290725 matches found
CVE-2026-110653 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in th...
EUVD-2026-103216
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity REST / ordercomments checkout' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output...
CVE-2026-110653 Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in th...
CLSA-2026-1792201276 TuxCare security update for @babel/plugin-transform-exponentiation-operator (1 CVE)
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792201277 TuxCare security update for @babel/plugin-transform-exponentiation-operator (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792201268 TuxCare security update for @babel/plugin-transform-exponentiation-operator (1 CVE)
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792201267 TuxCare security update for @babel/plugin-transform-exponentiation-operator (1 CVE)
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792196728 TuxCare security update for @next/eslint-plugin-next (9 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...
CLSA-2026-1792196726 TuxCare security update for @next/eslint-plugin-next (13 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 13 CVEs. Fixed in 13.5.11-tuxcare.14...
CLSA-2026-1792196727 TuxCare security update for @next/eslint-plugin-next (9 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 14.2.35-tuxcare.5...
CLSA-2026-1792196725 TuxCare security update for @next/eslint-plugin-next (2 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 12.3.7-tuxcare.8...
PT-2026-116374
Name of the Vulnerable Software and Affected Versions Patreon WordPress plugin versions prior to 1.10.0 Description The plugin fails to perform authorization checks on certain functionalities. This allows unauthenticated users to enumerate the names of terms within any taxonomy, including...
PT-2026-116375
Name of the Vulnerable Software and Affected Versions Patreon WordPress versions prior to 1.10.0 Description The plugin fails to validate user-supplied redirect destinations before performing a redirection. This allows unauthenticated attackers to use a crafted link to redirect visitors to an...
PT-2026-116376
Name of the Vulnerable Software and Affected Versions Patreon WordPress versions prior to 1.10.0 Description The plugin fails to verify a nonce a unique token used to prevent replay attacks when connecting the site to a Patreon account. This allows an attacker to use Cross-Site Request Forgery...
PT-2026-116353
Name of the Vulnerable Software and Affected Versions LearnPress – WordPress LMS Plugin for Create and Sell Online Courses versions prior to 4.4.11 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions...
PT-2026-116199
Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.4.11 Description Insufficient input sanitization and output escaping allow for Stored Cross-Site Scripting. This occurs via the quantity parameter in the REST API and the order comments parameter during checkout...
CLSA-2026-1792194448 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792194449 TuxCare security update for @babel/plugin-transform-runtime (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...