE-2026-25415

5.3
    Iqonicdesign
  • Wpbookit Pro
Published: February 19, 2026

CVE-2026-25441

5.3
    Leadconnector
  • Leadconnector
Published: February 19, 2026

CVE-2026-27042

5.3
    Wpdeveloper
  • Notificationx
Published: February 19, 2026

CVE-2026-27066

5.3
    Woocommerce
  • Live-Sales-Notifications-For-Woocommerce
Published: February 19, 2026

CVE-2026-1219

5.3
    Sonaar
  • Mp3 Audio Player
Published: February 19, 2026

CVE-2025-15563

5.3
    Worktime
  • Worktime
Published: February 19, 2026

CVE-2019-25405

5.3
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25419

5.3
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25422

5.3
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2026-25527

5.3
    Webtechnologies
  • Changedetection
Published: February 19, 2026

CVE-2025-71242

5.3
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-25766

5.3
    Labstack
  • Echo
Published: February 19, 2026

CVE-2026-23620

5.3
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23621

5.3
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-27472

5.3
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-27328

5.3
    Devsblink
  • Edublink
Published: February 19, 2026

CVE-2025-8055

5.3
    Opentext
  • Xm Fax
Published: February 19, 2026

CVE-2026-1658

5.3
    Opentext
  • Directory Services
Published: February 19, 2026

CVE-2026-26326

5.3
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-26282

5.2
    M2team
  • Nanazip
Published: February 19, 2026

CVE-2026-25120

5.1
    Gogs
  • Gogs
Published: February 19, 2026

CVE-2026-2709

5.1
    Busy
  • Busy
Published: February 19, 2026

CVE-2025-40697

5.1
    Lewe
  • Webmeasure
Published: February 19, 2026

CVE-2026-2735

5.1
    Alkacon
  • Opencms
Published: February 19, 2026

CVE-2026-2736

5.1
    Alkacon
  • Opencms
Published: February 19, 2026

CVE-2019-25402

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25403

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25404

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25406

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25407

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25408

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25409

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25410

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25411

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25412

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25413

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25414

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25415

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25416

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25417

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25418

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25420

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25421

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25423

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25424

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25425

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25426

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25427

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25428

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25429

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2019-25430

5.1
    Comodo
  • Dome Firewall
Published: February 19, 2026

CVE-2025-71244

5.1
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-26223

5.1
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-26345

5.1
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-23604

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23605

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23606

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23607

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23608

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23609

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23610

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23611

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23612

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23613

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23614

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23615

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23616

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23617

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23618

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-23619

5.1
    Gfi
  • Mailessentials
Published: February 19, 2026

CVE-2026-2243

5.1
    Qcow2
  • Qemu
Published: February 19, 2026

CVE-2026-27473

5.1
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-26203

5.1
    Pjsip
  • Pjsip
Published: February 19, 2026

CVE-2026-27014

5.1
    M2team
  • Nanazip
Published: February 19, 2026

CVE-2026-27114

5.1
    M2team
  • Nanazip
Published: February 19, 2026

CVE-2026-25310

4.9
    Alobaidi
  • Extend Link
Published: February 19, 2026

CVE-2026-2703

4.8
    Xlnt-Community
  • Xlnt
Published: February 19, 2026

CVE-2025-71240

4.8
    Spip
  • Spip
Published: February 19, 2026

CVE-2025-71241

4.8
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-2817

4.8
    Spring
  • Spring Data Geode
Published: February 19, 2026

CVE-2026-27474

4.8
    Spip
  • Spip
Published: February 19, 2026

CVE-2026-22269

4.7
    Dell
  • Powerprotect Data Manager
Published: February 19, 2026

CVE-2026-25392

4.7
    Kaizencoders
  • Update Urls
Published: February 19, 2026

CVE-2026-22266

4.7
    Dell
  • Powerprotect Data Manager
Published: February 19, 2026

CVE-2025-69725

4.7
    Go-Chi
  • Chi
Published: February 19, 2026

CVE-2026-1043

4.4
    Wordpress
  • Postmarkapp Email Integrator
Published: February 19, 2026

CVE-2026-1044

4.4
    Wordpress
  • Tennis Court Bookings
Published: February 19, 2026

CVE-2026-1047

4.4
    Wordpress
  • Salavat Counter Plugin
Published: February 19, 2026

CVE-2026-1055

4.4
    Wordpress
  • Talkjs
Published: February 19, 2026

CVE-2026-2282

4.4
    Wordpress
  • Slidorion
Published: February 19, 2026

CVE-2026-25428

4.4
    Totalsoft
  • Ts Poll
Published: February 19, 2026

CVE-2026-2716

4.4
    Wordpress
  • Client Testimonial Slider
  • Wordpress
Published: February 19, 2026

CVE-2025-12027

4.3
    Wordpress
  • Mesmerize Companion Plugin
Published: February 19, 2026

CVE-2025-12081

4.3
    Wordpress
  • Acf Photo Gallery Field
Published: February 19, 2026

CVE-2025-12172

4.3
    Mailchimp
  • Mailchimp List Subscribe Form
Published: February 19, 2026

CVE-2025-12884

4.3
    Advanced Ads
  • Ad Manager And Adsense
Published: February 19, 2026

CVE-2025-13091

4.3
    Wordpress
  • Shopire Theme
Published: February 19, 2026

CVE-2025-13413

4.3
    Wordpress
  • Country Blocker For Adsense Plugin
Published: February 19, 2026

CVE-2025-13438

4.3
    Wordpress
  • Page Title Description Open Graph Updater
Published: February 19, 2026

CVE-2025-14167

4.3
    Wordpress
  • Remove Post Type Slug
Published: February 19, 2026

CVE-2025-14342

4.3
    Squirrly
  • Squirrly Seo
Published: February 19, 2026

CVE-2025-14427

4.3
    Shield Security
  • Blocks Bots Protects Users And Prevents Security Breaches
Published: February 19, 2026

CVE-2025-14864

4.3
    Virusdie
  • Virusdie
Published: February 19, 2026

CVE-2026-1455

4.3
    Whatsiplus
  • Scheduled Notification For Woocommerce
Published: February 19, 2026

CVE-2026-2504

4.3
    Wordpress
  • Dealia
Published: February 19, 2026

CVE-2026-25003

4.3
    Madalin.Ungureanu
  • Client Portal
Published: February 19, 2026

CVE-2026-25008

4.3
    Shahjahan Jewel
  • Ninja Tables
Published: February 19, 2026

CVE-2026-25308

4.3
    Wp.Insider
  • Simple Membership
Published: February 19, 2026

CVE-2026-25313

4.3
    Shahjahan Jewel
  • Fluentform
Published: February 19, 2026

CVE-2026-25314

4.3
    Wp Messiah
  • Top Table Of Contents
Published: February 19, 2026

CVE-2026-25318

4.3
    Wisernotify
  • Wiserreview
Published: February 19, 2026

CVE-2026-25319

4.3
    Wpzita
  • Zita Elementor Site Library
Published: February 19, 2026

CVE-2026-25330

4.3
    Publishpress
  • Publishpress Authors
Published: February 19, 2026

CVE-2026-25335

4.3
    Ays Pro
  • Secure Copy Content Protection
  • Content Locking
Published: February 19, 2026

CVE-2026-25375

4.3
    Wp Chill
  • Image Photo Gallery Final Tiles Grid
Published: February 19, 2026

CVE-2026-25393

4.3
    Sparklewpthemes
  • Hello Fse
Published: February 19, 2026

CVE-2026-25394

4.3
    Sparklewpthemes
  • Fitness Fse
Published: February 19, 2026

CVE-2026-25395

4.3
    Ikreatethemes
  • Business Roy
Published: February 19, 2026

CVE-2026-25399

4.3
    Cryoutcreations
  • Serious Slider
Published: February 19, 2026

CVE-2026-25402

4.3
    Echoplugins
  • Knowledge Base For Documentation
Published: February 19, 2026

CVE-2026-25407

4.3
    Cookiebot
  • Cookiebot
Published: February 19, 2026

CVE-2026-25409

4.3
    Crgeary
  • Wp-Jamstack-Deployments
Published: February 19, 2026

CVE-2026-25410

4.3
    Tstephenson
  • Wp-Cors
Published: February 19, 2026

CVE-2026-25411

4.3
    Themastercut
  • Revision-Manager-Tmc
Published: February 19, 2026

CVE-2026-25416

4.3
    Blazethemes
  • News Kit Elementor Addons
Published: February 19, 2026

CVE-2026-25419

4.3
    Flycart
  • Upsellwp
Published: February 19, 2026

CVE-2026-25420

4.3
    Mailerlite
  • Official-Mailerlite-Sign-Up-Forms
Published: February 19, 2026

CVE-2026-25459

4.3
    Uixthemes
  • Sober
Published: February 19, 2026

CVE-2026-27055

4.3
    Pencidesign
  • Penci Ai Smartcontent Creator
Published: February 19, 2026

CVE-2026-27056

4.3
    Ithemes
  • Ithemes Sync
Published: February 19, 2026

CVE-2026-27090

4.3
    Wp Moose
  • Kenta Companion
Published: February 19, 2026

CVE-2026-2733

3.8
    Redhat
  • Keycloak
Published: February 19, 2026

CVE-2026-25423

3.8
    Creativeinteractivemedia
  • Real3d-Flipbook-Lite
Published: February 19, 2026

CVE-2026-24764

3.7
    Openclaw
  • Openclaw
Published: February 19, 2026

CVE-2026-24122

3.7
    Sigstore
  • Cosign
Published: February 19, 2026

CVE-2025-14270

2.7
    Wordpress
  • Oneclick Chat To Order
Published: February 19, 2026

CVE-2026-2702

2.3
    Beetel
  • 777vr1
Published: February 19, 2026

CVE-2026-26059

2.1
    Churchcrm
  • Churchcrm
Published: February 19, 2026

CVE-2026-26958

1.7
    Filippo.Io
  • Edwards25519
Published: February 19, 2026

CVE-2026-22333

None
    Yithemes
  • Yith Woocommerce Compare
Published: February 19, 2026

CVE-2026-23541

None
    Wpfunnels
  • Mail Mint
Published: February 19, 2026

CVE-2026-23543

None
    Wpdeveloper
  • Essential Addons For Elementor
Published: February 19, 2026

CVE-2026-23545

None
    Aruba
  • Aruba Hispeed Cache
Published: February 19, 2026

CVE-2026-23548

None
    Designinvento
  • Directorypress
Published: February 19, 2026

CVE-2026-23803

None
    Burhan Nasir
  • Smart Auto Upload Images
Published: February 19, 2026

CVE-2026-23805

None
    Media Search Enhanced
  • Media Search Enhanced
Published: February 19, 2026

CVE-2026-25004

None
    Creativemindssolutions
  • Cm Business Directory
Published: February 19, 2026

CVE-2026-25006

None
    8theme
  • Xstore
Published: February 19, 2026

CVE-2026-25305

None
    8theme
  • Xstore
Published: February 19, 2026

CVE-2026-25316

None
    Brainstormforce
  • Cartflows
Published: February 19, 2026

CVE-2026-25323

None
    Mika
  • Osm
Published: February 19, 2026

CVE-2026-25329

None
    Expresstech Systems
  • Quiz And Survey Master
Published: February 19, 2026

CVE-2026-25331

None
    Melapress
  • Wp Activity Log
Published: February 19, 2026

CVE-2026-25363

None
    Fooplugins
  • Foogallery
Published: February 19, 2026

CVE-2026-25370

None
    Aresit
  • Wp Compress
Published: February 19, 2026

CVE-2026-25387

None
    Elementor
  • Image Optimizer
Published: February 19, 2026

CVE-2026-25389

None
    Metagauss
  • Eventprime
Published: February 19, 2026

CVE-2026-25404

None
    Automattic
  • Wp Job Manager
Published: February 19, 2026

CVE-2026-25422

None
    Themes4wp
  • Popularis Extra
Published: February 19, 2026

CVE-2026-27074

None
    Vaakash
  • Shortcoder
Published: February 19, 2026

CVE-2025-15559

None
    Nester Software
  • Worktime
Published: February 19, 2026

CVE-2025-15560

None
    Worktime
  • Worktime Server
  • Widget Api
Published: February 19, 2026

CVE-2025-15561

None
    Worktime
  • Worktime Daemon
Published: February 19, 2026

CVE-2026-2744

None
    *
  • *
Published: February 19, 2026

CVE-2025-55853

None
    Softvision
  • Webpdf
Published: February 19, 2026

CVE-2025-71245

None
    *
  • *
Published: February 19, 2026

CVE-2025-71246

None
    Vulncheck
  • Unknown
Published: February 19, 2026

CVE-2025-71247

None
    Spip
  • Spip
Published: February 19, 2026

CVE-2025-71248

None
    Spip
  • Spip
Published: February 19, 2026

CVE-2025-71249

None
    Spip
  • Spip
Published: February 19, 2026

CVE-2025-71250

None
    Spip
  • Spip
Published: February 19, 2026

CVE-2025-69674

None
    Cdata
  • Fd614gs3-R850
Published: February 19, 2026

CVE-2025-67304

None
    Ruckus
  • Network Director
Published: February 19, 2026

CVE-2025-67305

None
    Ruckus
  • Network Director
Published: February 19, 2026

CVE-2026-27327

None
    Yaycommerce
  • Yaymail
Published: February 19, 2026

CVE-2026-26744

None
    Formalms
  • Formalms
Published: February 19, 2026
Click here to see more Vulnerabilities