CVE-2026-97531

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip vport under deletion in report ID acquisition qla24xxreportidacquisition format-1 handling walks ha-vplist under vportslock, takes a vrefcount on the matching vport and calls qlaupdatehostmap to register its...

WordPress Online Scheduling and Appointment Booking System – Bookly plugin <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability

Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability discovered by Theklis in WordPress Plugin Bookly versions = 28.2...

WordPress Modula Image Gallery – Photo Grid & Video Gallery plugin <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) vulnerability

Missing Authorization to Authenticated Author+ Arbitrary File Deletion Non-PHP vulnerability discovered by pbsec in WordPress Plugin Modula Image Gallery versions = 3.0.2...

Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-139)

Missing Authorization in Kibana Leading to Unauthorized Deletion of Data Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to ...

CVE-2026-92713

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

WordPress 10Web Booster plugin < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion vulnerability

Unauthenticated Connection Secret Disclosure and Deletion vulnerability discovered by Shirshak Roy in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions 2.34.0...

Exploit for CVE-2026-89055

CVE-2026-89055 — Customer Reviews for WooCommerce CusRev Aut...

CVE-2026-92713 Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

CVE-2026-92713 Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

EUVD-2026-86592

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

CVE-2026-92713

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to and including 3.0.2 . The root cause is insufficient file path validation within the upload_image function, specifically failing to adequately restrict access via the file parameter. An au...

CVE-2026-93399 Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter

The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'booklygetformid', 'booklyrendercomplete', 'booklyaddtocalendar' and 'booklyrollbackorder' AJAX actions. This is due to the 'booklygetformid' handler blindly storing th...

CVE-2026-93399 Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter

The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'booklygetformid', 'booklyrendercomplete', 'booklyaddtocalendar' and 'booklyrollbackorder' AJAX actions. This is due to the 'booklygetformid' handler blindly storing th...

CVE-2026-89055 Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.120.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

CVE-2026-89055

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 5.120.0 . The root cause is the plugin's failure to properly verify user authorization when performing specific actions. This flaw allows unauthenticated attacker...

CVE-2026-89055 Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.120.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

baserCMS plugin "BcAddonMigrator" vulnerable to inclusion of functionality from untrusted control sphere

Overview baserCMS plugin "BcAddonMigrator" provided by baserCMS Users Community contains the following vulnerability. Inclusion of Functionality from Untrusted Control Sphere CWE-829 - CVE-2026-97150 Kuniyoshi Noguchi KuniNogu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability t...

CVE-2026-85289: Cross-Site Request Forgery (CSRF)

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits ensurevalidpostrequest from delete methods including Payments::delete, Recurring::delete, and Userclients::delete. Although the routes require POST, they do not...

CVE-2026-47679: Improper Limitation of a Pathname to a Restricted Directory

GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions...

CVE-2026-61525: Improper Limitation of a Pathname to a Restricted Directory

Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's session management for websocket and long-polling connections is susceptible to a path traversal attack. Session identifiers supplied by the client are insufficiently validated before being used to...