CVE-2026-26168

creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:06:04+00:00| seen| Telegram/6H1w5-bLeWYzYRdx544J8dc0hwyze4yf2jsyFR3frxscsI 2026-04-14 20:06:26+00:00| seen|...

CVE-2026-27914

creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:08:37+00:00| seen| Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8 2026-04-14 20:08:56+00:00| seen|...

CVE-2026-32167

creationtimestamp| type| source ---|---|--- 2026-04-14 12:24:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0118 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-15 13:50:12+00:00| seen|...

CVE-2026-33120

creationtimestamp| type| source ---|---|--- 2026-04-14 12:24:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0118 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 19:01:05+00:00| seen|...

CVE-2026-32171

creationtimestamp| type| source ---|---|--- 2026-04-14 12:23:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0117 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:14:35+00:00| seen|...

CVE-2026-32184

creationtimestamp| type| source ---|---|--- 2026-04-14 12:23:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0117 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:14:46+00:00| seen|...

CVE-2026-33115

creationtimestamp| type| source ---|---|--- 2026-04-14 12:20:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0116 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 19:02:07+00:00| seen|...

CVE-2026-33822

creationtimestamp| type| source ---|---|--- 2026-04-14 12:20:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0116 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:35:15+00:00| seen|...

CVE-2026-32178

creationtimestamp| type| source ---|---|--- 2026-04-14 12:18:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0114 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:14:35+00:00| seen|...

CVE-2026-33116

creationtimestamp| type| source ---|---|--- 2026-04-14 12:18:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0114 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 19:17:10+00:00| seen|...

CVE-2026-26143

creationtimestamp| type| source ---|---|--- 2026-04-14 12:18:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0114 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:04:25+00:00| seen|...

CVE-2026-33824

creationtimestamp| type| source ---|---|--- 2026-04-14 11:45:03+00:00| seen| https://nsm.no/fagomrader/digital-sikkerhet/nasjonalt-cybersikkerhetssenter/varsler-fra-nsm/microsoft-patchetirsdag-april 2026-04-14 15:49:19+00:00| seen|...

WordPress Customer Reviews for WooCommerce plugin <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter vulnerability

Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter vulnerability discovered by kai63001 in WordPress Plugin Customer Reviews for WooCommerce versions = 5.103.0...

cyber-punk

Cyber Punk Security Vulnerability Scanner A Claude Code plu...

CVE-2026-4664

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0. This is due to the createreviewpermissionscheck function comparing the user-supplied key parameter against the order's ivolesecretkey meta value using...

CVE-2026-4664

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0. This is due to the createreviewpermissionscheck function comparing the user-supplied key parameter against the order's ivolesecretkey meta value using...

CVE-2026-4664 Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0. This is due to the createreviewpermissionscheck function comparing the user-supplied key parameter against the order's ivolesecretkey meta value using...

CVE-2026-4664

CVE-2026-4664 affects the WordPress plugin “Customer Reviews for WooCommerce” up to version 5.103.0. The vulnerability is an unauthenticated authentication bypass in create_review_permissions_check(), which compares the user-supplied key against the order’s ivole_secret_key meta using strict equa...

PT-2026-31850

Name of the Vulnerable Software and Affected Versions Customer Reviews for WooCommerce plugin for WordPress versions up to and including 5.103.0 Description The Customer Reviews for WooCommerce plugin for WordPress is susceptible to authentication bypass. This occurs because the create review...

EUVD-2023-60552

Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the reviewid URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enablin...