CVE-2026-18723

creationtimestamp| type| source ---|---|--- 2026-08-04 08:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18723...

CVE-2026-42169

creationtimestamp| type| source ---|---|--- 2026-08-04 08:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-42169...

CVE-2026-14818

creationtimestamp| type| source ---|---|--- 2026-08-04 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-14818...

CVE-2026-67243

creationtimestamp| type| source ---|---|--- 2026-08-04 04:45:03+00:00| seen| https://jvn.jp/en/jp/JVN52865575 2026-08-04 10:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nwyslimqo2fr...

CVE-2026-69240

creationtimestamp| type| source ---|---|--- 2026-08-03 21:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fkh4ivf2h 2026-08-03 22:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7iowh6z32g 2026-08-03 22:35:08+00:00|...

CVE-2025-40934

creationtimestamp| type| source ---|---|--- 2026-08-03 20:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18568...

CVE-2026-18568

creationtimestamp| type| source ---|---|--- 2026-08-03 20:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18568...

CVE-2026-12860

creationtimestamp| type| source ---|---|--- 2026-08-03 11:46:51+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12860...

CVE-2026-14682

creationtimestamp| type| source ---|---|--- 2026-08-03 11:23:56+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-14682...

CVE-2026-13506

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-13506...

CVE-2026-12817

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:42+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12817...

CVE-2026-12852

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12852...

CVE-2026-12802

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:37+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12802...

CVE-2026-15206

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-15206 SMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-Mobile

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-15206

CVE-2026-15206 affects the SMS Alert WordPress plugin (before 3.9.8). The vulnerability arises because the plugin does not bind the mobile verified session flag to the actually verified phone number. After an attacker verifies an OTP on their own number, the signup/login handler reads an attacker...

EUVD-2026-51933

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-15206

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-55825

creationtimestamp| type| source ---|---|--- 2026-08-01 00:15:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-55825...

CVE-2026-38711

creationtimestamp| type| source ---|---|--- 2026-08-01 00:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-38711...