CVE-2026-1750

creationtimestamp| type| source ---|---|--- 2026-02-15 07:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116073354277623527 2026-02-15 07:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meuxmgzeut2h 2026-02-16 23:04:38+00:00| seen|...

CVE-2026-1750

The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a missing capability check in the 'savecustomuserprofilefields' function. This makes it possible for authenticated attackers, with...

EUVD-2026-1750

The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headclass' parameter of the 'autogenmenu' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...