CVE-2026-11872 Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-11872

CVE-2026-11872 affects the Clever Mega Menu for Visual Composer WordPress plugin (

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

EUVD-2026-51936

The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate is a nonce that any logged-in user can read from a standard admin page. A subscriber-level user can therefore enable t...

PT-2026-67073

The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate is a nonce that any logged-in user can read from a standard admin page. A subscriber-level user can therefore enable t...

MINI-69GG-8458-24RF

Bulletin has no description...

MINI-2JPC-P5CV-GVF8

Bulletin has no description...

MINI-5X3J-FV32-R5GW

Bulletin has no description...

MINI-P4HX-GFWG-3CPC

Bulletin has no description...

MINI-MMGX-3X6W-28C5

Bulletin has no description...

MINI-WC6R-GPJM-3FP3

Bulletin has no description...

CGA-MC34-QCHR-QGJR

Bulletin has no description...

MINI-VH77-XCCW-8J73

Bulletin has no description...

MINI-VH5J-5R74-49CR

Bulletin has no description...

MINI-7CM2-V926-6QR2

Bulletin has no description...

MINI-PC6H-XRQ8-5JCH

Bulletin has no description...

MINI-W442-Q7XH-5Q9R

Bulletin has no description...

MINI-5P97-HPV4-RXPH

Bulletin has no description...

CVE-2026-64425

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

CVE-2026-64362 HID: lg-g15: cancel pending work on remove to fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...