25136 matches found
CVE-2026-14822
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders...
WordPress Event Tickets and Registration plugin < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation vulnerability
Unauthenticated PayPal Order Status Manipulation vulnerability discovered by Minar in WordPress Plugin Event Tickets versions 5.29.0.1...
CVE-2026-14822
CVE-2026-14822 affects the WordPress plugin Event Tickets and Registration prior to version 5.29.0.1. The issue is an missing authorization check on an order-management REST endpoint, allowing unauthenticated users to change the status of existing orders. The CVSS v3.1 base score is 5.3 (Medium) ...
CVE-2026-51240
creationtimestamp| type| source ---|---|--- 2026-08-01 03:48:20+00:00| seen| https://gist.github.com/programmervuln/31acdecc004522f8b490f80cfbcde694...
CVE-2026-54909
creationtimestamp| type| source ---|---|--- 2026-08-01 00:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7tqoc6v5cvlvv 2026-08-01 04:31:50+00:00| seen| https://gist.github.com/alon710/402cd5e451c20f1dfc47c5b8f0cf1ddb...
GHSA-WQQC-JJCQ-VFXM
creationtimestamp| type| source ---|---|--- 2026-07-31 22:32:31+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb...
CVE-2026-50986
PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...
CVE-2026-15976
creationtimestamp| type| source ---|---|--- 2026-07-31 20:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxrap7cbf2z 2026-08-01 20:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bevoq4c2f...
GHSA-5846-7QM3-R52J
creationtimestamp| type| source ---|---|--- 2026-07-31 17:31:37+00:00| seen| https://gist.github.com/alon710/3725c6658b9e4e7f9bed06e9ce214b76...
CVE-2026-18141
creationtimestamp| type| source ---|---|--- 2026-07-31 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkpctbz2n...
How Status Labs Helps Brands Get Cited in ChatGPT: The Data Behind AI Search Visibility
Disclosure: This article was created in collaboration with Status Labs...
SUSE CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
GHSA-XRMJ-5G4G-8987
creationtimestamp| type| source ---|---|--- 2026-07-31 16:33:01+00:00| seen| https://gist.github.com/alon710/e1fe3e68fe3d799c84bb3e82e35d7e46...
CVE-2026-56568
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...
CVE-2026-56568
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...
CVE-2026-56568
The CVE-2026-56568 entry concerns HCL iControl and a vulnerability that exposes verbose client-side API error messages. Affected component: the application’s error handling/display logic may reveal internal endpoint names, request parameters, error codes, and authentication status to users instea...
CVE-2026-56568 HCL iControl is affected by multiple security vulnerabilities.
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...
EUVD-2026-51542
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...
CVE-2026-15722
creationtimestamp| type| source ---|---|--- 2026-07-31 10:12:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c763a3in7urxc 2026-07-31 12:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrwvs7kinr2e...