CVE index

Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions.

CVE-2026-39590 affects ThemeMove Atomlab. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39576 affects Elated-Themes SingleMalt. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39560 affects Select-Themes Hiroshi. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39559 affects codesupplyco Uppercase. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39556 affects Elated-Themes Konsept. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39523 affects Elated-Themes Solene Core. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39445 affects PressLayouts Alukas. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2026-39442 affects PressLayouts PressMart. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write. During Service Level Connection setup the HF sends AT+CIND=? and parses the AG's +CIND: response in cind_handle(), which assigns a per-entry counter index and calls cind_handle_values() for each list element. cind_handle_values() then wrote hf->ind_table[index] = i without verifying that index is within the 20-element int8_t ind_table[] array of struct bt_hfp_hf. Because the parser places no cap on the number of +CIND: list entries, a remote At...

Missing Authorization vulnerability in EMV JobBank allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobBank: from n/a through 1.2.3.

CVE-2025-69175 affects ThemeREX Line Agency. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2025-69174 affects ThemeREX Etude. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2025-69170 affects ThemeREX Eventicity. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVE-2025-69166 affects ThemeREX Gunslinger. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.