Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 + CVE-2026-60137 — WP2Shell WordPress Core Pre-Au...

CVE-2026-14603

The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database...

Improper Authentication

Apache IoTDB is vulnerable to Improper Authentication. The vulnerability is due to insufficient session expiration in REST Basic Authentication, where stale cached credentials continue to be accepted, allowing attackers to replay captured credentials and bypass authentication...

CVE-2026-14603

The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database...

CVE-2026-12736

The WPify Woo plugin (WordPress) is vulnerable up to version 5.4.16 via SettingsApi::save_option() at POST /wp-json/wpify-woo/v1/option. The route forwards request-supplied options and data to update_option() without an allowlist or sanitization, while permission_callback checks only manage_wooco...

CVE-2026-12736

The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::saveoption REST route POST /wp-json/wpify-woo/v1/option passing the request-supplied 'option' and 'data' parameters directly to updateoption without a...

Apache Syncope permission granting and access control issues

Apache Syncope is an open-source identity management and governance system that primarily provides features for user management, permission control, and role assignment. Apache Syncope has a security vulnerability that arises from the improper validation of authorization for users who register or...

CVE-2026-14603: Improper Access Control

The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database...

PT-2026-67606

Summary The REST API user-update endpoint PUT/PATCH /api/v2/users/id and the V1 equivalent does not enforce two authorization rules that the web interface enforces. A user who holds the user edit others permission but is not a superuser can: 1. edit user accounts that belong to a superuser, and 2...

PT-2026-67628

Impact A builder-level user can make Budibase issue server-side HTTP requests to loopback or private-network targets by using DNS rebinding against two outbound fetch paths that are still not pinned to the validated DNS answer. The first path is OpenAPI query import. It validates the supplied...

PT-2026-67612

Summary Budibase attaches a REST datasource's stored credentials Bearer/Basic tokens and static headers to an outgoing request before it decides which host the request goes to, and never checks that the destination host matches the datasource. A query's request path can be pointed at any host via...

CVE-2026-49326: Missing Authorization

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

PT-2026-64312

Name of the Vulnerable Software and Affected Versions Apache HBase versions 3.0.0-alpha-1 through 3.0.0-beta-1 Apache HBase versions 2.6.0 through 2.6.5 Apache HBase versions 2.5.0 through 2.5.14 Apache HBase versions prior to 2.4.1 Description An authorization flaw exists in the thrift and rest...

PT-2026-76586

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.40.0 Description Budibase is an open-source low-code platform. A flaw in the REST datasource integration allows an authenticated user, such as a builder or tenant, to perform Server-Side Request Forgery SSRF via DN...

CVE-2026-17048: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only...

PT-2026-64244

The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database...

CVE-2026-15212

The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the AjaxService::verifyajaxrequest helper gating its wpverifynonce call behind the boolean option 'enablenoncecheck', which is absent from the default...

netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

REST Path Traversal Bypasses Token Redaction in netlicensing-mcp SummaryThe netlicensinggetproduct MCP tool in netlicensing-mcp interpolates a caller-controlled productnumber argument directly into a REST URL path without any validation. Passing ../token as the product number causes httpx to...

PYSEC-2026-3489 netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

REST Path Traversal Bypasses Token Redaction in netlicensing-mcp Summary The netlicensinggetproduct MCP tool in netlicensing-mcp interpolates a caller-controlled productnumber argument directly into a REST URL path without any validation. Passing ../token as the product number causes httpx to...

CVE-2026-16078

The WCPOS – Point of Sale POS plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 via the 'type' parameter parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to read the...