WordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Aqua versions = 5.1.2...

CVE-2026-5524

creationtimestamp| type| source ---|---|--- 2026-07-02 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116850624546842014 2026-07-02 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpo5c24aet2x 2026-07-02 20:00:44+00:00| seen|...

CVE-2026-54430

creationtimestamp| type| source ---|---|--- 2026-07-02 13:15:02+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-54430 2026-07-02 23:17:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp62olsut2i 2026-07-03 03:29:23+00:00| seen|...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net

Summary Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net. CVE-2026-33814 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loo...

CVE-2026-58653 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update

PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...

ROOT-APP-GOBINARY-CVE-2026-53492 CVE-2026-53492 in rootio-github.com/containerd/containerd/v2 - Patched by Root

Root has patched CVE-2026-53492 in the rootio-github.com/containerd/containerd/v2 package for Root:Go. Multiple fixed versions available...

CVE-2026-57746

Subscriber Broken Access Control in Booked = 3.0.0 versions...

CVE-2026-57689

Subscriber Broken Access Control in Werkstatt = 4.7.2 versions...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libtiff: libtiff-4.7.1-2.4.hum1 aarch64, x8664 libtiff-devel-4.7.1-2.4.hum1 aarch64, x8664 libtiff-static-4.7.1-2.4.hum1 aarch64, x8664 libtiff-tools-4.7.1-2.4.hum1 aarch64, x8664...

CVE-2026-57762

creationtimestamp| type| source ---|---|--- 2026-07-02 11:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnxz3twfs2o 2026-07-02 16:02:49+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpofscccbl2m 2026-07-03 00:45:10+00:00| seen|...

CVE-2026-57748

creationtimestamp| type| source ---|---|--- 2026-07-02 11:52:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnxtbjlii2z 2026-07-03 00:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcsuealw2b...

CVE-2026-57752

Contributor SQL Injection in iNET Webkit 1.2.4 versions...

CVE-2026-57730

CVE-2026-57730 concerns the WordPress Flatsome theme (

CVE-2026-57685

CVE-2026-57685: A Broken Access Control vulnerability exists in WordPress Martfury - WooCommerce Marketplace Theme (versions

CVE-2026-9145

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Arbitrary File Copy via the createentryel function in versions up to, and including, 1.5.1. The function reads rawvalue from Elementor Pro's FormRecord object for upload-type fields and passes it...

CVE-2026-34096

creationtimestamp| type| source ---|---|--- 2026-07-02 09:32:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpyymgeu2r...

CVE-2026-13789

creationtimestamp| type| source ---|---|--- 2026-07-02 09:19:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpbyrfop2t 2026-07-03 07:31:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzph3j3t2d 2026-07-07 21:53:57+00:00| seen|...

WordPress SEOWP theme <= 3.12.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by adhikara13 in WordPress Theme SEOWP versions = 3.12.2...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the beforerequest handler in the trace API endpoints. An authenticated attacker can bypass access controls by sending trace read, search, delete, update, linking, or assessment requests for experiments they do...

CVE-2026-14412

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:28:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohapohdu2y 2026-07-03 19:57:15+00:00| seen|...