CVE-2026-15303

The CVE pertains to the 6Storage Rentals WordPress plugin (affected versions up to 2.27.0). The vulnerability is an authentication bypass in the six_storage_create_wp_user() AJAX handler, registered on wp_ajax_nopriv_six_storage_create_wp_user without nonce, capability, credential, or ownership v...

EUVD-2026-58840

The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the sixstoragecreatewpuser AJAX handler being registered on wpajaxnoprivsixstoragecreatewpuser without any nonce, capability, credential, or ownership...

CVE-2026-74309: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vdpa/octeonep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in octhw-irqs instead of assuming irq - irqs0. This supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs0 is not the ba...

PT-2026-72849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw89 wifi driver, an issue exists in the Advanced Error Reporting AER handlers. The driver stores an ieee80211 hw pointer using pci set drvdata during probe time, but the io erro...

PT-2026-72848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw88 wifi driver, an issue exists where an ieee80211 hw pointer is stored via pci set drvdata during probe time, but the io error detected and io resume functions retrieve it as ...

PT-2026-72745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpa/octeon ep component where the interrupt handler incorrectly maps IRQs to rings by assuming a contiguous sequence starting from irqs0. This can lead to incorre...

PT-2026-72670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpib module. In the command ioctl function, an error path inside a loop decrements the descriptor busy reference counter and breaks, but execution...

PT-2026-72334

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmaengine component for rz-dmac where the interrupt request is made before the system is fully configured. Because the interrupt handler can execute immediately up...

CVE-2026-74420: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages relies o...

PT-2026-72162

Name of the Vulnerable Software and Affected Versions ECS WordPress plugin versions prior to 4.3.8 Description Insufficient capability and object-ownership checks in Dynamic Repeater AJAX handlers allow a user with Contributor privileges to inject data-source bindings into any post, including tho...

PT-2026-72861

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS Andrew File System component where the cache manager callback path fails to properly handle requests when a server record is not attached to an incoming call v...

PT-2026-72150

Name of the Vulnerable Software and Affected Versions Cookie Banner for GDPR / CCPA – WPLP Cookie Consent versions prior to 4.3.6 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrar...

PT-2026-72329

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13 Description An issue exists in the i2c imx driver where the interrupt-driven block-read state machine incorrectly handles a Block Read byte count of 0. In this scenario, the system rejects the request as...

PT-2026-72876

Name of the Vulnerable Software and Affected Versions Wholesale Market versions prior to 2.2.3 Description The Wholesale Market plugin for WordPress allows authenticated users with Subscriber-level access or higher to escalate their privileges to Administrator. This occurs when the site...

Linux Distros Unpatched Vulnerability : CVE-2026-72384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using...

PT-2026-72572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The driver for the ts4800 irqchip fails to clear a chained handler for the parent interrupt during the removal process. This occurs because the driver uses irq set chained handler and da...

PT-2026-72880

Name of the Vulnerable Software and Affected Versions TrueBooker versions prior to 1.2.7 Description The plugin is susceptible to account takeover because the add front user update AJAX handler is accessible to unauthenticated users. The handler accepts an arbitrary truebooker wp user id value an...

PT-2026-72642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the i3c hci addr to dev function within the MIPI I3C HCI component. The function traverses bus-devs.i3c, which is protected by bus.lock a read-write semaphore...

PT-2026-72306

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the bcm rx handler function when an rx op is subscribed to all interfaces ifindex == 0. Because the same op is registered in a shared per-netns wildcard filter list...

PT-2026-72265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the debug logging of the ims pcu irq function. The issue occurs because the function unconditionally prints data from pcu-urb in buf, even when the...