MINI-FJ87-W8HF-FJPG

Bulletin has no description...

MINI-752G-W5MF-G56Q

Bulletin has no description...

PT-2026-73132

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

MINI-8RQ8-MF63-PPJW

Bulletin has no description...

MINI-QR54-9J4M-H8MG

Bulletin has no description...

MINI-MPWC-JRFW-F3MJ

Bulletin has no description...

MINI-QXFQ-JG4J-3526

Bulletin has no description...

MINI-WRRM-9F45-R9HH

Bulletin has no description...

MINI-2398-3WG6-H27P

Bulletin has no description...

MINI-25MR-QQMC-RQXM

Bulletin has no description...

MINI-2F5P-6G7P-JPQF

Bulletin has no description...

MINI-7R3W-WRMC-F54Q

Bulletin has no description...

MINI-R2G5-4QWH-4WF2

Bulletin has no description...

MINI-H439-9587-WGMF

Bulletin has no description...

MINI-XQGQ-3JC2-RWH3

Bulletin has no description...

MINI-95M9-MRP7-29W3

Bulletin has no description...

MINI-7F36-WP6C-H2G5

Bulletin has no description...

CVE-2026-73632

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

EUVD-2026-59606

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

CVE-2026-73632 Apache Struts: Shared serialization state in the JSON plugin

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...