CVE-2026-57620 in Exclusive Addons Elementor Plugin

Scope: Exclusive Addons Elementor: from n/a through 2.7.9.8.

Severity: High

Read More

Flowise – Authentication Bypass via Registration Endpoint (CVE-2025-71327)

Scope: Flowise, All Versions Lacking Registration Restrictions

Severity: Critical

 

Read More

parse-server – Supply Chain Incident (CVE-2021-47987)

Scope: parse-server, Git-Based Dependencies Referencing Unreviewed Tag v4.9.3

Severity: Medium

Read More

vLLM – Authentication Bypass via Host Header Manipulation (CVE-2026-48746)

Scope: vLLM AI Inference Deployments, All Vulnerable Versions

Severity: High

Read More

Claude Code – Indirect Prompt Injection and WebFetch Data Exfiltration (CVE-2026-54316)

Scope: Anthropic Claude Code Developer Tool, All Vulnerable Versions

Severity: High

Read More

n8n – Credential Vault Exfiltration via Endpoint Abuse (CVE-2026-56348)

Scope: n8n Workflow Automation Platform, All Vulnerable Versions

Severity: High

Read More