EUVD-2026-55017

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenticated users to create completed payment records against arbitrary bookings and falsely mark them as paid...

CVE-2026-15237 Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenticated users to create completed payment records against arbitrary bookings and falsely mark them as paid...

CVE-2026-16257 Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...

EUVD-2026-55037

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...

CVE-2026-16257

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...

CVE-2026-16257 Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...

CVE-2026-64665

creationtimestamp| type| source ---|---|--- 2026-08-10 01:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msovko4fac2t...

PT-2026-69975

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.111.0 ERPNext versions prior to 16.22.0 Description The add ac function in erpnext/accounts/utils.py accepts the ignore permissions argument without enforcing the required Account create permission. This allows an...

PT-2026-69818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/irdma component where a user can trigger a null pointer dereference during Queue Pair QP creation. This occurs because the system only attempts to populate th...

CVE-2026-18786: Improper Authentication

The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible f...

PT-2026-81152

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.59 Description GitPython fails to include the --separate-git-dir flag in its unsafe git clone options. This allows an attacker to provide a separate git dir parameter to the Repo.clone from or Repo.clone...

Metabase SQL Injection

The vulnerability of the application software interface for password reset, data visualization, and report creation in the Metabase tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

CVE-2026-19370

creationtimestamp| type| source ---|---|--- 2026-08-09 22:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jea32iuljgabn...

CVE-2026-19363

creationtimestamp| type| source ---|---|--- 2026-08-09 18:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3qfltwirughs3...

CVE-2026-67622

creationtimestamp| type| source ---|---|--- 2026-08-09 16:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnxegt2qg2h 2026-08-10 17:18:10+00:00| seen| https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649...

CVE-2026-19353

creationtimestamp| type| source ---|---|--- 2026-08-09 14:52:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6xlhftogh2yzv...

CVE-2026-15153

creationtimestamp| type| source ---|---|--- 2026-08-09 14:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnrkhs5la26...

CVE-2026-19351

creationtimestamp| type| source ---|---|--- 2026-08-09 12:52:41+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msnmvbvrda2j 2026-08-10 11:39:42+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mspzbq3juj2w...

CVE-2026-10595

creationtimestamp| type| source ---|---|--- 2026-08-09 05:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmsidmgcp2w 2026-08-10 12:13:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msq36grg2f2m 2026-08-10 12:13:42+00:00| seen|...

GHSA-HHV7-P4PG-WM6P

creationtimestamp| type| source ---|---|--- 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/865 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/925 2026-08-10 00:00:32+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/865 2026-08-10 00:00:33+00:00|...