EUVD-2026-69854

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

EUVD-2026-69853

The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...

CVE-2026-81426

The WC Vendors WordPress plugin (versions before 2.7.2.1 ) is missing CSRF protection on some front-end order shipment status actions. An attacker can craft a request that causes a logged-in vendor to unknowingly change the shipment status of their own orders, resulting in a low integrity impact ...

WordPress WC Vendors plugin < 2.7.2.1 - Order Shipment Status Change vulnerability

Order Shipment Status Change vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

CVE-2026-81427 WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

EUVD-2026-69850

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished draft, pending and private...

CVE-2026-69664

creationtimestamp| type| source ---|---|--- 2026-09-02 05:18:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117199752202887468 2026-09-02 12:45:29+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

CVE-2026-84307

creationtimestamp| type| source ---|---|--- 2026-09-02 01:32:29+00:00| seen| https://gist.github.com/alon710/c47c604ce50ae0fa194515af5d7d206b...

CVE-2026-84327

creationtimestamp| type| source ---|---|--- 2026-09-02 00:12:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117198551537914778 2026-09-02 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:51+00:00| seen|...

CVE-2026-84482

creationtimestamp| type| source ---|---|--- 2026-09-01 23:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dkpruwnoj7oab...

CVE-2026-84470

creationtimestamp| type| source ---|---|--- 2026-09-01 21:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fzprk45m7clv5...

CVE-2026-84370

creationtimestamp| type| source ---|---|--- 2026-09-01 21:29:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a6zdr2p3ak4i6 2026-09-01 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muigafg7a724...

CVE-2021-23995

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:46+00:00| seen| https://t.me/hackingAttack/5839 2026-09-02 01:03:22+00:00| seen| https://t.me/hackingAttack/5839 2026-09-08 10:00:06+00:00| seen| https://t.me/hackingAttack/5839 2026-09-09 00:00:33+00:00| seen|...

CVE-2021-1275

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:44+00:00| seen| https://t.me/hackingAttack/7641 2026-09-02 01:03:19+00:00| seen| https://t.me/hackingAttack/7641 2026-09-08 08:00:06+00:00| seen| https://t.me/hackingAttack/7641 2026-09-09 00:00:37+00:00| seen|...

CVE-2021-1506

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:44+00:00| seen| https://t.me/hackingAttack/7641 2026-09-02 01:03:19+00:00| seen| https://t.me/hackingAttack/7641 2026-09-08 08:00:06+00:00| seen| https://t.me/hackingAttack/7641 2026-09-09 00:00:37+00:00| seen|...

GHSA-CMCX-XHR8-3W9P

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:31+00:00| seen| https://t.me/hackingAttack/17172 2026-09-02 01:03:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-07 22:00:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-08 00:00:10+00:00| seen|...

CVE-2020-5243

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:31+00:00| seen| https://t.me/hackingAttack/17172 2026-09-01 20:02:32+00:00| seen| https://t.me/hackingAttack/17160 2026-09-02 01:03:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-02 01:03:06+00:00| seen|...

CVE-2021-35343

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:30+00:00| seen| https://t.me/hackingAttack/18681 2026-09-02 01:03:04+00:00| seen| https://t.me/hackingAttack/18681 2026-09-07 22:00:07+00:00| published-proof-of-concept| https://t.me/hackingAttack/18681 2026-09-08 00:00:23+00:00|...

CVE-2021-29011

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:24+00:00| seen| https://t.me/hackingAttack/23332 2026-09-02 01:02:56+00:00| seen| https://t.me/hackingAttack/23332 2026-09-07 17:00:04+00:00| seen| https://t.me/hackingAttack/23332 2026-09-08 00:00:39+00:00| seen|...