CVE-2026-0793

creationtimestamp| type| source ---|---|--- 2026-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-015/ 2026-01-09 17:15:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115866267395234635 2026-01-23 03:54:23+00:00| seen|...

CVE-2025-14886

CVE-2025-14886 concerns Japanized for WooCommerce for WordPress. It is a data modification vulnerability due to missing capability check on the order REST API endpoint, affecting all versions up to and including 2.7.17. Unauthenticated attackers could mark any WooCommerce order as processed/compl...

CVE-2025-14886 Japanized for WooCommerce <= 2.7.17 - Missing Authorization to Unauthenticated Order Status Modification

The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the order REST API endpoint in all versions up to, and including, 2.7.17. This makes it possible for unauthenticated attackers to mark any WooCommerce order a...

CVE-2025-14886 Japanized for WooCommerce <= 2.7.17 - Missing Authorization to Unauthenticated Order Status Modification

The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the order REST API endpoint in all versions up to, and including, 2.7.17. This makes it possible for unauthenticated attackers to mark any WooCommerce order a...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the UpdateStatus cycle of VM controller in virt handler that fetches all the guest interfaces from QEMU guest agent and adds them to interface status of the VMI. An attacker can disrupt...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the UpdateStatus cycle of VM controller in virt handler that fetches all the guest interfaces from QEMU guest agent and adds them to interface status of the VMI. An attacker can disrupt...

PT-2026-1756

Name of the Vulnerable Software and Affected Versions Japanized for WooCommerce versions up to and including 2.7.17 Description The Japanized for WooCommerce plugin for WordPress is susceptible to unauthorized data modification. A missing capability check on the order REST API endpoint allows...

PT-2026-2166

Name of the Vulnerable Software and Affected Versions wpDiscuz versions prior to 7.6.47 Description The software contains a stored cross-site scripting issue that permits authenticated attackers to inject malicious JavaScript. This is achieved by importing a specially crafted options file...

WordPress Japanized for WooCommerce plugin <= 2.7.17 - Missing Authorization to Unauthenticated Order Status Modification vulnerability

Missing Authorization to Unauthenticated Order Status Modification vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Japanized For WooCommerce versions = 2.7.17...

GHSA-9583-H5HC-X8CW

creationtimestamp| type| source ---|---|--- 2026-01-08 21:03:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115861500887450169 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o 2026-01-24 21:24:48+00:00| seen|...

CVE-2019-25270

creationtimestamp| type| source ---|---|--- 2026-01-08 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwrzwi22...

GHSA-9726-W42J-3QJR

creationtimestamp| type| source ---|---|--- 2026-01-08 17:27:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860651322623960...

RHSA-2026:0367

creationtimestamp| type| source ---|---|--- 2026-01-08 16:25:33+00:00| seen| https://gist.github.com/Darkcrai86/c886d0bef05069c3b8c8c5ccaada8d36...

GHSA-527X-5WRF-22M2

creationtimestamp| type| source ---|---|--- 2026-01-08 15:56:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860292583544490 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc...

GHSA-XFRJ-C749-JXXQ

creationtimestamp| type| source ---|---|--- 2026-01-08 15:41:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860235130064905 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc...

GHSA-C4CH-XW5P-2MVC

creationtimestamp| type| source ---|---|--- 2026-01-08 15:13:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860126536933892 2026-01-08 16:03:29+00:00| seen| Telegram/eK7Ikx8B4zhc3RXJcMY-EZtQzuwPO0YG4YMu0LZCUnsVEJo...

CVE-2025-65731

creationtimestamp| type| source ---|---|--- 2026-01-08 15:00:07+00:00| published-proof-of-concept| Telegram/3-wbVOTdAjOivPyAG2QBt9XaBCAIVLRCc7I1h87YthbEus 2026-01-08 18:38:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860932712116561...

CVE-2025-3950

creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66qsi4d2u 2026-01-09 13:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbykt5fduq2u...

RHSA-2026:0251

creationtimestamp| type| source ---|---|--- 2026-01-08 07:55:33+00:00| seen| https://gist.github.com/Darkcrai86/db1dd30030a5415a647cf6a8245e2c88...

GHSA-8947-PFFF-2F3C

creationtimestamp| type| source ---|---|--- 2026-01-08 01:03:43+00:00| published-proof-of-concept| Telegram/2ek7eyEQkPBVmoE9OK31C8c0inA6djA7KhdWeXyx-F04 2026-01-08 15:30:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860190037900143...