CGA-J784-RVX7-WJQX

Bulletin has no description...

CGA-H3MH-F5F8-47WQ

Bulletin has no description...

CGA-3PHJ-4PWP-FRP9

Bulletin has no description...

CGA-6MP3-6RX3-PRRV

Bulletin has no description...

CGA-R782-9386-Q4V6

Bulletin has no description...

CGA-25W3-HVJX-7P87

Bulletin has no description...

CGA-WG5R-858V-8XRJ

Bulletin has no description...

CGA-6W3J-F3C8-6HVM

Bulletin has no description...

CGA-W9VR-9Q33-F5C5

Bulletin has no description...

CVE-2026-13228 LatePoint <= 5.6.3 - Authenticated (Custom+) Privilege Escalation to Administrator via 'order[customer_id]' Parameter

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 5.6.3 This is due to an Insecure Direct Object Reference IDOR in the createorupdate function of OsOrdersController, whi...

CVE-2026-13228

The vulnerability CVE-2026-13228 affects the LatePoint – Calendar Booking Plugin for Appointments and Events (WordPress). An Insecure Direct Object Reference (IDOR) in OsOrdersController.create_or_update enables an authenticated Agent (low privileges) to specify an arbitrary order[customer_id] an...

CGA-RRV5-29V9-2243

Bulletin has no description...

CGA-QF7H-8G4Q-HGH9

Bulletin has no description...

CGA-JJJX-R7M6-9WGP

Bulletin has no description...

CVE-2026-10538

creationtimestamp| type| source ---|---|--- 2026-07-01 09:17:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6peyfw52b 2026-07-01 09:26:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpl762ata52k...

CVE-2026-56016

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...

CVE-2026-10096

The Qi Blocks WordPress plugin is vulnerable to Insecure Direct Object Reference in all versions up to and including 1.4.9 via the page_id parameter. Authenticated users with author-level access can modify stored Qi Blocks styles on arbitrary posts, templates, or widgets, including site-wide surf...

CVE-2026-56016

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...

CVE-2026-56016

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...

CVE-2026-56016

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generateid method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand function. All three are predictable, low-entropy sources: the PID i...