CGA-F8FR-G9GW-GWRH

Bulletin has no description...

MINI-FQXW-MRRQ-3Q23

Bulletin has no description...

MINI-V83P-6F35-RG6H

Bulletin has no description...

CVE-2026-73394

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

CVE-2026-73363

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...

CVE-2026-73385

Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...

EUVD-2026-62386

Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...

CVE-2026-73385

The WordPress Outranking Plugin Options plugin (versions ≤ 1.1.3) has an unauthenticated broken access control flaw (CVSS 7.5 HIGH), allowing remote attackers with no credentials to alter plugin settings and potentially inject malicious content. No patch version or exploit details are provided in...

CVE-2026-73385 WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...

CVE-2026-73363 WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...

CVE-2026-73363

CVE-2026-73363 is an unauthenticated Broken Access Control vulnerability in the WordPress plugin Taxi Booking Manager for WooCommerce (plugin slug: ecab-taxi-booking-manager ), affecting versions prior to 2.0.8 . The flaw allows a low-privileged user to perform unauthorized actions, resulting in ...

EUVD-2026-62383

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...

CVE-2026-73394

The WordPress Stitch Express plugin (versions ≤ 1.9.0) has an unauthenticated broken access control flaw exploitable over the network with no credentials (CVSS 7.5, HIGH), allowing unauthorised integrity changes; no patch version or exploit details are provided in the documents.

CVE-2026-73394 WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

EUVD-2026-62371

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Theme Koji versions = 2.2.1...

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screenshots, and activity logs created to track the status of the activity. "The...

CVE-2026-74382

A flaw was found in the Linux kernel's clsbpf component, which handles traffic control filtering. A local attacker could exploit this vulnerability by triggering a specific sequence of failures during an offload rollback operation. This leads to an unbounded recursion, causing a stack overflow an...

Security update for open-iscsi

This update for open-iscsi fixes the following issues: CVE-2026-44943: remote file-write as root via discovery bsc1268353. CVE-2026-44944: iscsiuio control-socket auth bypass bsc1268352. Changes for open-iscsi: Update to version 2.1.12.suse+0.8f77cf16: Preparing for version 2.1.12 536...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified several vulnerabilities in the Oracle Commerce Platform version 11.4.0. These vulnerabilities allow unauthorized attackers with network access to perform critical actions without authentication. This includes gaining unauthorized access to sensitive data, modifying, deleting...