cardosource Payload CMS 3.72.0 - Blind SQL Injection
webapps multiple CVE-2026-25544

cardosource Langflow 1.8.4 - Path Traversal to Remote Code Execution
webapps multiple CVE-2026-5027

cardosource WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection
webapps multiple CVE-2026-3180

cardosource Drupal Core 10.5.5 - Error-Based SQL Injection
webapps php CVE-2026-9082

cardosource MikroORM 7.0.13 - SQL Injection
webapps multiple CVE-2026-44680

cardosource Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
webapps multiple CVE-2026-1830

cardosource MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
webapps php CVE-2026-42471