CVE-2026-0929

The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...

CVE-2026-0929 RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation

The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...

CVE-2026-0929

The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...

CVE-2026-0929

The RegistrationMagic WordPress plugin versions prior to 6.0.7.2 is vulnerable to a missing authorization flaw. Due to improper capability checks , users with subscriber level permissions or higher can bypass intended restrictions to create forms on the site. No specific exploit links or patch ve...

CVE-2026-0929 RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation

The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...

CVE-2026-26368

creationtimestamp| type| source ---|---|--- 2026-02-16 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116078072833203160 2026-02-16 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mex2o6xnnc2m 2026-02-16 22:38:14+00:00| seen|...

CVE-2026-2523

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smfgnhandlecreatepdpcontextrequest of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-2523 Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smfgnhandlecreatepdpcontextrequest of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now...

PT-2026-8313

The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...

WordPress plugin RegistrationMagic 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-2462

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-26369

creationtimestamp| type| source ---|---|--- 2026-02-15 23:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116077246133807686 2026-02-15 23:30:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mewowaxbxu2h 2026-02-16 15:00:19+00:00| seen|...

CVE-2026-2550

creationtimestamp| type| source ---|---|--- 2026-02-15 18:20:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116076028593114133 2026-02-16 10:30:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116079842760845874 2026-02-16 10:30:38+00:00| seen|...

CVE-2025-69633

creationtimestamp| type| source ---|---|--- 2026-02-15 02:27:57+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/321 2026-02-17 16:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xtwdib52c...

CVE-2025-71220

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

CVE-2025-71220

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

CVE-2026-23123

In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize srcnode and dstnode to empty strings The debugfscreatestr API assumes that the string pointer is either NULL or points to valid kmalloc memory. Leaving the pointer uninitialized can cause problem...

CVE-2026-1843

creationtimestamp| type| source ---|---|--- 2026-02-14 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a 2026-02-14 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116068163886097864...

CVE-2026-2469

creationtimestamp| type| source ---|---|--- 2026-02-14 07:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mesh67myzn27 2026-02-17 17:10:31+00:00| seen| https://gist.github.com/alon710/d45dbb1daa1ba15aaeff33353e6910aa...

CVE-2026-26056

Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...