27196 matches found
GHSA-53WG-R69P-V3R7
creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:26+00:00| seen| Telegram/cfwlrYjLd2pWKSXxa3WW-gwVhqSDyEtd8vLE4wKBNVvmw...
GHSA-XFMP-2HF9-GFJP
creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:26+00:00| seen| Telegram/cfwlrYjLd2pWKSXxa3WW-gwVhqSDyEtd8vLE4wKBNVvmw...
CVE-2026-23535
creationtimestamp| type| source ---|---|--- 2026-01-16 20:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckvbclzfw2t 2026-01-24 21:24:12+00:00| seen| https://gist.github.com/alon710/06a718f906cedb00a1e00cfb38a77644 2026-01-24 22:29:33+00:00| seen|...
CVE-2026-0615
The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...
CVE-2026-0615 CVE-2026-0615
The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...
CVE-2026-0615 CVE-2026-0615
The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...
CVE-2026-0615
The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...
CVE-2026-0615
The Librarian personal AI assistant software is vulnerable because its web_fetch tool can be used to retrieve the supervisord status page . This allows an attacker to access and retrieve information about running processes within the TheLibrarian backend . The vendor has addressed this vulnerabil...
CVE-2025-14757
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions up to, and including, 3.6.9 only when used in combination with Cost Calculator Builder PRO. This is due to the completepayment AJAX action being registered via wpajaxnopriv,...
clk: samsung: exynos-clkout: Assign .num before accessing .hws
...
media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
...
CVE-2025-14757 Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions up to, and including, 3.6.9 only when used in combination with Cost Calculator Builder PRO. This is due to the completepayment AJAX action being registered via wpajaxnopriv,...
CVE-2025-14757
CVE-2025-14757 affects Cost Calculator Builder (WordPress) up to version 3.6.9 when used with Cost Calculator Builder PRO. Root cause: the complete_payment AJAX action is registered via wp_ajax_nopriv, allowing unauthenticated access, and the complete() check only validates a nonce, not user capa...
CVE-2025-14757
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions up to, and including, 3.6.9 only when used in combination with Cost Calculator Builder PRO. This is due to the completepayment AJAX action being registered via wpajaxnopriv,...
CVE-2026-1004
CVE-2026-1004 affects the Essential Addons for Elementor plugin for WordPress (versions up to and including 6.5.5). The flaw, via the eael_product_quickview_popup function, allows unauthenticated attackers to exfiltrate WooCommerce product information for items with draft, pending, or private sta...
CVE-2025-59960
creationtimestamp| type| source ---|---|--- 2026-01-16 08:11:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115903762602820506...
CVE-2026-0939
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possibl...
CVE-2026-0939 Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possibl...
CVE-2026-0939
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possibl...
CVE-2026-0939 Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possibl...