CVE-2026-51923

creationtimestamp| type| source ---|---|--- 2026-07-01 08:44:39+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/f582fe0ded3bcccead7a7e90fca8c107...

CVE-2026-51925

creationtimestamp| type| source ---|---|--- 2026-07-01 08:34:03+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/09e05b53c3a5e34e9a060860fb2412ba 2026-07-11 00:36:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdga5hxss22...

CVE-2026-11823

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'storeservicedate' parameter of the bpaassignstaffmembertoslots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashesdeep on user-supplied POST data befor...

CVE-2026-11823 BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'storeservicedate' parameter of the bpaassignstaffmembertoslots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashesdeep on user-supplied POST data befor...

CVE-2026-11823 BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'storeservicedate' parameter of the bpaassignstaffmembertoslots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashesdeep on user-supplied POST data befor...

CVE-2026-11823

The CVE-2026-11823 entry concerns the BookingPress Appointment Booking Pro plugin for WordPress, affected up to version 5.7.1. The vulnerability is a SQL Injection via the store_service_date parameter of the bpa_assign_staffmember_to_slots() function. Root cause: user-supplied POST data is passed...

EUVD-2026-40912

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'storeservicedate' parameter of the bpaassignstaffmembertoslots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashesdeep on user-supplied POST data befor...

CVE-2026-48283

creationtimestamp| type| source ---|---|--- 2026-07-01 04:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkndl637t2x 2026-07-01 09:45:05+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 13:00:13+00:00|...

CVE-2026-7871

creationtimestamp| type| source ---|---|--- 2026-07-01 04:01:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842723128491080 2026-07-01 17:43:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm2xu7kks26 2026-07-03 04:37:07+00:00| seen|...

CVE-2026-56300

creationtimestamp| type| source ---|---|--- 2026-07-01 02:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkjf23m2326...

CVE-2026-29090

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6j7p-qjhg-9947...

CVE-2026-44163

creationtimestamp| type| source ---|---|--- 2026-07-01 02:49:00+00:00| seen| https://jvn.jp/en/jp/JVN36011274...

CVE-2026-53218

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:48+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 15:50:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvleegfg2u 2026-07-06 06:51:02+00:00| seen|...

CVE-2026-53254

creationtimestamp| type| source ---|---|--- 2026-07-01 02:44:08+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:51:47+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-53247

creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:57+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812...

CVE-2026-53237

creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:46+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...

CVE-2025-71350

creationtimestamp| type| source ---|---|--- 2026-07-01 02:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkikqadfi26...

CVE-2026-53691

creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:35+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53690...

PT-2026-54498

The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'store service date' parameter of the bpa assign staffmember to slots function in versions up to and including 5.7.1. This is due to the explicit use of stripslashes deep on user-supplied POST dat...

CVE-2026-58376

creationtimestamp| type| source ---|---|--- 2026-06-30 18:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjn5cyb4w2m 2026-07-03 10:06:32+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqce4xggx2r 2026-07-03 10:06:33+00:00| seen|...