CVE-2025-15511 Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification

The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handlewebhook function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to modify WooCommerce order statuses by sending...

CVE-2025-15511 Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification

The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handlewebhook function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to modify WooCommerce order statuses by sending...

CVE-2025-15511

The CVE-2025-15511 entry concerns the WordPress Rupantorpay plugin. It states that all versions up to and including 2.0.0 are vulnerable due to a missing capability check in handle_webhook(), enabling unauthenticated attackers to modify WooCommerce order statuses via crafted requests to the WooCo...

CVE-2026-24865

creationtimestamp| type| source ---|---|--- 2026-01-28 05:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhkgjsoj32m...

WordPress Rupantorpay plugin <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification vulnerability

Missing Authorization to Unauthenticated Order Status Modification vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Rupantorpay versions = 2.0.0...

GHSA-2G5G-HCGH-Q3RP

creationtimestamp| type| source ---|---|--- 2026-01-28 01:18:00+00:00| seen| Telegram/Tu9CT238H1kzZfO9zD15YxuxrF9j4C4TXXwQT4shyPhf2w...

GHSA-9R3H-MPF8-25GJ

creationtimestamp| type| source ---|---|--- 2026-01-28 01:18:00+00:00| seen| Telegram/Tu9CT238H1kzZfO9zD15YxuxrF9j4C4TXXwQT4shyPhf2w...

GHSA-2X38-48VP-W23X

creationtimestamp| type| source ---|---|--- 2026-01-28 00:01:40+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115969785847265606...

PT-2026-5110

EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service that allows local attackers to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:Program Files x86EPSON P2BPrinter SoftwareStatus Monitor to inject malicious executables that...

CVE-2020-36975

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\ES60RPB.EXE' to...

CVE-2020-36975 EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\ES60RPB.EXE' to...

CVE-2020-36975

The CVE-2020-36975 entry affects EPSON Status Monitor 3, version 8.0, showing an unquoted service path in the EPW!3SSRP service executable C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE. This unquoted path condition allows a locally authenticated attacker to potentially execute arbitr...

EUVD-2020-30874

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\ES60RPB.EXE' to...

CVE-2020-36975 EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\ES60RPB.EXE' to...

CVE-2020-36975

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\ES60RPB.EXE' to...

CVE-2025-69050

creationtimestamp| type| source ---|---|--- 2026-01-27 17:25:57+00:00| seen| Telegram/zQovba3jq34R8mOIwo4UQbXIwilVvhjiGRRMMjnKXHFewE...

CVE-2025-59092

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

CVE-2025-26385

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-04 2026-01-30 11:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnaux72ld2t 2026-02-01 22:00:59+00:00| seen|...

CVE-2026-24814

creationtimestamp| type| source ---|---|--- 2026-01-27 09:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhnetjtz2c...

CVE-2026-24477

creationtimestamp| type| source ---|---|--- 2026-01-27 03:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdet5sfbzm2n 2026-01-29 02:12:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdjpm6pwfj2a 2026-03-17 06:30:09+00:00| confirmed|...