Publish Advisories

GHSA-pp3q-3fph-xpqh
GHSA-3qgm-jcxp-m9m6
GHSA-723j-w27h-459f
GHSA-94rx-4fcc-c849
GHSA-98hx-rrj3-w3r4
GHSA-cgrc-pwqf-64v8
GHSA-h3qc-gf9h-42g6
GHSA-mw3g-2cmq-pj57
GHSA-p4fg-vw73-vr29
GHSA-qg48-mr48-98hv
GHSA-v33x-35cm-8gjc
GHSA-vxjv-c6cq-74m6

Author: advisory-database[bot]

advisories/unreviewed/2026/01/GHSA-pp3q-3fph-xpqh/GHSA-pp3q-3fph-xpqh.json

@@ -38,7 +38,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-369"
+      "CWE-369",
+      "CWE-639"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,

advisories/unreviewed/2026/02/GHSA-3qgm-jcxp-m9m6/GHSA-3qgm-jcxp-m9m6.json

@@ -45,7 +45,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-119"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-723j-w27h-459f/GHSA-723j-w27h-459f.json

@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "LOW",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-94rx-4fcc-c849/GHSA-94rx-4fcc-c849.json

@@ -41,7 +41,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-119"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-98hx-rrj3-w3r4/GHSA-98hx-rrj3-w3r4.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-98hx-rrj3-w3r4",
+  "modified": "2026-02-28T06:31:14Z",
+  "published": "2026-02-28T06:31:14Z",
+  "aliases": [
+    "CVE-2026-1542"
+  ],
+  "details": "The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1542"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/d6e3041f-62e8-49ba-8806-59a1c07ec43d"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-02-28T06:16:02Z"
+  }
+}

advisories/unreviewed/2026/02/GHSA-cgrc-pwqf-64v8/GHSA-cgrc-pwqf-64v8.json

@@ -45,7 +45,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-119"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-h3qc-gf9h-42g6/GHSA-h3qc-gf9h-42g6.json

@@ -45,7 +45,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-288"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-mw3g-2cmq-pj57/GHSA-mw3g-2cmq-pj57.json

@@ -37,7 +37,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-200"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-p4fg-vw73-vr29/GHSA-p4fg-vw73-vr29.json

@@ -41,7 +41,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-288"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-qg48-mr48-98hv/GHSA-qg48-mr48-98hv.json

@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-269"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,