72419 matches found
MINI-223F-4XJ8-W5PP
Bulletin has no description...
MINI-GMCR-WJ53-2M95
Bulletin has no description...
MINI-QJJ4-RWFV-JHHM
Bulletin has no description...
MINI-Q7R7-2R4W-43C2
Bulletin has no description...
MINI-3JP3-8WM6-VP93
Bulletin has no description...
MINI-65GG-J8JR-C37H
Bulletin has no description...
CVE-2026-54407
creationtimestamp| type| source ---|---|--- 2026-07-03 07:04:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy6zuy2o2c 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-13 03:07:06+00:00| seen|...
CVE-2026-44040
creationtimestamp| type| source ---|---|--- 2026-07-03 06:32:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppwfnnbxu2i 2026-07-09 11:36:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7k5vjfq52y 2026-07-09 11:36:16+00:00| seen|...
CVE-2026-10140
creationtimestamp| type| source ---|---|--- 2026-07-03 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpptcdyxjl2i 2026-07-03 07:32:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzrbt4q727 2026-07-09 01:47:27+00:00| seen|...
EUVD-2026-41492
The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.4.4. This is due to the POST /motopress/appointment/v1/bookings REST endpoint being registered with 'permissioncallback' = 'returntrue',...
CVE-2026-9180 MotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter
The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.4.4. This is due to the POST /motopress/appointment/v1/bookings REST endpoint being registered with 'permissioncallback' = 'returntrue',...
CVE-2026-9180
The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.4.4. This is due to the POST /motopress/appointment/v1/bookings REST endpoint being registered with 'permissioncallback' = 'returntrue',...
CVE-2026-9180
MotoPress Appointment Booking for WordPress (versions up to 2.4.4) is vulnerable to an Authorization Bypass via a user-controlled booking_id. The REST endpoint POST /motopress/appointment/v1/bookings is registered with a permissive permission_callback (return_true ), and createBooking() loads the...
CVE-2025-69134
creationtimestamp| type| source ---|---|--- 2026-07-03 03:23:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplt3fz2726 2026-08-01 12:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrziombw4z2x...
GHSA-84HP-MQVJ-3P8H
creationtimestamp| type| source ---|---|--- 2026-07-03 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853809243699371 2026-07-03 03:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mppkkiqr622k...
CVE-2026-8247
creationtimestamp| type| source ---|---|--- 2026-07-03 02:42:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppjk7xsoj22 2026-07-03 18:59:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra545qlh2c 2026-07-16 08:14:36+00:00| seen|...
ECHO-622E-26D9-8299
Bulletin has no description...
MINI-XJ9X-6M54-JCG7
Bulletin has no description...