CVE-2026-13178

The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an attacker-supplied order status, allowing unauthenticated users to create orders marked as paid without completing any payment...

EUVD-2026-51009

The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an attacker-supplied order status, allowing unauthenticated users to create orders marked as paid without completing any payment...

CVE-2026-14923 Sync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...

CVE-2026-14923

The CVE-2026-14923 entry applies to the WordPress plugin Sync Post With Other Site, affecting versions before 1.9.3. The issue is an operator-precedence flaw in the REST route’s authorization check, which fails to properly enforce page-editing capability. As a result, an authenticated user with o...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

CVE-2026-16531 Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

CVE-2026-16531

CVE-2026-16531 affects PCP’s pmproxy logger servlet, where a crafted hostname enables path traversal leading to arbitrary file and directory creation and potential DoS. Root cause is unauthenticated remote exploitation of the logger servlet via crafted hostnames. The Red Hat mitigation recommends...

CVE-2026-16531 Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

EUVD-2026-50980

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

GHSA-W8XC-8G92-V77H

creationtimestamp| type| source ---|---|--- 2026-07-30 05:31:24+00:00| seen| https://gist.github.com/alon710/5694b6f230218930632a6e462097e637...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service. Mitigation To mitigate this issue, restrict network access to TC...

CVE-2026-17662

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:54+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:23:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

GHSA-XGR6-PQJV-3PF8

creationtimestamp| type| source ---|---|--- 2026-07-30 04:31:31+00:00| seen| https://gist.github.com/alon710/2d94cc50795411681f41b69ad6e69380...

CVE-2026-48448

creationtimestamp| type| source ---|---|--- 2026-07-30 04:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtki7wira23 2026-08-01 11:00:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e 2026-08-04 11:12:11+00:00| seen|...

CVE-2026-51233

creationtimestamp| type| source ---|---|--- 2026-07-30 03:53:15+00:00| seen| https://gist.github.com/programmervuln/698a3ca54a49126a23a60092240d933a...

GHSA-9XQ3-3FQG-4VG7

creationtimestamp| type| source ---|---|--- 2026-07-30 01:32:06+00:00| seen| https://gist.github.com/alon710/3dfab3b451ecd01d7d3ac084db088fec...

CVE-2026-16339

creationtimestamp| type| source ---|---|--- 2026-07-30 00:51:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5pemnuz3idiia...

CVE-2026-64370

A flaw was found in the Linux kernel's posix-cpu-timers component. This vulnerability allows a local user to trigger a resource leak within the docpunanosleep function. The issue occurs because a process identifier PID reference is not properly released if a timer creation operation fails. This...

CVE-2025-63913

creationtimestamp| type| source ---|---|--- 2026-07-30 00:01:47+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrt55mv6fa2e...

PT-2026-66404

Name of the Vulnerable Software and Affected Versions PCP pmproxy affected versions not specified Description An unauthenticated remote attacker can exploit a path traversal vulnerability in the logger servlet by using a crafted hostname. This flaw allows the creation of arbitrary files and...