CVE-2026-1173

creationtimestamp| type| source ---|---|--- 2026-01-19 22:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcspie6mxw2t...

WordPress PeachPay - Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) plugin <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification vulnerability

WordPress PeachPay - Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin = 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugi...

GHSA-PJ3M-GMQ8-2R57

creationtimestamp| type| source ---|---|--- 2026-01-19 21:17:56+00:00| seen| Telegram/cDsTcRvxLH3SsCe0HOkAWriHJ6FleQF80u2lFTjRmosN9Yo...

GHSA-WR3C-345M-43V9

creationtimestamp| type| source ---|---|--- 2026-01-19 09:59:15+00:00| seen| https://bsky.app/profile/sublimer.mstdn.sublimer.me.ap.brid.gy/post/3mcrevnz2zq42...

ROS-20260119-7305

A vulnerability in the uvcstatusinit function of the Linux operating system kernel is associated with a memory re-release error. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

CVE-2026-1158

creationtimestamp| type| source ---|---|--- 2026-01-18 20:46:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115918055933218922 2026-01-19 15:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrwseoexj22 2026-01-19 18:11:36+00:00| seen|...

CVE-2026-1143

creationtimestamp| type| source ---|---|--- 2026-01-18 08:22:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115915130385303574 2026-01-19 07:22:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcr4b5rtyo24 2026-01-19 07:22:58+00:00| seen|...

CVE-2026-1064

creationtimestamp| type| source ---|---|--- 2026-01-17 23:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcnrub2oks25...

CVE-2026-0615

The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...

CVE-2025-14757

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions up to, and including, 3.6.9 only when used in combination with Cost Calculator Builder PRO. This is due to the completepayment AJAX action being registered via wpajaxnopriv,...

CVE-2025-14078

CVE-2025-14078 affects the PAYGENT for WooCommerce WordPress plugin (versions up to 2.4.6). The root cause is missing authorization checks in paygent_check_webhook and a paygent_permission_callback that unconditionally returns true, enabling unauthenticated attackers to forge payment callbacks an...

GHSA-GW32-9RMW-QWWW

creationtimestamp| type| source ---|---|--- 2026-01-17 07:36:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mcm43hncml2y 2026-01-18 02:10:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mco27cghyct2 2026-01-24...

CVE-2026-0939

The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possibl...

CVE-2026-0820

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wcuploadandsavesignaturehandler function in all versions up to, and including, 4.1116. This makes it possible for...

CVE-2025-14450

The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'changewalletfundrequeststatuscallback' function in all versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with...

WordPress plugin PAYGENT for WooCommerce has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

GHSA-XFMP-2HF9-GFJP

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:26+00:00| seen| Telegram/cfwlrYjLd2pWKSXxa3WW-gwVhqSDyEtd8vLE4wKBNVvmw...

GHSA-53WG-R69P-V3R7

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:26+00:00| seen| Telegram/cfwlrYjLd2pWKSXxa3WW-gwVhqSDyEtd8vLE4wKBNVvmw...

CVE-2026-23535

creationtimestamp| type| source ---|---|--- 2026-01-16 20:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckvbclzfw2t 2026-01-24 21:24:12+00:00| seen| https://gist.github.com/alon710/06a718f906cedb00a1e00cfb38a77644 2026-01-24 22:29:33+00:00| seen|...

CVE-2026-0615

The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...