WordPress InPost PL plugin 1.7.5-1.9.7 - Unauthenticated Order Status Forgery vulnerability

Unauthenticated Order Status Forgery vulnerability discovered by ryan fabella in WordPress Plugin InPost PL versions 1.7.5-1.9.7...

EUVD-2026-89623

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

PT-2026-103044

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

CVE-2026-93580: Missing Authorization

The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...

CentOS Linux 7 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-devel / etc (CENTOS7:CLSA-2024:1734372021)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1734372021 advisory. - Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment...

CVE-2026-17038

creationtimestamp| type| source ---|---|--- 2026-09-10 12:15:12+00:00| seen| https://cert.pl/en/posts/2026/09/CVE-2026-17038...

WordPress InPost PL plugin < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability

Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability discovered by Pedro Pinho in WordPress Plugin InPost PL versions 1.9.1...

CVE-2026-64962

creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:05+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...

The vulnerability of the PL/Per extension interface in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the PL/Per extension interface of the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-65609

creationtimestamp| type| source ---|---|--- 2026-08-19 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-65609...

UBUNTU-CVE-2026-14677

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixe...

Linux Distros Unpatched Vulnerability : CVE-2026-14677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-boun...

CVE-2026-71393

creationtimestamp| type| source ---|---|--- 2026-08-10 12:45:30+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-71391...

CVE-2026-46593

creationtimestamp| type| source ---|---|--- 2026-07-31 16:45:08+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2025-67649...

CVE-2026-66723

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:23+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-66723...

CVE-2026-56390

creationtimestamp| type| source ---|---|--- 2026-07-29 12:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56389...

CVE-2026-53910

creationtimestamp| type| source ---|---|--- 2026-07-22 16:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-53910 2026-07-25 17:28:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrifcmd74u2c...

PYSEC-2026-2059 Information leakage in YAQL

YAQL before 3.0.0 is used in Murano, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information...

CVE-2026-8857

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from before 1.46.0, 1.45.4, 1.44.6, 1.43.9...