WordPress Security For WooCommerce plugin <= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core Updates vulnerability

Unauthenticated Forced Plugin, Theme and Core Updates vulnerability discovered by Benjamin Kincses Dextheking1 in WordPress Plugin Ultimate Security For WooCommerce: IP Restriction, Password Policy and More versions = 1.0.16...

CVE-2026-123699 Security For WooCommerce <= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core Updates

The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running bulk Security For WooCommerce WordPress plugin through 1.0.16, and WordPress core updates, allowing unauthenticated users to force every pending update to be installed on th...

CVE-2026-123699

The Security For WooCommerce WordPress plugin (versions

CVE-2026-116879 Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subject parameter for a restricted page to trigger forced...

CVE-2026-116879 Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subject parameter for a restricted page to trigger forced...

CVE-2026-116879

Semantic MediaWiki versions 7.3.0 before 7.3.1 are vulnerable to a missing authorization vulnerability in the smwtask update task . This flaw allows users with edit rights to force semantic updates on arbitrary pages by supplying a serialized subject parameter for a restricted page. Consequences ...

PT-2026-126340

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subject parameter for a restricted page to trigger forced...

PT-2026-42549

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description A Cross-Site Request Forgery CSRF token validation bypass exists where the local available update.php view emits a token via $token-output'do update', but the do update function in...

WordPress Loginizer log SQLi Scanner

Loginizer wordpress plugin contains an unauthenticated timebased SQL injection in versions before 1.6.4. The vulnerable parameter is in the log parameter. Wordpress has forced updates of the plugin to all servers Module Options msf use auxiliary/scanner/http/wp/loginizerlogsqli msf...

AIRTAME HDMI dongle unauthorized access vulnerability

The AIRTAME HDMI dongle is a wireless access point product for connecting, sharing and split-screen TVs or monitors. A security vulnerability exists in the AIRTAME HDMI dongle using firmware versions prior to 2.2.0. An attacker can exploit the vulnerability to gain unauthorized access to the...