K000162387: PostgreSQL vulnerability CVE-2026-6476

Security Advisory Description SQL injection in PostgreSQL pgcreatesubscriber allows an attacker with pgcreatesubscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pgcreatesubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18...

EUVD-2026-48131

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

CVE-2026-65530

Technical details for CVE-2026-65530 are not publicly available in the provided documents; the description notes a broken access control in TemplateSpare

CVE-2026-65530

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

EUVD-2026-48105

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65494

CVE-2026-65494 affects WordPress via the Dokan Pro plugin ≤ 5.0.2, with a Subscriber SQL Injection vulnerability. The connected data confirms the affected component and the vulnerability class (SQL injection) but does not provide exploit details, affected tables/parameters, or a patch/version to ...

EUVD-2026-48104

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65493

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

EUVD-2026-48102

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

CVE-2026-65491

Technical details for CVE-2026-65491 are not publicly available in the provided documents; monitor for updates.

EUVD-2026-48090

Subscriber Broken Access Control in Reviewer = 3.14.2 versions...

EUVD-2026-48089

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

CVE-2026-65478

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

EUVD-2026-48075

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

CVE-2026-65457

Technical details about CVE-2026-65457 are not publicly available in the provided documents; monitor for updates.

EUVD-2026-48222

Subscriber Broken Access Control in ЮKassa для WooCommerce = 2.16.1 versions...

EUVD-2026-48196

Subscriber Remote Code Execution RCE in Advanced Views = 3.8.11 versions...

CVE-2026-59541

Affected software: WordPress WP BASE Booking plugin

EUVD-2026-48195

Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...

EUVD-2026-48194

Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...