Oracle APEX (CVE-2026-60156) (July 2026 CPU)

The remote host is affected by a vulnerability in Oracle APEX component: General as referenced in the July 2026 Oracle Critical Patch Update CPU advisory. - Vulnerability in the Oracle APEX product component: General. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2026-60156

The CVE concerns Oracle APEX (General) with affected versions 24.1, 24.2, and 26.1. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise Oracle APEX and gain unauthorized read access to a subset of Oracle APEX data. CVSS 3.1 base score is 5.3 (confident...

CVE-2026-60156

...

WordPress AR For WordPress plugin <= 8.34 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abu Hurayra in WordPress Plugin AR For WordPress versions = 8.34...