CVE-2026-108486 WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0...

EUVD-2026-97721

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

CVE-2026-107418

The Booktics WordPress plugin (versions ≤ 1.0.28 ) is vulnerable to a Broken Access Control issue. This vulnerability stems from Missing Authorization , which allows attackers to exploit Incorrectly Configured Access Control Security Levels . The impact involves unauthorized access to functionali...

CVE-2026-107418 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Andrei in WordPress Plugin Forminator versions = 1.58.0...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Booktics versions = 1.0.28...

EUVD-2026-97577

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...

CVE-2026-108475

The VideoWhisper.com Broadcast Live Video WordPress plugin (versions

CVE-2026-108475 WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...

EUVD-2026-97576

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...

CVE-2026-108476

The WordPress Paid Videochat Turnkey Site plugin (ppv-live-webcams) versions

CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...

WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...

WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...

EUVD-2026-97560

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

CVE-2026-108477

The Booktics WordPress plugin (versions up to and including 1.0.28 ) is vulnerable to a Broken Access Control flaw (CWE-862). The issue stems from incorrectly configured access control security levels , which results in a missing authorization vulnerability. This allows an attacker to exploit the...

CVE-2026-108477 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

Malware in @zanta/baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

uboatdemo

uboatdemo A demo server for CVE-2016-3955 UBOAT Performs Linux heap buffer overflow, when USB/IP client begins sending control URBs. Building The server is a standard simple Go program. You can build it the usual way assuming you have Go setup and configured according to official instructions wit...

CVE-2026-81856

A flaw was found in hex. A remote attacker can inject unescaped terminal control sequences into the output of package manager commands by publishing a package with crafted metadata or serving hostile repository responses. When a user inspects package details, searches for packages, or views error...