CVE-2026-77188

The Waitlist Woocommerce (Back in stock notifier) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.9.1 . The root cause is insufficient input sanitization and output escaping of the 'type' shortcode attribute . Because shortcode attribute v...

CVE-2026-116680

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.9.1...

CVE-2026-116680 Homebox generic notifier SSRF via HTTP redirect after URL validation

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

CVE-2026-116680

HomeBox , a home inventory and organization system, is vulnerable to Server-Side Request Forgery (SSRF) prior to version 0.27.0 . While the application validates generic notifier URLs using ValidateNotifierURL, the underlying shoutrrr component uses http.DefaultClient.Do without a CheckRedirect p...

CVE-2026-116680 Homebox generic notifier SSRF via HTTP redirect after URL validation

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

EUVD-2026-111277

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF

The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajaxblinks function which ultimately calls the checkurlstatuscode function. This makes it possible for unauthenticated attackers to make web requests to...

PT-2026-127182

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting

WordPress Post Status Notifier Lite plugin before 1.10.1 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

CVE-2026-114701

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

EUVD-2026-108082

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701

The xootix Waitlist Woocommerce ( Back in stock notifier ) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) . This issue affects versions up to and including 2.9.1 due to the improper neutralization of input during web page generation. While the documents confirm the existence ...

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.9.1...

PT-2026-121314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-90395

A flaw was found in the Linux kernel's isp1704charger driver. When the driver is removed, it unregisters the USB notifier and power supply without ensuring that all scheduled work has completed. This improper resource cleanup can lead to the power supply state being torn down while operations are...

CVE-2026-98624

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: hold nfnl mutex in event notifier We must serialize the release notifier and the config netlink function. A concurrent thread can issue close which can call the release function while unrelated socket...

CLSA-2024-1711026811 kernel: Fix of 11 CVEs

netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one CVE-2023-39197 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier CVE-2023-52449 - media: pvrusb2: fix use after free on context disconnection CVE-2023-52445 - net: prevent mss overflow in skbsegment...