Known Vulnerabilities for Wp Attachments by Marcomilesi
Listed below are 3 of the newest known vulnerabilities associated with "Wp Attachments" by "Marcomilesi".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-53929 json | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, with NC_SECURE_ATTACHMENTS=true, an authentica... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-53607 json | ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, when `prettyUrls: ... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-52952 json | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() ... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-52951 json | In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races There loo... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-52799 json | Gogs is an open source self-hosted Git service. Prior to 0.14.3, GET /attachments/:uuid returns the raw attachment file witho... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-50645 json | There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF,... | Not Provided | 2026-06-12 | 2026-06-12 |
| CVE-2026-50264 json | An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client t... | Not Provided | 2026-06-05 | 2026-06-25 |
| CVE-2026-49246 json | Jellyfin is an open source self hosted media server. Prior to 10.11.10, a specifically crafted MKV file containing forged fil... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-48946 json | The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches... | Not Provided | 2026-06-25 | 2026-06-26 |
| CVE-2026-48944 json | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` ... | Not Provided | 2026-06-25 | 2026-06-25 |