WordPress JS Help Desk plugin < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability

Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability discovered by Shivamani Vastrala in WordPress Plugin JS Help Desk versions 3.1.4...

PT-2026-67808

Name of the Vulnerable Software and Affected Versions Zammad version 7.1.0 Description An authenticated improper authorization issue exists in the ticket article attachment cloning endpoint. Improper authorization occurs when a system fails to properly verify if a user has the necessary permissio...

sg3_utils security, bug fix, and enhancement update

1.48-7.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188123...

CVE-2026-13229: Missing Authorization

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...

Improper Check for Unusual or Exceptional Conditions

Overview org.webjars.npm:socket.io-parser is a socket.io protocol parser Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via attachment handling. An attacker can cause the server to exhaust memory resources by sending specially crafted...

CVE-2026-69185

Technical details describing affected product versions, root cause, and remediation are not publicly available in the provided documents; monitor for updates.

EUVD-2026-52410

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory...

io.github.dawncord:dawncord (>=1.0.0, <=1.4.0), io.github.dimas4ek:dawncord (1.0.0) +4 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcmail-jdk15to18 (>=1.75, <=1.78.1)

org.bouncycastle:bcmail-jdk15to18 MAVEN version =1.75, =1.0.0, =1.3.12, =2.12.0 Source cves: CVE-2026-59641 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512863...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin versions before 2.3.3 is vulnerable to an unauthenticated arbitrary media download . The root cause is a missing authorization check when streaming media library files, which allows attackers to download any attachment—including private or u...

CVE-2026-16285 WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285 WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

EUVD-2026-51945

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

WordPress Product Attachment for WooCommerce plugin < 2.3.3 - Unauthenticated Arbitrary Media Download vulnerability

Unauthenticated Arbitrary Media Download vulnerability discovered by kevin@OPCIA in WordPress Plugin WooCommerce Product Attachment versions 2.3.3...

WordPress Meta Box plugin < 5.13.1 - Contributor+ Arbitrary Attachment Deletion vulnerability

Contributor+ Arbitrary Attachment Deletion vulnerability discovered by Duy in WordPress Plugin Meta Box – WordPress Custom Fields Framework versions 5.13.1...

EUVD-2026-51935

The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the supplied attachment before deleting it, allowing users with a low-privilege role such as Contributor to permanently delete arbitrary media attachments belonging to other users...

CVE-2026-16285: Missing Authorization

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

PT-2026-67105

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-18352

The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...