290683 matches found
WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.4 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Ekene Umegakwe in WordPress Plugin LatePoint versions = 5.7.4...
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8sexternal transferer can emit an empty...
GHSA-74W3-63XV-X9MV CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8sexternal transferer can emit an empty...
CVE-2026-77771
CVE-2026-77771 — miniOrange 2FA Free & Pro: 2FA Bypass via Session-Scoped OTP Lockout An authentication bypass in the miniOrange Two-Factor Authentication plugin for WordPress allows an attacker who already holds a victim's valid password to brute-force the second factor without limit, defeating...
CVE-2023-4634
CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...
CVE-2026-65540
CVE-2026-65540 Popup for CF7 with Sweet Alert Hello document.getElementById'csrf'.submit; 2. Log in to WordPress as an administrator 3. Visit the malicious page 4. Optional Navigate to http://TARGET/wp-admin/admin.php?page=cf7-simplepopup — confirm the Width field now contains...
CLSA-2026-1792162164 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792162162 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792162160 TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792162145 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792162144 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792162142 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792162141 TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792162120 TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792162118 TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792162117 TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)
TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792162097 TuxCare security update for @babel/plugin-transform-flow-strip-types (1 CVE)
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792162096 TuxCare security update for @babel/plugin-transform-flow-strip-types (1 CVE)
TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.18.9-tuxcare.3...