CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-65712 Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

CVE-2026-65712 Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

CVE-2026-64874 Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-64874 Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-64874

The Cache Cleaner Pro extension for Joomla (by regularlabs.com) is vulnerable to CDN credential leakage . The root cause is that CDN credentials are exposed within administrator request URLs , which could allow an unauthorized actor to gain access to the Content Delivery Network configuration. No...

WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin Dokan Pro versions = 5.0.3...

WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Expatch in WordPress Plugin Dokan Pro versions = 5.0.2...

WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Expatch in WordPress Plugin Dokan Pro versions = 5.0.2...

WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Dokan Pro versions = 5.0.0...

PT-2026-63830

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

PT-2026-63837

Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...

PT-2026-63914

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

PT-2026-63870

Name of the Vulnerable Software and Affected Versions ShopLentor Pro versions prior to 2.8.6 Description The ShopLentor Pro plugin for WordPress contains a broken access control issue. A missing capability check in a function allows authenticated attackers with subscriber-level permissions or...

PT-2026-63831

Unauthenticated Cross Site Scripting XSS in Real Estate Manager Pro = 12.8.5 versions...

CVE-2026-65712: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

CVE-2026-57370: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...

PT-2026-63823

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

PT-2026-63822

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

PT-2026-86945

Уязвимость почтового сервера CommuniGate Pro, связанная с недостаточной проверкой прав доступа при обработке специально подготовленных запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить несанкционированную модификацию данных на сервере...