CVE Vulnerabilities - 11 July 2026

PraisonAI versions prior to 1.6.78 are at risk of attackers executing malicious code on the host system. This is due to a lack of validation and restrictions on Python code generated by the Large Lang...

The RSFiles extension in Joomla allows unauthorized users to upload any type of file, including executable files. This can lead to hackers gaining full control over the website. Update to the latest v...

PraisonAI's AICoder component has a security flaw that allows attackers to write files anywhere on the system and run commands with high-level permissions through the chat interface. This means sensit...

PraisonAI versions prior to 4.6.78 are at risk of SQL injection attacks. An attacker can manipulate the dimension value passed to the database, potentially executing malicious SQL commands. To protect...

PraisonAI's knowledge-store in versions before 4.6.78 fails to check user input, allowing malicious users to inject SQL or Cassandra Query Language (CQL) code. This could potentially allow them to acc...

The rootio-pyOpenSSL package allows unauthorized access to sensitive data. This is a serious security risk because attackers could potentially steal or manipulate confidential information. Root has re...

PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attacker...

ImageMagick, a popular image processing software, has a security issue that could allow attackers to access sensitive information. This issue affects versions of ImageMagick prior to 7.1.2-19. To stay...

A critical vulnerability in the Debian Linux kernel allows an attacker with local access to gain elevated privileges on a system. This can lead to unauthorized access to sensitive data and system cont...

The Joomla Phoca Downloads extension's RSFiles component has a security issue that allows a registered user to upload malicious files. This could allow an attacker to take full control of the website,...

The Genolve plugin for WordPress allows attackers with Contributor-level access to modify certain settings, potentially enabling user registration and giving attackers administrator privileges. This a...

The Code Engine plugin for WordPress allows authenticated users with Contributor-level access to run malicious code on the server. This can lead to unauthorized actions and data breaches. Update to ve...

A security issue in Essential Addons for Elementor affects WordPress sites. If an attacker with some level of access logs in, they can steal the password of the site administrator. To stay safe, updat...

The Swiss Toolkit For WP plugin for WordPress has a security flaw that allows attackers to upload any type of file on a site, potentially allowing them to execute malicious code. This affects all vers...

A security flaw in the WordPress Simple JWT Login Plugin allows attackers to bypass authentication and gain administrator privileges. This affects all versions of the plugin up to 3.6.6. To stay secur...

The WP Ultimate CSV Importer plugin for WordPress has a security flaw that allows attackers with basic access to run malicious code on your website. This means they can potentially steal data, delete ...

The WP Grid Builder plugin for WordPress allows attackers with Subscriber-level access to gain Administrator privileges. This is a serious security risk, as it could allow unauthorized users to make c...

PraisonAI, a chat software, has a default setting that lets anyone access its data without a password. This means that hackers can read and manipulate chat conversations and system prompts. To fix thi...

PraisonAI versions before 1.6.78 contain a security flaw that could allow an attacker to access internal services within your organization. This is a serious issue because it could allow an attacker t...

PraisonAI AgentMail versions before 4.6.78 have a security issue that lets attackers send fake emails using other people's email addresses. This can be exploited by sending a special type of message t...

This update addresses multiple security vulnerabilities in the Linux kernel, which could allow attackers to access sensitive information, escalate privileges, or cause a system crash. Affected systems...

If not updated, Microsoft Edge users may be at risk of hackers executing malicious code on their devices without permission. This is a serious security risk because it allows attackers to take control...

If you use Grav before version 2.0.4, an attacker can see information about your server without needing a password. This could help the attacker figure out how to target your specific setup and potent...

PraisonAI versions prior to 4.6.78 are not blocking high-risk threats as intended, allowing attackers to potentially extract sensitive information or execute unauthorized actions. This could lead to s...

Capgo versions before 12.128.2 allow attackers to retrieve sensitive information about API keys without authentication. This could lead to unauthorized access to user data or systems. Update to versio...