CVE-2026-116204 YesWiki before 4.7.0 CSRF via despam Admin Action

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

CVE-2026-116204 YesWiki before 4.7.0 CSRF via despam Admin Action

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

CVE-2026-116194 Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost OAuth callback, which disables the state check and trusts the hostname parameter. Malicious web pages can send a stateless request to port 53682 during authorization, planting...

CVE-2026-116194 Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost OAuth callback, which disables the state check and trusts the hostname parameter. Malicious web pages can send a stateless request to port 53682 during authorization, planting...

CVE-2026-116194

Rclone versions 1.52.0 before 1.75.2 are vulnerable to a cross-site request forgery (CSRF) vulnerability within the pCloud backend's localhost OAuth callback . The root cause is the disabling of the state check and the trusting of the hostname parameter . An attacker can use malicious web pages t...

CVE-2026-116072

Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...

CVE-2026-116072 Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity

Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...

CVE-2026-116072 Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity

Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...

CVE-2026-116072 Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity

Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...

CVE-2026-116072

The Infinity for Reddit application (through version 8.3.4 ) is vulnerable to a login cross-site request forgery (CSRF) vulnerability within the LoginChromeCustomTabActivity redirect handler. The root cause is the handler's use of a hardcoded OAuth state value . An attacker can authorize the app'...

PT-2026-122975

Name of the Vulnerable Software and Affected Versions Infinity for Reddit versions prior to 8.3.5 Description A login cross-site request forgery issue exists in the exported LoginChromeCustomTabActivity redirect handler. The handler uses a hardcoded OAuth state value, which allows an attacker to...

CVE-2026-107887

The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...

CVE-2026-107887 Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme

The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...

CVE-2026-107887

The Advanced Twenty Seventeen WordPress plugin, affecting versions through 1.3.1 , contains a vulnerability due to the lack of capability or nonce checks on the action that creates and activates its bundled child theme. This allows any authenticated user, such as a subscriber , to switch the site...

EUVD-2026-109231

The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...

CVE-2026-107887 Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme

The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...

PT-2026-122498

Name of the Vulnerable Software and Affected Versions Advanced Twenty Seventeen WordPress plugin versions prior to 1.3.2 Description The plugin fails to perform capability or nonce checks on the action used to create and activate its bundled child theme. This allows any authenticated user,...

Security Bulletin: IBM Verify Directory is affected by multiple vulnerabilities (CVE-2026-8639, CVE-2026-8640, CVE-2026-8642, CVE-2026-8860)

Summary Multiple vulnerabilities have been addressed in IBM Verify Directory in an update. Vulnerability Details CVEID:CVE-2026-8642 DESCRIPTION: IBM Security Verify Directory Web Application exposes debug endpoints that disclose system information including server versions and session identifier...

CVE-2026-93630

A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to bypass the restriction on forms that target the Zimbra host. DefangFilter and the OWASP ActionAttributePolicy compare the form-action hostname with the...

EUVD-2026-108971

A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to bypass the restriction on forms that target the Zimbra host. DefangFilter and the OWASP ActionAttributePolicy compare the form-action hostname with the...