26744 matches found
CVE-2026-2811
creationtimestamp| type| source ---|---|--- 2026-09-02 16:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdkyq6oplr7dl...
GHSA-8423-8FGW-73VQ
creationtimestamp| type| source ---|---|--- 2026-09-02 14:12:39+00:00| seen| https://gist.github.com/alon710/6ddd193ef693b085524dc4da97851f2c...
CVE-2026-76757 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...
CVE-2026-14199
creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...
ROOT-OS-DEBIAN-11-CVE-2026-34545 CVE-2026-34545 in openexr - Patched by Root
Root has patched CVE-2026-34545 in the openexr package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-78657
creationtimestamp| type| source ---|---|--- 2026-09-02 06:56:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ejhs4maroptlv 2026-09-02 07:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujei2lwul2s 2026-09-02 08:07:11+00:00| seen|...
CVE-2026-81426
The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...
CVE-2026-81427
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...
CVE-2026-81426
The WC Vendors WordPress plugin, in versions prior to 2.7.2.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF protection on specific front-end order shipment status actions. This flaw could allow an attacker to force a logged-in vendor to modify the...
CVE-2026-81426 WC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRF
The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...
CVE-2026-81427 WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...
EUVD-2026-69854
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...
EUVD-2026-69853
The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...
WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change vulnerability
Vendor+ Cross-Vendor Order Shipment Status Change vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...
CVE-2026-81427 WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...
WordPress WC Vendors plugin < 2.7.2.1 - Order Shipment Status Change vulnerability
Order Shipment Status Change vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...
CVE-2026-81427
The WC Vendors WordPress plugin (versions before 2.7.2.1 ) contains a Missing Authorization vulnerability. The plugin fails to verify that a vendor owns the referenced order when submitting a shipment status change from the front-end. This allows any authenticated vendor to modify another vendor'...
EUVD-2026-69850
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished draft, pending and private...
CVE-2026-69664
creationtimestamp| type| source ---|---|--- 2026-09-02 05:18:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117199752202887468 2026-09-02 12:45:29+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...