CVE-2026-98265

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. When handling audio devices configured for implicit feedback synchronization, the driver fails to ensure that the received packet count does not exceed the pre-allocated buffer capacity. An attacker...

EUVD-2026-96461

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

CVE-2026-62022

The Tonda Membership WordPress plugin versions

CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

CVE-2026-39801

The WordPress AIWU plugin (versions

EUVD-2026-96534

Subscriber Privilege Escalation in AIWU = 1.5.9 versions...

CVE-2026-39801 WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in AIWU = 1.5.9 versions...

CVE-2026-96341

Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-106610

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

CVE-2026-98260

A flaw was found in the Linux kernel. When a multi-threaded program sets up a per-thread timer and executes a new program that subsequently fails during startup, the kernel can free timer memory while it remains referenced in an active queue. A local user could exploit this vulnerability to trigg...

CVE-2026-98258

A flaw was found in the Linux kernel's POSIX CPU timer subsystem. A race condition can occur when modifying or deleting a timer concurrently with its expiration handling, allowing the timer to be freed while still queued on an active expiry list. A local user could exploit this use-after-free UAF...

CVE-2026-98256

A flaw was found in the Linux kernel's signal handling subsystem. A race condition occurs during process execution when managing pending timer signals, allowing the system to reference memory after it has been released. A local attacker could exploit this use-after-free flaw to achieve privilege...

EUVD-2026-96405

Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-96341

The WPMU DEV Forminator WordPress plugin (versions up to and including 1.57.3 ) is vulnerable to an Incorrect Privilege Assignment flaw (CWE-266). This vulnerability allows for Privilege Escalation , potentially enabling an attacker to gain unauthorized elevated permissions within the application...

CVE-2026-96341 WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

EUVD-2026-96404

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

CVE-2026-106610

The miniOrange OTP Verification WordPress plugin (versions

CVE-2026-106608

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2...

CVE-2026-106608

The Automattic WooCommerce plugin (versions 9.8.0 through 11.1.2 ) is affected by an Incorrect Privilege Assignment vulnerability. This flaw allows for Privilege Escalation , specifically impacting users with Shop Manager+ permissions. The vulnerability allows for unauthorized elevation of privil...