CVE-2026-73395

Unauthenticated Insecure Direct Object References IDOR in Booking calendar, Appointment Booking System = 3.2.36 versions...

MINI-QJM2-H3FP-XCM8

Bulletin has no description...

MINI-37GG-24RH-P6P9

Bulletin has no description...

CVE-2026-66620

The WordPress OptionTree plugin (≤ 2.7.3) is vulnerable to PHP Object Injection via its Editor component. CVSS 7.2 (HIGH) reflects network attack vector, low complexity, and high impact across confidentiality, integrity, and availability, requiring attacker privileges. Exploitation details are no...

EUVD-2026-60895

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

MINI-3CR4-8JQH-5Q4V

Bulletin has no description...

MINI-XXWG-VW98-GMGF

Bulletin has no description...

MINI-99CP-6JR5-972F

Bulletin has no description...

MINI-H65R-R5X4-R88V

Bulletin has no description...

MINI-6QR2-7JQF-RXVM

Bulletin has no description...

MINI-XV7M-G9FR-5JCF

Bulletin has no description...

MINI-M8W3-C42P-6R23

Bulletin has no description...

MINI-FQWP-MX48-V99V

Bulletin has no description...

MINI-Q2Q7-4C62-W8J3

Bulletin has no description...

MINI-MPJ6-5Q2M-4WPH

Bulletin has no description...

MINI-GRXV-X2MH-7W2V

Bulletin has no description...

MINI-RPF8-3P88-66JQ

Bulletin has no description...

MINI-CRCJ-HP8H-W7CW

Bulletin has no description...

MINI-P38F-VCM7-8892

Bulletin has no description...

MINI-5X5G-6P72-JJHM

Bulletin has no description...