MINI-R9X7-HRMP-MH4Q

Bulletin has no description...

MINI-VFF6-R53X-G3FX

Bulletin has no description...

MINI-8332-8XQ7-C2GG

Bulletin has no description...

MINI-7WQ4-8XR7-H4F5

Bulletin has no description...

MINI-3F73-QG9R-54JV

Bulletin has no description...

MINI-2CJ9-XRCP-86CJ

Bulletin has no description...

MINI-95P4-WQ49-677Q

Bulletin has no description...

MINI-RJJ8-77CQ-Q2R6

Bulletin has no description...

MINI-XMR7-2894-QF2F

Bulletin has no description...

MINI-567V-67R3-8VGJ

Bulletin has no description...

MINI-W5VM-FMW6-934W

Bulletin has no description...

MINI-5F8H-R6W2-Q2M7

Bulletin has no description...

MINI-GR84-CP2H-8VR6

Bulletin has no description...

MINI-PWX7-PRFM-88C8

Bulletin has no description...

MINI-HRM9-C4J7-H379

Bulletin has no description...

MINI-7RJ6-XW76-Q2FJ

Bulletin has no description...

CVE-2026-18347 Kirki <= 6.1.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'context' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.1.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-18347

Summary: CVE-2026-18347 affects the Kirki WordPress plugin (Freeform Page Builder, Website Builder & Customizer) up to version 6.1.1. The root cause is an authorization bypass where the plugin fails to verify that a user is allowed to perform an action. Impact: authenticated attackers with custom...

CVE-2026-17087 WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-19717

The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title, type, size and URL of the media attachments assigned to any of its folders, including folders whi...