CVE-2026-65540

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

EUVD-2026-48193

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-59540 WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-59540

The CVE concerns WordPress plugin SMS Alert Order Notifications, affected in versions

CVE-2026-59540 WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-15015

creationtimestamp| type| source ---|---|--- 2026-07-23 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968824938837459 2026-07-23 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i 2026-07-23 13:58:05+00:00| seen|...

WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by testoun in WordPress Plugin Popup for CF7 with Sweet Alert versions = 1.6.5...

CVE-2026-65540: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CVE-2026-61945: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...

CVE-2026-59540: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

PT-2026-63954

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...

PT-2026-63951

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CGA-6R42-76XR-WJ7W

Bulletin has no description...

CGA-6GPJ-CX7R-432J

Bulletin has no description...

Malicious Package

Overview kijai is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview calvora is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CERTFR-2026-ALE-008

creationtimestamp| type| source ---|---|--- 2026-07-22 15:03:13+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116964235036563174...

WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Taylsec in WordPress Plugin SMS Alert Order Notifications versions = 3.9.6...

BELL-CVE-2026-64043

Bulletin has no description...

CVE-2026-16366

creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:14+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqqzlx2z2z...