34675 matches found
CVE-2026-6709 Coinbase Commerce for Contact Form 7 <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7_api_key' Parameter
The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2. This is due to a missing capability check and missing nonce verification in the savesettings function, which is registered on the adminpostcccf7savesettings...
CVE-2026-6709: Missing Authorization
The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2. This is due to a missing capability check and missing nonce verification in the savesettings function, which is registered on the adminpostcccf7savesettings...
CLSA-2025-1742929277 Update of shim-signed
Add support for oraclelinux7...
CVE-2022-50960: Improper Neutralization of Input During Web Page Generation
WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interface. Attackers can inject malicious scripts through the page parameter in class-sms-log-display.php to execute arbitrary...
CVE-2026-0965 affecting package libssh for versions less than 0.10.6-7
CVE-2026-0965 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...
CVE-2026-0964 affecting package libssh for versions less than 0.10.6-7
CVE-2026-0964 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...
CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7
CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...
CVE-2026-39836
creationtimestamp| type| source ---|---|--- 2026-05-07 22:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7s2lbje2v 2026-05-08 12:01:27+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoo2vosj2d 2026-05-15 16:19:42+00:00| seen|...
CVE-2026-44263
creationtimestamp| type| source ---|---|--- 2026-05-07 17:40:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbr5wilyq2n...
CVE-2026-41484
creationtimestamp| type| source ---|---|--- 2026-05-07 02:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla6u4p7om2i...
CVE-2026-7925
creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260508...
Oracle Linux 7 : python (ELSA-2026-9614)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-9614 advisory. 2.7.5-94.0.7 - Fix for CVE-2026-4519 Orabug: 39243798 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...
PT-2026-36894
Conditional Fields for Contact Form 7 WordPress plugin through version 2.6.7 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hide hidden mail fields regex callback method reads an iteration count directly from user-supplied POST parameters...
CVE-2026-25863: Improper Validation of Specified Quantity in Input
Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hidehiddenmailfieldsregexcallback method reads an iteration count directly from user-supplied POST parameters without...
WordPress WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms plugin <= 1.7.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin CF7 WOW Styler versions = 1.7.0...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: krb5: krb5-devel-1.22.2-7.hum1 aarch64, x8664 krb5-libs-1.22.2-7.hum1 aarch64, x8664 krb5-pkinit-1.22.2-7.hum1 aarch64, x8664 krb5-server-1.22.2-7.hum1 aarch64, x8664 krb5-server-ldap-1.22.2-7.hu...
CLSA-2025-1742376604 Update of shim-signed
Add support for oraclelinux7...
CVE-2026-6409 affecting package protobuf for versions less than 25.3-7
CVE-2026-6409 affecting package protobuf for versions less than 25.3-7. A patched version of the package is available...
CVE-2026-5364: Unrestricted Upload of File with Dangerous Type
The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3. This is due to the plugin extracting the file extension before sanitization occurs and allowing the file type parameter to be controlled by the...