CVE-2026-13736

CVE-2026-13736: NewPath WildApricotPress Add-on – Member Directory = 1.0.0 — Divulgación no autenticada de PII de miembros a través de la API REST 📖 Resumen del Aviso CVE-2026-13736 es una vulnerabilidad de divulgación no autenticada de Información Personal Identificable PII de miembros que afect...

WordPress Rox Appointment Booking plugin < 1.2.8 - Unauthenticated Staff PII Disclosure vulnerability

Unauthenticated Staff PII Disclosure vulnerability discovered by Pedro Pinho in WordPress Plugin Rox Appointment Booking Appointment Booking Scheduling Solution versions 1.2.8...

CVE-2026-80339 Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay

The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the billing details of any order, together with the secret that...