PT-2026-104506

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce plugin for WordPress versions prior to 2.12.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. An attacker can inject arbitrary web scrip...

PT-2026-104549

Name of the Vulnerable Software and Affected Versions WP Visitor Statistics Real Time Traffic versions prior to 8.8 Description An unauthenticated attacker can perform a second-order SQL injection by submitting a crafted referrer URL to the 'wmcTrack' tracking endpoint. The application fails to...

CVE-2026-97341: Improper Neutralization of Input During Web Page Generation

The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2026-104581

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An authorization bypass exists in the sessions REST endpoint query operation. This issue allows users with delegated RealmAdmin privileges to list sessions across different realms by supplying a...

PT-2026-104579

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An open redirect issue exists where unauthenticated attackers can redirect users by providing an unverified id token hint to the '/oauth2/connect/endSession' endpoint. By specifying any realm client ...

PT-2026-104530

Name of the Vulnerable Software and Affected Versions TillKit WordPress plugin versions prior to 1.0.5 Description The plugin creates a privileged POS account upon activation that uses a hard-coded, publicly known PIN. The system does not require this PIN to be changed before use and authenticate...

PT-2026-104578

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An email content injection issue allows unauthenticated attackers to control the wording of notification emails. This is possible through the forgotPassword and register actions on the...

PT-2026-104486

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fieldsvalue' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-87091: Improper Neutralization of Input During Web Page Generation

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

PT-2026-104501

Name of the Vulnerable Software and Affected Versions Magic Tooltips For Contact Form 7 versions prior to 1.0.35 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts into pages that...

SUSE SLES15 Security Update : kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4415-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4415-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: -...

CVE-2026-95865: Improper Neutralization of Special Elements used in an SQL Command

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fieldsvalue' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 Combine CVE-2025-57819 injection SQL par requête empilée et CVE-2025-61678 téléchargement de fichier authentifié dans FreePBX Endpoint Manager pour réaliser une exécution de code à distance RCE. Pour usage éducatif uniquement. Références :...

CVE-2026-85706

CVE-2026-85706: неавторизованный обход пути в GitLab CE/EE CVE : CVE-2026-85706, CVSS 3.1 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Компонент : GitLab CE/EE Repository Commits API вариант body-upload в Workhorse Затронуто : 18.7 ≤ version 19.1.8, 19.2.0–19.2.5, 19.3.0–19.3.1 Исправлено : 19.1.8 /...

CVE-2026-105029 UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint

UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that allows authenticated customers to rate other customers' tickets. Attackers can supply arbitrary ticket IDs, which are loaded without an...

CVE-2026-105029 UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint

UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that allows authenticated customers to rate other customers' tickets. Attackers can supply arbitrary ticket IDs, which are loaded without an...

CVE-2026-105029

The UVdesk support-center-bundle version prior to 1.1.3.3 is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the rateTicket action of Controller/Ticket.php . Because the system fails to perform an ownership check, authenticated customers can supply arbitrary ticket I...

CVE-2026-105029 UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint

UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that allows authenticated customers to rate other customers' tickets. Attackers can supply arbitrary ticket IDs, which are loaded without an...

SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)

Security Advisory — SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU Bypass of CheckHostSSRF | Field | Value | |---|---| | Disclosed by | joysinleung [email protected] | | Report date | 2026-08-13 | | Product | SiYuan 思源笔记 — siyuan-note/siyuan | | Go module |...

GHSA-X8GV-G2G3-65FJ SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)

Security Advisory — SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU Bypass of CheckHostSSRF | Field | Value | |---|---| | Disclosed by | joysinleung [email protected] | | Report date | 2026-08-13 | | Product | SiYuan 思源笔记 — siyuan-note/siyuan | | Go module |...