CVE-2026-1932

The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment REST API endpoint in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers t...

CVE-2026-0692

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

CVE-2026-0692

The CVE-2026-0692 entry concerns the BlueSnap Payment Gateway for WooCommerce WordPress plugin. Affected component: the plugin (up to version 3.3.0). Root cause: it validates IPN requests by relying on WooCommerce’s WC_Geolocation::get_ip_address(), which trusts user-controllable headers (e.g., X...

CVE-2026-0692 BlueSnap Payment Gateway for WooCommerce <= 3.4.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

CVE-2026-0692 BlueSnap Payment Gateway for WooCommerce <= 3.4.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

PT-2026-8057

The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment REST API endpoint in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers t...

Linux Distros Unpatched Vulnerability : CVE-2026-23210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ice: Fix PTP NULL pointer dereference during VSI rebuild Fix race condition where PTP periodic work runs while VSI is being rebuilt, accessing NULL vsi-rxrings...

WordPress plugin Bookr 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Linux Distros Unpatched Vulnerability : CVE-2026-23177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm, shmem: prevent infinite loop on truncate race When truncating a large swap entry, shmemfreeswap returns 0 when the entry's index doesn't match the given ind...

WordPress Appointment Booking Calendar Plugin plugin <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Appointment Status Modification vulnerability

Missing Authorization to Unauthenticated Arbitrary Appointment Status Modification vulnerability discovered by MD. TAREQ AHAMED JONY itztrq - Knight Squad in WordPress Plugin Bookr versions = 1.0.2...

CVE-2025-68128

reserved but not needed...

CVE-2025-68126

reserved but not needed...

CVE-2025-68125

reserved but not needed...

CVE-2025-58184

reserved but not needed...

CVE-2026-2441

creationtimestamp| type| source ---|---|--- 2026-02-13 19:32:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116064985515242523 2026-02-14 03:53:04+00:00| seen| https://bsky.app/profile/secureblue.dev/post/3mes4ocbhb22m 2026-02-14 07:14:36+00:00| seen|...

CVE-2026-26221

creationtimestamp| type| source ---|---|--- 2026-02-13 17:31:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116064509747811802 2026-02-14 06:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mesdse3ng52h 2026-02-14 06:00:37+00:00| seen|...

GHSA-XX7M-69FF-9CRP

creationtimestamp| type| source ---|---|--- 2026-02-13 01:10:24+00:00| seen| https://gist.github.com/alon710/db853e0a605e11003bf240d589bebc01 2026-02-13 02:07:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mepgcmwkc6o2...

CVE-2024-13619

creationtimestamp| type| source ---|---|--- 2026-02-12 21:03:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovce55yb2s...

CVE-2026-26217

creationtimestamp| type| source ---|---|--- 2026-02-12 16:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meoeev3veh2u 2026-02-12 16:00:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116058489848351725 2026-02-13 09:23:33+00:00| seen|...

CVE-2026-20610

creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodv6xbit2a 2026-02-13 06:02:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116061800413108625 2026-02-13 11:54:30+00:00| seen|...