CVE-2026-1447

Summary: The Mail Mint plugin for WordPress (versions ≤ 1.19.2) is affected by a Cross-Site Request Forgery (CSRF) due to missing nonce validation in the create_or_update_note function. This can allow unauthenticated attackers to create or update contact notes by tricking an administrator, with t...

EUVD-2026-5291

The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.2. This is due to missing nonce validation on the createorupdatenote function. This makes it possible for unauthenticated attackers to create or update contact notes via a...

PT-2026-5760

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.13.7 ingress-nginx versions 1.14.0 through 1.14.3 Description The nginx.ingress.kubernetes.io/auth-method Ingress annotation in ingress-nginx can be exploited to inject configuration into nginx. This can lead...

PT-2026-5761

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.13.7 ingress-nginx versions 1.14.0 through 1.14.2 Description The rules.http.paths.path Ingress field in ingress-nginx can be exploited to inject configuration into nginx. This can result in arbitrary code...

PT-2026-5762

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to 1.11.4 ingress-nginx versions prior to 1.12.1 Description A security issue exists in ingress-nginx where the protection provided by the auth-url Ingress annotation may not function as expected due to a specific...

PT-2026-5763

Name of the Vulnerable Software and Affected Versions ingress-nginx affected versions not specified Description A denial of service condition exists in the validating admission controller feature. Sending large requests to the validating admission controller can lead to excessive memory...

MINI-P737-R47J-WX49

Bulletin has no description...

MINI-M93R-PPHG-5WF7

Bulletin has no description...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the jsStringEscape function. An attacker can execute arbitrary code in generated files by injecting / sequences that breaks out of JavaScript comment blocks. Note: This vulnerability stems from an...

CVE-2025-7013

The CVE-2025-7013 issue is an Authorization Bypass via a user-controlled key in the QR Menu Pro Smart Menu Systems Menu Panel. Documents confirm the affected component is the Menu Panel (versions up to 29012026). The root cause is improper authorization handling that permits exploitation of trust...

ECHO-F3F1-7685-1435

Bulletin has no description...

ECHO-701C-0998-5CEF

Bulletin has no description...

CGA-VR7R-RGRC-PR3M

Bulletin has no description...

CGA-QCGP-9FFW-29X3

Bulletin has no description...

CGA-M269-H539-PXJP

Bulletin has no description...

CGA-94H4-F4CW-HPP4

Bulletin has no description...

CGA-59MM-MXVC-6H23

Bulletin has no description...

CGA-68MX-H7CX-55QW

Bulletin has no description...

CGA-2MXX-JC7G-J672

Bulletin has no description...

PT-2026-5267

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...