CVE-2026-94231 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification

The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices...

CVE-2026-94230

The TrueBooker WordPress plugin versions prior to 1.3.0 contains a vulnerability where certain AJAX actions lack proper authorization checks. Additionally, the application fails to perform server-side validation on the submitted service price. These flaws allow unauthenticated users to create boo...

CVE-2026-94230 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions

The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer...

CVE-2026-94228 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data

The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...

CVE-2026-94228

The TrueBooker WordPress plugin (versions 1.1.9 through 1.2.9) is vulnerable to an unauthenticated plugin settings overwrite . The root cause is a lack of capability checks on one of the plugin's setup handlers; furthermore, the token being validated is issued to unauthenticated visitors. This al...

CVE-2026-94228 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data

The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...

EUVD-2026-104102

The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...

EUVD-2026-104099

The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any documen...

EUVD-2026-104098

The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that...

EUVD-2026-104095

The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook notifications, because the shared secret used to validate the request signature is empty by default and nothing rejects an unconfigured secret, allowin...

CVE-2026-89286

The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...

CVE-2026-94273

The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment...

mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin

A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information qcinfo plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffe...

EUVD-2026-104088

The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment...

CVE-2026-89286 FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File

The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...

WordPress ElementsReady Addons for Elementor plugin <= 6.7.2 - Subscriber+ Plugin Settings Overwrite vulnerability

Subscriber+ Plugin Settings Overwrite vulnerability discovered by Stefan Spasic in WordPress Plugin ElementsReady Addons for Elementor versions = 6.7.2...

CVE-2026-89286 FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File

The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...

CVE-2026-89286

The FormFlow for GoHighLevel (GHL) WordPress plugin (versions through 1.0.0 ) is vulnerable to unauthenticated sensitive data disclosure. The application fails to restrict access to a log file stored within a publicly accessible uploads directory . An attacker can read this file to obtain connect...

CLSA-2026-1792384648 TuxCare security update for @babel/plugin-transform-block-scoped-functions (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792384646 TuxCare security update for @babel/plugin-transform-block-scoped-functions (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...