CVE-2025-60262

creationtimestamp| type| source ---|---|--- 2026-01-06 16:04:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849002942753373 2026-01-06 17:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrgin6mqv2u 2026-01-06 17:57:09+00:00| seen|...

CVE-2025-9294

creationtimestamp| type| source ---|---|--- 2026-01-06 12:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqxtdlv6l2q...

CVE-2026-0640

creationtimestamp| type| source ---|---|--- 2026-01-06 10:25:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115847668271357675 2026-01-06 16:04:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849002942753373 2026-01-06 16:29:01+00:00| seen|...

GHSA-J5VV-P2HV-C392

creationtimestamp| type| source ---|---|--- 2026-01-06 05:03:39+00:00| seen| Telegram/1KywSS9pNEst0ZUnOIrrMzmRFjI63qMIXr1OzeZh2tlqF4...

CVE-2025-14034

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'deletesingleticketcallback' and 'changeticketstatuscallback' functions in all versions up to, and including, 1.2.6. This makes it...

CVE-2025-14034 ilGhera Support System for WooCommerce <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'deletesingleticketcallback' and 'changeticketstatuscallback' functions in all versions up to, and including, 1.2.6. This makes it...

CVE-2025-14034 ilGhera Support System for WooCommerce <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'deletesingleticketcallback' and 'changeticketstatuscallback' functions in all versions up to, and including, 1.2.6. This makes it...

CVE-2025-14034

The vulnerability CVE-2025-14034 affects the ilGhera Support System for WooCommerce WordPress plugin. A missing capability check in delete_single_ticket_callback and change_ticket_status_callback in all versions through 1.2.6 allows authenticated attackers with Subscriber+ privileges to delete ar...

GHSA-8C39-XPPG-479C

creationtimestamp| type| source ---|---|--- 2026-01-06 02:02:01+00:00| seen| Telegram/FEXfoeJAqOIroyUDCRdgqul6wp9Eck5nAsZ9jdmneKfShFo...

GHSA-HGP5-R8M9-8QPJ

creationtimestamp| type| source ---|---|--- 2026-01-06 02:02:01+00:00| seen| Telegram/FEXfoeJAqOIroyUDCRdgqul6wp9Eck5nAsZ9jdmneKfShFo...

PT-2026-1402

Name of the Vulnerable Software and Affected Versions ilGhera Support System for WooCommerce plugin versions prior to 1.2.7 Description The ilGhera Support System for WooCommerce plugin for WordPress has a flaw that allows unauthorized modification and data loss. A missing capability check in the...

GHSA-PHPV-94HG-FV9G

creationtimestamp| type| source ---|---|--- 2026-01-05 21:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844736458981138 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...

GHSA-VRJC-Q2FH-6X9H

creationtimestamp| type| source ---|---|--- 2026-01-05 21:29:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844615213362323 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-24 21:30:51+00:00| seen|...

GHSA-X4M5-4CW8-VC44

creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM 2026-01-24 22:44:03+00:00| seen| https://gist.github.com/alon710/50d1c5074480f85c7f106c1b1c29f2ab...

CVE-2025-52872

creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM...

EUVD-2025-206233

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim, and modify the host header of the request to a malicious value. The victim will...

CVE-2025-64424 Colify has command injection vulnerability in project git source

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a resource, allowing a low privileged user member to execute syst...

GHSA-824X-88XG-CWRV

creationtimestamp| type| source ---|---|--- 2026-01-05 20:34:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844398425652355 2026-01-08 00:04:16+00:00| seen| Telegram/8hg5Gu2QSQMEOVEXvwkuKKrDJKBvTFN3ZFtq0-NHQh3Nk 2026-01-24 21:31:06+00:00| seen|...

GHSA-F8CM-6447-X5H2

creationtimestamp| type| source ---|---|--- 2026-01-05 18:18:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115843866761403958 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...

CVE-2026-0597

creationtimestamp| type| source ---|---|--- 2026-01-05 16:06:04+00:00| seen| Telegram/XZpUXrdgjcWqcZn8MpDZgV9hER-V-zJO0pOaJvkAc1sCxJ4 2026-01-05 17:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbowr4i5vc2q...