Linux Distros Unpatched Vulnerability : CVE-2026-63347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata-update - None CVE-2026-63347 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

CVE-2026-15056: Improper Limitation of a Pathname to a Restricted Directory

The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.1 via the parsefilepath function. This makes it possible for authenticated attackers, with vendor-level...

CVE-2026-72661 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal Kibana data retrieval capability used by Elastic Defend endpoint response actions did not enforce the Security Solution and endpoint...

EUVD-2026-58272

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal Kibana data retrieval capability used by Elastic Defend endpoint response actions did not enforce the Security Solution and endpoint...

CVE-2026-72661

CVE-2026-72661 describes a missing authorization vulnerability in Kibana where an internal data retrieval capability could bypass privilege checks and return endpoint response data with elevated internal permissions. Applicable to Elastic Kibana and tied to Security Solution/endpoint privileges, ...

CVE-2026-72661

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal Kibana data retrieval capability used by Elastic Defend endpoint response actions did not enforce the Security Solution and endpoint...

CVE-2026-28173

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

CVE-2026-28174

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-28174

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-28174

Technical details, affected components, exploit vectors, and remediation are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-28173

The CVE-2026-28173 entry concerns the WordPress WP Event Solution plugin, versioned ≤ 4.1.19, with a vulnerability described as Customer Arbitrary Content Deletion. Supported details indicate a high-severity issue (CVSS 3.1: 7.1) with network attack vector, low attack complexity, and low privileg...

CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

CVE-2026-28173

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

EUVD-2026-57956

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

EUVD-2026-57957

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by VanTastic in WordPress Plugin WP Event SOlution versions = 4.1.19...

Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-102)

Missing Authorization in Kibana Leading to Information Disclosure Description: Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal Kibana data retrieval capability used by Elastic Defend...