MINI-G3Q6-M9HW-7CXR

Bulletin has no description...

CVE-2026-16265

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service...

BELL-CVE-2026-64604

Bulletin has no description...

BELL-CVE-2026-64568

Bulletin has no description...

BELL-CVE-2026-64590

Bulletin has no description...

BELL-CVE-2026-64592

Bulletin has no description...

BELL-CVE-2026-64594

Bulletin has no description...

BELL-CVE-2026-64570

Bulletin has no description...

BELL-CVE-2026-64576

Bulletin has no description...

BELL-CVE-2026-64575

Bulletin has no description...

CVE-2026-16265 WP Maps < 4.9.7 - Subscriber+ Denial of Service

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service...

CVE-2026-16041

The CVE-2026-16041 entry concerns the MStore API WordPress plugin prior to version 4.21.0. The REST endpoint used for creating product reviews lacks authorization and purchase-ownership checks, allowing an unauthenticated attacker to submit WooCommerce product reviews with arbitrary reviewer name...

CVE-2026-15215 Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slug through a nonce-protected AJAX action, allowing users with the Shop Manage...

MINI-W27M-XWWJ-MJ8P

Bulletin has no description...

CGA-382M-XRX3-W728

Bulletin has no description...

EUVD-2026-54325

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-54322

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-54321

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-65667

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-63508

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...