CVE-2026-21680

creationtimestamp| type| source ---|---|--- 2026-01-07 18:30:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbu3z7ag6k2o 2026-01-07 19:09:24+00:00| seen| Telegram/og43KH01Plc8Iyz0Ogz7cm1eiVq8-Qgmh5W6-3KZk71D79o...

GHSA-JC3F-C62G-V7QW

creationtimestamp| type| source ---|---|--- 2026-01-07 17:39:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115855036756832399...

CVE-2025-38482

creationtimestamp| type| source ---|---|--- 2026-01-07 17:06:42+00:00| seen| Telegram/sVG3fpC82FxKBRv0Nf2vv45FH8jpwISx9O3FOAabDouYXI...

CVE-2025-62327

creationtimestamp| type| source ---|---|--- 2026-01-07 15:43:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115854579789971369...

CVE-2026-22540

creationtimestamp| type| source ---|---|--- 2026-01-07 14:33:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115854304322324575 2026-01-07 16:04:37+00:00| published-proof-of-concept| Telegram/C5Pt7uloxKJDrqitQkO17NAOQQ9eE92f4ibyk5mNwogme0 2026-01-07 16:04:53+00:00| seen|...

MINI-8573-FHRJ-MWH4

Bulletin has no description...

CGA-92WC-CRV7-HR38

Bulletin has no description...

CVE-2025-14460

The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized order status modification in all versions up to, and including, 3.1.4. This is due to missing authorization checks on the payment callback endpoint handler when processing the 'fail' callback from the...

WordPress Piraeus Bank WooCommerce Payment Gateway plugin <= 3.1.4 - Missing Authorization to Unauthenticated Arbitrary Order Status Change vulnerability

Missing Authorization to Unauthenticated Arbitrary Order Status Change vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Piraeus Bank WooCommerce Payment Gateway versions = 3.1.4...

CVE-2025-12958

creationtimestamp| type| source ---|---|--- 2026-01-07 09:52:21+00:00| seen| https://gist.github.com/Darkcrai86/bcab615e099df0ce9ef707c9a8ee3e10...

CVE-1999-0628

The rwho/rwhod service is running, which exposes machine status and user information...

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

CVE-2019-12164

ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...

CVE-2025-14460

CVE-2025-14460 affects the Piraeus Bank WooCommerce Payment Gateway for WordPress. The Wordfence entry confirms missing authorization on the payment callback endpoint, allowing unauthenticated attackers to change any order status to “failed” by supplying the MerchantReference (order ID). Versions...

CVE-2025-14460 Piraeus Bank WooCommerce Payment Gateway <= 3.1.4 - Missing Authorization to Unauthenticated Arbitrary Order Status Change

The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized order status modification in all versions up to, and including, 3.1.4. This is due to missing authorization checks on the payment callback endpoint handler when processing the 'fail' callback from the...

CVE-2025-14460 Piraeus Bank WooCommerce Payment Gateway <= 3.1.4 - Missing Authorization to Unauthenticated Arbitrary Order Status Change

The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized order status modification in all versions up to, and including, 3.1.4. This is due to missing authorization checks on the payment callback endpoint handler when processing the 'fail' callback from the...

CVE-2025-14034

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'deletesingleticketcallback' and 'changeticketstatuscallback' functions in all versions up to, and including, 1.2.6. This makes it...

CVE-2025-1766

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'paymentcomplete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated...

CVE-2025-14468

creationtimestamp| type| source ---|---|--- 2026-01-07 08:29:05+00:00| seen| https://gist.github.com/Darkcrai86/73423170bc11519fd3886e82bfa13ff4...

CVE-2025-13521 WP Status Notifier <= 1.0 - Cross-Site Request Forgery to Settings Update

The WP Status Notifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin...