CVE-2026-42633 WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

Subscriber SQL Injection in Events Manager = 7.4.6 versions...

CVE-2026-39801 WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in AIWU = 1.5.9 versions...

CVE-2026-39801

The WordPress AIWU plugin (versions

CVE-2026-39802

The Everest Backup WordPress plugin (versions

SUSE-SU-2026:24136-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

wpbf

wpbf! wpbf è uno strumento di brute force per testare da remoto la robustezza delle password, l'enumerazione degli utenti e il rilevamento dei plugin su un sito WordPress. Description ^^^^^^^^^^^ Lo script tenterà di accedere alla dashboard di WordPress tramite il modulo di login utilizzando una...

log4j2burpscanner

SOLO PER TEST, NON ATTACCARE NESSUNO SOLO PER TEST, NON ATTACCARE NESSUNO SOLO PER TEST, NON ATTACCARE NESSUNO Gruppo di discussione Se il QR code non è più valido, aggiungi su WeChat f-f0ng, con nota log4j2burpscanner comunicazione Segui l'account ufficiale della pagina principale only security,...

CVE-2026-107657

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: nemo-gym, qemu-guesthelper, tempo-fips, karpenter, commercial-gitlab-rails-ee, commercial-gitlab-workhorse-ee-fips, consul-k8s-fips, commercial-nginx-ingress, consul-k8s, reports-server, commercial-spilo-fips, cert-manager, kyverno, nvidia-nsight-compute-12.8,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, continuity, grafana-pyroscope, filebrowser, grafana, step, k6, gitness, kyverno-policy-reporter, kube-arangodb, external-dns, grafana-alloy, rancher, juicefs, loki, flux-source-controller, argo-cd, mesosphere-vsphere-csi, cert-manager, flu...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: spire-server, loki, k8s-device-plugin, aactl, kubernetes, falco-no-driver, cert-manager, flux, ingress-nginx-controller, external-dns...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: spire-server, loki, k8s-device-plugin, aactl, kubernetes, falco-no-driver, cert-manager, flux, ingress-nginx-controller, external-dns...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, continuity, grafana-pyroscope, filebrowser, grafana, step, k6, gitness, kyverno-policy-reporter, kube-arangodb, external-dns, grafana-alloy, rancher, juicefs, loki, flux-source-controller, argo-cd, mesosphere-vsphere-csi, cert-manager, flu...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: spire-server, loki, k8s-device-plugin, aactl, kubernetes, falco-no-driver, cert-manager, flux, ingress-nginx-controller, external-dns...

nowafpls

nowafpls Indice nowafpls Limitazioni documentate dei WAF Installazione di nowafpls Uso di nowafpls Autori Licenza nowafpls La maggior parte dei firewall per applicazioni web WAF ha limitazioni sulla quantità di dati che può elaborare quando viene inviato un corpo della richiesta. Ciò significa ch...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.124 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-104728

The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

CVE-2026-100178

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...