EUVD-2026-59861

The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...

CVE-2026-15441 Product Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter

The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...

CVE-2026-15441 Product Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter

The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...

CVE-2026-15441

The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...

CVE-2026-15441

The CVE-2026-15441 entry concerns the WC Product Table Lite WordPress plugin (versions up to 5.6.0). It is vulnerable to CSS Injection via the unauthenticated shortcode attribute laptop_scroll_offset passed through the wcpt_ajax() handler (wp_ajax_nopriv_wcpt_ajax). The handler JSON-decodes attac...

PT-2026-73090

The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptop scroll offset' shortcode attribute exposed through the unauthenticated wcpt ajax AJAX handler. The handler is registered for wp ajax nopriv wcpt ajax, JSON-decodes...

Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14095 Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

NPM: ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token

NPM: epetherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 2.6.0, = 3.0.0...

ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token

Etherpad's device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token in the GET response body Description Etherpad ships an endpoint pair under /tokenTransfer src/node/hooks/express/tokenTransfer.ts that lets a logged-in user move their...

NPM: ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

NPM: epetherpad-lite: Import/export uses Math.random for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 3.0.0...

Insufficient Entropy in PRNG

Overview epetherpad-lite is a modern really-real-time collaborative document editor. Affected versions of this package are vulnerable to Insufficient Entropy in PRNG through the ImportHandler and ExportHandler in src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts. An attacker...

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Description src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts both compute their temporary working-file paths as: ts const randNum = Math.floorMath.random 0xFFFFFFFF; const srcFile = $os.tmpdir/etherpadexport$randNum.html; const destFile =...

GHSA-2JWF-F4XQ-F24H ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Description src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts both compute their temporary working-file paths as: ts const randNum = Math.floorMath.random 0xFFFFFFFF; const srcFile = $os.tmpdir/etherpadexport$randNum.html; const destFile =...

NPM: ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

NPM: epetherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 2.1.0, = 3.0.0...

GHSA-FJGC-3MJ7-8RG8 ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

GHSA-03 — x-proxy-path header reflected into admin HTML/JS/CSS cache-poisoning XSS and concatenated into redirect open-redirect Severity: Medium CVSS v3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS suggested base score: 6.1 — Medium Re-validate in the first.gov calculator before...

ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

GHSA-03 — x-proxy-path header reflected into admin HTML/JS/CSS cache-poisoning XSS and concatenated into redirect open-redirect Severity: Medium CVSS v3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS suggested base score: 6.1 — Medium Re-validate in the first.gov calculator before...

CVE-2026-15238

CVE-2026-15238 affects the MotoPress Hotel Booking WordPress plugin (before 6.2.3). The vulnerability arises because the plugin does not verify record ownership when updating customer records, enabling any authenticated user with a low-privilege account (Subscriber and above) to modify or overwri...

CVE-2026-15237 Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenticated users to create completed payment records against arbitrary bookings and falsely mark them as paid...

CVE-2026-15237

Summary: CVE-2026-15237 concerns the MotoPress Hotel Booking WordPress plugin prior to version 6.2.3. The issue is an absence of authorization/ownership checks on a REST endpoint that creates payment records. Affected component: MotoPress Hotel Booking WordPress plugin (before 6.2.3). Root cause:...