CVE-2026-79641

creationtimestamp| type| source ---|---|--- 2026-09-09 12:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv3igwbtaf23...

CVE-2026-79973

creationtimestamp| type| source ---|---|--- 2026-09-09 09:46:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hqkrahgnc6b4r...

CVE-2026-84392

creationtimestamp| type| source ---|---|--- 2026-09-09 08:09:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117240061489453521 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...

EUVD-2026-74760

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.22. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-15398

The Eventin WordPress plugin (Event Calendar, Event Registration, Tickets & Booking, AI Powered) is vulnerable to an authorization bypass in all versions up to and including 4.1.22 . The root cause is improper authorization verification in the OrderController , where the wp_rest nonce is publicly...

CVE-2026-87734

creationtimestamp| type| source ---|---|--- 2026-09-09 05:52:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cccrnwlzgl642 2026-09-09 09:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hrh2uz2w 2026-09-09 11:12:16+00:00| seen|...

CVE-2025-61803

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:17+00:00| seen| https://t.me/IntelEncyclopedia/1370 2026-09-10 00:00:25+00:00| seen| https://t.me/IntelEncyclopedia/1370...

CVE-2026-11991

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:06+00:00| seen| https://t.me/GithubRedTeam/101547 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101547...

CVE-2026-28660

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:13+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-19800

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

ROOT-OS-DEBIAN-12-CVE-2025-71232 CVE-2025-71232 in linux - Patched by Root

Root has patched CVE-2025-71232 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46180 CVE-2026-46180 in linux - Patched by Root

Root has patched CVE-2026-46180 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-52993 CVE-2026-52993 in linux - Patched by Root

Root has patched CVE-2026-52993 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-40065 CVE-2025-40065 in linux - Patched by Root

Root has patched CVE-2025-40065 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46071 CVE-2026-46071 in linux - Patched by Root

Root has patched CVE-2026-46071 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-19800 Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-19800

Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails (WordPress plugin) is vulnerable to SQL Injection via the status parameter in all versions up to and including 1.31.0 . The root cause is that an attacker-controlled $contact_filter_query fragment is concatenated into ...

CVE-2026-19800 Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2026-74606

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-12956 Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter

The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...