CVE Vulnerabilities - 12 April 2026

A security weakness in the WP User Manager plugin for WordPress allows an attacker to upload any file, potentially leading to malicious code execution on a website. This could compromise sensitive dat...

An unauthenticated attacker can inject malicious code into WordPress plugins, potentially allowing them to gain control of the website. This vulnerability affects all WordPress sites using the File Ed...

An unpatched flaw in Oracle Java SE allows attackers to execute malicious code on a victim's system without needing a password. This could happen if a user visits a compromised website or opens a mali...

A vulnerability in the Ghostscript software allows attackers to execute malicious code on a victim's system by sending a specially crafted PDF file. This can potentially lead to unauthorized access to...