CVE-2025-15473 Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

CVE-2025-15473

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

GHSA-GQC5-XV7M-GCJQ

creationtimestamp| type| source ---|---|--- 2026-03-12 04:10:06+00:00| seen| https://gist.github.com/alon710/e3dc62168c67266174e7a28a55951177...

GHSA-C4P7-RWRG-PF6P

creationtimestamp| type| source ---|---|--- 2026-03-12 03:40:05+00:00| seen| https://gist.github.com/alon710/b03cab59ac9b3af949ff7e9d16d01a05...

CVE-2026-3931

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:30:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214321125739442 2026-03-12 21:00:47+00:00| seen|...

CVE-2026-3923

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 03:50:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214163774152917 2026-03-12 22:01:06+00:00| seen|...

CVE-2026-3919

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:03:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214214929795362 2026-03-12 21:50:05+00:00| seen|...

PT-2026-24924

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

Linux Distros Unpatched Vulnerability : CVE-2026-3939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF fil...

WordPress plugin Timetics 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-20046

creationtimestamp| type| source ---|---|--- 2026-03-11 23:50:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213220098846252 2026-03-12 03:00:08+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W 2026-03-12...

CVE-2025-70244

creationtimestamp| type| source ---|---|--- 2026-03-11 23:10:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213062812879067 2026-03-12 08:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgtwm7ojre2u...

GHSA-9JFH-9XRQ-4VWM

creationtimestamp| type| source ---|---|--- 2026-03-11 20:10:06+00:00| seen| https://gist.github.com/alon710/42f2baf7f8222d8e21a959d90dfc0bba...

GHSA-3WF5-G532-RCRR

creationtimestamp| type| source ---|---|--- 2026-03-11 19:40:05+00:00| seen| https://gist.github.com/alon710/50660dc4d55027714a8cd550ac80fb4f...

CVE-2026-32096

creationtimestamp| type| source ---|---|--- 2026-03-11 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32096 2026-03-12 03:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213968591808640 2026-03-31 15:02:41+00:00|...

CVE-2026-20040

creationtimestamp| type| source ---|---|--- 2026-03-11 16:37:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116211519204223592 2026-03-11 23:23:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213113926061059 2026-03-12 03:00:08+00:00| seen|...

CVE-2026-20116

creationtimestamp| type| source ---|---|--- 2026-03-11 16:37:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116211519204223592 2026-03-12 03:00:07+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh...

SUSE CVE-2026-2436

A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the soupserverdisconnect function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a...

CVE-2026-32060

creationtimestamp| type| source ---|---|--- 2026-03-11 15:08:15+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116211167059630084...

CVE-2026-3805

creationtimestamp| type| source ---|---|--- 2026-03-11 06:56:47+00:00| seen| https://mastodon.social/users/bagder/statuses/116209234981784209 2026-03-11 16:40:52+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116211531439936074 2026-03-12 08:02:07+00:00| seen|...