WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin WooCommerce Product Stock Alert versions = 3.0.6...

CVE-2026-55511

creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:06+00:00| seen| https://t.me/GithubRedTeam/93447 2026-07-16 19:00:06+00:00| seen| Telegram/rNnuPZSkZWDVpEPnyDrVrJ0tqHAdHjPuF4Jq-SaqH-76iI 2026-07-16 19:00:07+00:00| seen| Telegram/K7c5CNbbPswTRSTuPJght71PDUsbT0WBZTkPH1O8-oYBF8 2026-07-1...

CVE-2026-48253

creationtimestamp| type| source ---|---|--- 2026-07-15 21:18:13+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpniafsge2f...

CVE-2026-53516

creationtimestamp| type| source ---|---|--- 2026-07-15 19:08:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpgag62su2u 2026-07-22 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mra4wca4cg2s...

CVE-2026-62378

creationtimestamp| type| source ---|---|--- 2026-07-15 17:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o 2026-07-15 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e 2026-07-15 19:12:44+00:00| seen|...

CVE-2026-56699

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Per Wazuh's Security Policy, vulnerabilities affecting only non-GA versions are not eligible for a CVE ID...

CVE-2026-56699

Wazuh Manager before 5.0.0-beta3 has a vulnerability where the DataValue.index field is not escaped when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed und...

CVE-2026-56699

...

CVE-2026-48322

creationtimestamp| type| source ---|---|--- 2026-07-14 23:15:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndlgi7gn24 2026-07-14 23:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndm2hgox2b 2026-07-16 04:37:06+00:00| seen|...

CVE-2026-15265

creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116919187325665815 2026-07-14 16:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmjdp3ee24 2026-07-14 16:28:06+00:00| seen|...

CVE-2026-57698

creationtimestamp| type| source ---|---|--- 2026-07-14 01:36:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2xngiqm22...

CVE-2026-57800

creationtimestamp| type| source ---|---|--- 2026-07-13 22:18:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkpvxla5u2d 2026-07-16 08:11:51+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqryzkfi72p...

CVE-2026-52101

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-15 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92641 2026-07-15 15:42:06+00:00| seen|...

CVE-2026-62242

creationtimestamp| type| source ---|---|--- 2026-07-13 21:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqko3zv2pr27...

CERTFR-2026-CTI-004

creationtimestamp| type| source ---|---|--- 2026-07-13 09:25:58+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116911948082559856...

CVE-2026-15528

creationtimestamp| type| source ---|---|--- 2026-07-13 07:51:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj7gytgpj2e 2026-07-13 08:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15528 2026-07-13 21:23:04+00:00| seen|...

CVE-2026-15526

creationtimestamp| type| source ---|---|--- 2026-07-13 07:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj762fozp2w 2026-07-13 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15526...

CVE-2026-12397

creationtimestamp| type| source ---|---|--- 2026-07-13 07:37:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6ostdds2z...

CVE-2026-12582

creationtimestamp| type| source ---|---|--- 2026-07-13 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116911494012539173 2026-07-13 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqj6cbiqal2d 2026-07-13 07:38:06+00:00| seen|...

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities KEV catalog, following reports of zero-day exploitation in the wild. The vulnerabilities, both...