23322 matches found
CVE-2026-7457 LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update
The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...
CVE-2026-7457 LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update
The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...
CVE-2026-7457
The CVE-2026-7457 entry concerns the WordPress LatePoint plugin (versions up to 5.5.0). The root cause is insufficient input sanitization on the customer cabinet profile update endpoint: raw POST fields (first_name, last_name, phone, notes) bypass sanitization because OsCustomerModel does not ove...
CVE-2026-7457
The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...
CVE-2026-41429
creationtimestamp| type| source ---|---|--- 2026-05-06 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml5ta25iz32p 2026-05-08 11:02:15+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mldle5h5if2b...
CVE-2025-71256
creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5ipdlj2k 2026-05-06 05:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5y2ok74h2t 2026-06-01 18:00:00+00:00| seen|...
CVE-2026-43646
creationtimestamp| type| source ---|---|--- 2026-05-06 02:07:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mkh2nvi25 2026-05-06 17:10:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76yfunya2r...
CVE-2026-35579
creationtimestamp| type| source ---|---|--- 2026-05-06 02:01:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5m7sjb5n2e...
CVE-2026-39402
creationtimestamp| type| source ---|---|--- 2026-05-06 01:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5l3vbuvo2r...
CVE-2026-41950
creationtimestamp| type| source ---|---|--- 2026-05-06 01:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jyljkm52e 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...
SUSE-SU-2026:21559-1 Security update for wireshark
This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor function can lead to memory exhaustion bsc1258907. - CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal...
PT-2026-37353
The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters first name, last name, phone, notes bypass...
PT-2026-38263
Name of the Vulnerable Software and Affected Versions auth0-js versions 8.11.0 through 9.32.0 Description Improper validation in the Auth0.js SDK may allow the return of user profile data when a specifically crafted invalid ID token is used in conjunction with a valid access token. This issue...
PT-2026-38234
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description Insufficient access control in the Nostr plugin HTTP profile routes allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with...
CVE-2026-4062
creationtimestamp| type| source ---|---|--- 2026-05-05 22:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5akrpkkh2c...
CVE-2026-30923
creationtimestamp| type| source ---|---|--- 2026-05-05 22:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml57em74tm2t 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/modsecurity-denial-of-service-vulnerability20260507...
CVE-2026-33324
creationtimestamp| type| source ---|---|--- 2026-05-05 21:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml56apcdmp2q 2026-05-06 03:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml5piwum6i2f 2026-05-06 03:00:48+00:00| seen|...
CVE-2026-32934
creationtimestamp| type| source ---|---|--- 2026-05-05 21:38:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55jcl3da2v...