{"items":[{"id":"CVE-2026-4128","published":"2026-04-22T07:45:35.777Z","updated":"2026-04-22T12:11:34.991Z","title":"TP Restore Categories And Taxonomies <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Taxonomy Deletion via 'tpmcattt_delete_term' AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"tplugins","product":"TP Restore Categories And Taxonomies","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2025-5092","published":"2025-11-20T06:38:41.693Z","updated":"2026-04-08T17:14:57.172Z","title":"Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library","severity":"MEDIUM","score":6.4,"vendor":"lightgalleryteam","product":"LightGallery WP","kev":false,"epss":0.00256,"kevAdded":null}]}